Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
File:                     351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer (raw, json)
Hash identifier:          lV7aHmDM1ndGQx/0RKfQ5HY1juCFnkHmrW90HyAVyvA=
Subject key identifier:   10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority key identifier: F7:AF:85:9C:C5:87:97:D0:48:7A:5E:98:0F:A5:AB:19:66:D3:C9:27
Certificate issuer:       /CN=d7058b26-d77c-4005-8cb8-f5876d4c0d15
Certificate serial:       010D0C9F43285848D904186AA400D642B2420E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 11 Feb 2025 13:45:33 +0000
Certificate not after:    Mon 17 May 2027 12:45:33 +0000
Subordinate resources:    AS: 19039
                          IP: 162.217.24.0/21
                          IP: 199.68.216.0/22
                          IP: 199.101.168.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:04:18:6a:a4:00:d6:42:b2:42:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7058b26-d77c-4005-8cb8-f5876d4c0d15
        Validity
            Not Before: Feb 11 13:45:33 2025 GMT
            Not After : May 17 12:45:33 2027 GMT
        Subject: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:be:bf:cc:db:1f:93:a2:84:1c:44:ff:a4:
                    6a:2d:e7:b1:87:20:61:29:0b:b0:f2:c4:ff:6a:42:
                    21:9c:bb:79:64:57:d8:d3:ce:b2:da:8a:6c:b0:cf:
                    86:47:9a:f5:7f:7f:62:64:f4:00:05:63:f3:7b:e8:
                    f8:20:f5:03:bf:b7:2b:5b:16:e2:8b:73:c6:ea:c8:
                    76:33:23:1c:e3:3a:0c:c8:19:ad:0d:00:e9:d9:24:
                    57:3e:0f:f1:75:cb:ad:1f:67:9b:46:89:cc:5d:12:
                    60:9c:57:4e:01:2a:81:9c:f8:7b:18:11:4a:18:9f:
                    c8:9c:1e:78:b2:f4:1f:82:c9:b4:b8:24:8b:34:ea:
                    97:06:de:ac:d7:c8:e7:a5:79:5d:f1:87:36:39:fb:
                    e9:92:25:87:c3:6e:3c:46:48:03:c6:7e:85:07:39:
                    8a:c3:e0:df:fe:56:32:d4:09:c7:85:29:a0:ba:c5:
                    ee:7d:aa:b3:b9:93:d5:7d:e3:21:b2:f8:e4:e2:42:
                    9b:b5:40:6d:35:16:6a:81:0e:cb:02:c8:76:6e:da:
                    67:00:12:9a:6f:27:c8:04:55:ad:b1:45:11:88:1d:
                    49:d2:9a:d6:18:76:f6:a3:2d:a1:c5:5f:0a:7a:f9:
                    bc:c9:3e:c2:1f:73:f9:2f:c8:be:34:cc:26:2f:c9:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:85:9C:C5:87:97:D0:48:7A:5E:98:0F:A5:AB:19:66:D3:C9:27

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.24.0/21
                  199.68.216.0/22
                  199.101.168.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19039

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:04:69:ad:36:44:22:fa:0a:83:f7:6e:37:ef:1d:ff:3a:
         18:d1:69:2f:0e:79:07:df:10:9e:8e:56:3f:ce:6d:55:2d:6e:
         49:bb:06:55:bb:6c:bc:36:92:ca:53:8b:46:e7:9e:0d:9f:76:
         47:81:9d:42:4b:5e:66:20:b0:9c:e3:fe:b1:20:ce:a5:8b:2c:
         cf:a6:06:76:f8:a0:5b:a0:6c:8f:ee:f7:83:a4:a6:56:c7:21:
         cd:0f:55:2d:24:2c:b7:2c:4f:b2:aa:6f:5b:be:ce:62:37:e2:
         4f:f9:22:0f:9f:07:39:fb:b1:07:c9:10:9e:38:40:c3:fc:82:
         85:60:ae:d7:25:d3:a4:78:2a:2f:8b:42:18:9c:40:07:e4:3b:
         c4:76:8a:fe:00:62:e7:2f:da:8a:b7:4c:cf:78:fe:cc:ff:38:
         94:e9:7b:3f:37:23:fe:93:14:39:ca:26:08:56:2f:c2:02:71:
         31:f0:e1:9c:a4:cb:de:67:31:50:0e:e6:67:ab:c1:82:7f:d9:
         f8:74:41:75:a8:bd:bd:bb:ed:b3:73:a0:78:7d:31:0b:a8:e3:
         a0:87:b9:ce:65:72:bc:33:14:67:11:28:ea:7e:f0:3f:8e:ae:
         39:da:af:ce:9f:3a:18:b0:48:ad:02:b2:96:c1:ce:5b:b4:fd:
         bf:e1:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:32 2025 by rpki-client