Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39.cer
File:                     edc5356b-bdd4-426e-b060-cd4202d71d39.cer (raw, json)
Hash identifier:          dpjA7/VtOQzlS1PYGuPL7/2YbBWom4xcnyO2JyMz6oI=
Subject key identifier:   30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848A293C54BA4DF9CD39F892240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Jan 2025 01:45:34 +0000
Certificate not after:    Wed 28 Apr 2027 00:45:34 +0000
Subordinate resources:    IP: 204.135.0.0/16
                          IP: 206.223.30.0/24
                          IP: 2620:119:4000::/36
                          IP: 2620:1bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:93:c5:4b:a4:df:9c:d3:9f:89:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 23 01:45:34 2025 GMT
            Not After : Apr 28 00:45:34 2027 GMT
        Subject: CN=edc5356b-bdd4-426e-b060-cd4202d71d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:5f:1d:3e:23:50:f7:ff:62:57:6b:fe:8c:
                    5c:45:2b:c9:01:8f:b1:eb:9e:10:d1:fb:f9:e0:1e:
                    df:a2:31:69:16:fe:af:06:f2:c7:20:80:69:d7:34:
                    1c:af:a0:ad:51:d2:5e:5f:bd:17:90:e5:33:6d:e4:
                    3b:65:ed:15:fd:42:ed:45:0d:b5:7c:19:f4:1a:eb:
                    fc:79:fb:95:d7:50:ed:df:87:4f:4f:00:62:dc:00:
                    30:f5:b9:e5:4b:71:e6:20:82:a3:e3:31:44:ef:fb:
                    1c:01:1d:17:d9:d3:17:bb:01:bc:d7:96:f2:63:e8:
                    28:a8:e8:b3:a5:4c:71:17:82:3c:24:3b:e3:22:fc:
                    96:02:55:b1:0b:3f:21:80:8d:cf:05:1c:1a:ad:b4:
                    a9:8f:50:fe:b2:55:5a:70:08:2f:ec:9f:8f:58:7b:
                    1e:b7:61:b9:6d:88:b2:72:57:4c:b1:e1:c3:7c:bc:
                    be:9f:64:23:87:2f:d3:65:6b:85:8d:a9:1b:47:33:
                    ae:fe:95:a6:86:67:fd:e9:74:e3:91:e7:ff:51:5b:
                    7b:b6:aa:50:73:fb:a8:b7:c7:0b:f6:51:85:ba:2f:
                    e4:d8:e4:aa:3e:52:fb:54:86:96:e0:00:c0:96:2b:
                    f1:6d:a4:33:ae:f5:b0:79:68:99:6c:e5:2b:53:60:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.135.0.0/16
                  206.223.30.0/24
                IPv6:
                  2620:119:4000::/36
                  2620:1bc::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:40:0b:1a:b2:10:aa:fc:d9:0e:ce:14:68:de:7f:8b:66:
         99:57:e9:96:7f:63:e2:d8:9b:c1:84:f3:4b:f1:e6:3c:1f:aa:
         ea:c1:d6:43:a7:f2:f5:6c:ba:ea:0f:c7:5e:9a:5c:65:99:b9:
         68:09:70:2a:76:09:5f:3a:75:29:45:c8:85:20:64:c4:2a:34:
         95:08:2a:81:32:c9:68:a3:a7:73:72:e2:ea:c7:ad:87:9d:f7:
         ff:ce:68:6b:a5:15:fc:1b:a2:e7:b7:0c:9d:ae:2a:26:39:5b:
         db:63:36:71:3f:68:87:d2:e6:d6:16:8c:b9:f7:be:00:aa:12:
         29:99:26:b1:a6:ba:b9:dd:b8:e6:69:12:0e:db:57:59:db:f3:
         71:8c:13:25:64:4b:07:40:69:82:ef:94:fd:7e:eb:05:af:9e:
         4c:71:77:68:92:68:47:55:86:c1:36:cb:29:51:1a:90:0c:3f:
         90:3c:b5:82:1a:05:d2:0e:5b:39:dc:99:a2:92:85:21:fe:a5:
         2a:06:43:08:7c:26:2e:06:e2:ab:74:ea:36:37:ce:e2:11:08:
         e0:73:30:38:f1:0d:bc:e4:96:f9:1d:0d:f1:79:5d:41:d2:79:
         01:36:04:ca:d3:01:56:c3:70:e8:82:48:0a:f2:9e:6c:dd:5a:
         67:b2:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:06:08 2025 by rpki-client