Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer
File:                     252bb797-8be3-4178-8149-ed86949ba85a.cer (raw, json)
Hash identifier:          +PnZljoaCo4nET5bUlbmH4FzWz4z3zWYGhSw02xT6GU=
Subject key identifier:   99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858487A2F19A7DFE8C00CEA881C38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Jan 2025 14:30:24 +0000
Certificate not after:    Tue 13 Apr 2027 13:30:24 +0000
Subordinate resources:    IP: 24.50.160.0/19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:2f:19:a7:df:e8:c0:0c:ea:88:1c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan  8 14:30:24 2025 GMT
            Not After : Apr 13 13:30:24 2027 GMT
        Subject: CN=252bb797-8be3-4178-8149-ed86949ba85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:b5:df:9e:80:77:cb:8f:32:d8:6a:4d:b2:
                    2b:70:2b:9e:70:95:0d:9a:7b:34:f5:8a:d8:56:34:
                    3e:33:32:a6:ec:2d:b5:ce:84:81:02:1c:40:94:81:
                    d5:83:dc:97:88:2d:43:77:56:e5:d4:40:b8:c5:25:
                    12:37:2c:28:ca:09:35:7b:43:00:da:14:d4:95:34:
                    08:36:d8:bf:5e:27:70:98:65:66:a0:d2:db:dc:4a:
                    83:92:b7:b7:b5:06:48:ec:5e:14:41:5a:07:cf:51:
                    de:26:40:ff:2b:33:ce:69:97:00:65:3f:94:96:49:
                    01:5d:2d:68:c0:81:7a:f1:dd:20:b1:88:4d:cc:9a:
                    ca:00:d0:b1:f6:72:66:af:83:3f:da:cb:93:58:9a:
                    36:13:ea:38:96:71:18:31:24:10:cb:eb:e4:3c:a4:
                    f1:f8:19:d1:04:7f:96:62:f6:22:c2:91:3e:52:54:
                    87:8a:61:4f:84:c2:f9:1f:4f:99:ef:7f:c4:df:b6:
                    26:fa:08:d1:ae:01:17:f7:01:c0:3f:4a:cd:9c:89:
                    ed:72:74:1c:bc:79:42:f4:e7:2d:37:e3:ee:3d:4e:
                    f8:b8:07:e8:6a:07:c1:dd:6e:55:99:78:51:94:d5:
                    3c:d8:22:2a:dd:2e:01:ae:d9:e0:71:df:3b:27:f3:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.50.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2f:9c:fd:d6:5c:00:be:36:23:66:a1:75:dd:52:0c:17:2a:
         d7:c3:68:a0:b2:0e:28:eb:04:0a:fa:d6:8f:09:a5:90:e2:4e:
         65:3f:fa:a3:96:c6:b5:8f:c1:6c:cc:6b:39:57:65:9a:b3:bd:
         e5:fe:af:7c:08:b0:c0:e5:a8:7e:84:63:7d:0b:ab:8b:d4:e6:
         e3:68:3b:ee:7b:ec:c5:a8:1d:33:f5:ce:4a:6c:83:64:29:5b:
         06:c8:ea:58:06:a3:65:dd:d8:44:95:28:ad:da:55:6d:32:5d:
         28:3d:da:3f:85:ee:83:d1:ac:51:64:6e:0f:8e:77:46:2b:0b:
         5c:a9:65:b9:7f:09:ab:50:b1:20:f5:65:ae:ad:bf:e0:ae:47:
         4c:a9:04:4b:25:79:16:26:f9:75:33:db:ec:64:5d:d9:01:7b:
         dc:ea:ee:c3:41:d8:89:2b:ac:73:ad:04:9d:86:5c:3a:2a:19:
         7a:fe:17:b6:48:d1:e2:de:b1:11:33:c9:e9:6e:86:c5:e6:3e:
         b5:a5:1c:dc:df:b6:c5:a0:ab:5a:95:fd:ee:b5:55:fc:13:5b:
         6c:a9:5b:91:48:8e:e9:96:17:64:22:55:c5:31:3d:dd:08:cf:
         39:31:82:ed:66:c5:15:64:15:52:a3:b3:74:6f:93:87:5e:84:
         30:7b:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:36 2025 by rpki-client