Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd.cer
File:                     61b4838c-1edf-4e06-b314-62670a6d2dfd.cer (raw, json)
Hash identifier:          ClcPbfCBOsyIQUyNR84ns3CIfmDbaJXJggG+ek5Ptfs=
Subject key identifier:   F2:91:EB:3F:5A:ED:88:B5:3E:F5:26:7E:96:91:08:CE:63:DA:04:DD
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858492A8EC4C4D39AA132CD1AE740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/61b4838c-1edf-4e06-b314-62670a6d2dfd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 18:45:26 +0000
Certificate not after:    Tue 04 May 2027 16:34:43 +0000
Subordinate resources:    AS: 36529
                          IP: 199.30.241.0/24
                          IP: 2607:cb00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2a:8e:c4:c4:d3:9a:a1:32:cd:1a:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 12 18:45:26 2025 GMT
            Not After : May  4 16:34:43 2027 GMT
        Subject: CN=61b4838c-1edf-4e06-b314-62670a6d2dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:04:b4:d1:75:57:b2:f1:31:c8:d1:c6:df:
                    a6:21:a0:f2:79:3f:90:82:52:10:8c:6b:54:13:28:
                    0e:ca:26:92:d8:05:df:99:6e:b0:b0:c2:d5:2f:a2:
                    61:f8:8e:ff:85:db:8a:19:5f:ca:3c:3d:cb:24:03:
                    2a:0b:43:2a:5c:7f:fb:14:4f:af:c3:3c:0c:fb:ba:
                    05:e2:30:05:fa:10:0d:ac:8e:10:63:a3:ed:1e:d8:
                    ff:4b:a7:92:5a:25:90:88:a3:b4:9e:70:b6:65:8b:
                    8e:1a:48:45:c5:53:dd:d2:ec:cd:28:0c:c9:60:20:
                    eb:d2:01:4f:ca:6d:16:28:2c:2e:b3:84:c9:ce:4b:
                    c8:74:3f:64:ff:16:f8:60:88:d3:73:fe:a7:45:eb:
                    51:41:97:47:db:3f:41:c6:22:fc:ca:12:68:2e:e4:
                    57:02:e0:bd:30:d0:c0:a5:90:eb:8a:72:4b:96:e5:
                    49:f1:1c:32:95:38:ea:32:a8:12:a6:e9:6a:41:6e:
                    f3:75:2a:1c:30:5f:24:ac:51:6c:71:dd:c0:0a:70:
                    7c:dd:d0:a5:8e:39:bb:07:de:b2:ba:db:df:3d:60:
                    bd:1d:e9:1b:f4:b7:9b:21:77:c4:6e:26:88:1f:7f:
                    05:34:58:dd:32:1d:c0:55:1f:d9:1b:8f:4f:6e:3a:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:EB:3F:5A:ED:88:B5:3E:F5:26:7E:96:91:08:CE:63:DA:04:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61b4838c-1edf-4e06-b314-62670a6d2dfd/61b4838c-1edf-4e06-b314-62670a6d2dfd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.241.0/24
                IPv6:
                  2607:cb00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36529

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:76:48:0f:6d:e0:cb:ee:71:83:cd:cc:ca:91:fa:1b:6e:25:
         bf:28:56:05:e3:8f:a2:32:c7:8f:db:5e:3a:42:86:ee:d9:f9:
         0f:35:cc:12:b7:fd:f3:45:76:c6:b0:36:aa:b2:4e:ae:c7:d9:
         2f:83:e9:a6:b3:6a:5b:84:6e:29:be:99:a0:db:03:fc:b8:51:
         78:e1:79:d4:03:97:27:27:80:d9:ae:36:dc:d7:3d:d3:63:b9:
         3f:e6:fc:e4:a2:40:08:07:7e:e7:97:72:ca:d3:23:91:09:b4:
         3d:b7:ea:6a:51:e9:f6:05:cc:ad:8b:9d:27:bb:6b:1e:e4:9e:
         cb:04:02:e7:bd:52:e3:3f:6d:52:5c:5a:0d:b4:ed:8a:78:4e:
         ab:26:a3:7c:5a:40:cb:c6:a8:60:9f:30:05:2d:b1:7b:1d:e4:
         04:cd:46:de:1a:1d:b9:af:22:df:37:4f:8c:c3:f1:d2:a7:b3:
         e6:8e:9e:8e:be:53:2e:88:14:4b:3e:6a:47:fb:d7:c5:0d:55:
         8d:68:cb:fc:35:fd:9d:ab:82:8e:90:8f:41:b4:a5:26:52:94:
         a2:4c:79:33:91:6c:93:45:66:e1:74:e0:e2:20:40:be:2b:c6:
         2e:8c:ba:b7:83:1b:c3:21:0a:1d:59:6b:05:f2:a3:e5:4c:00:
         df:ca:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:45 2025 by rpki-client