Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer
File:                     8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer (raw, json)
Hash identifier:          WtDxUh8/yli1mCSewto2Vbu24nHHxXxSahC7uaCC68c=
Subject key identifier:   CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848EBA0A076350943D5D41F8880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 05:45:30 +0000
Certificate not after:    Mon 24 May 2027 04:45:30 +0000
Subordinate resources:    IP: 23.133.236.0/24
                          IP: 2602:f6ff::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:a0:a0:76:35:09:43:d5:d4:1f:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 18 05:45:30 2025 GMT
            Not After : May 24 04:45:30 2027 GMT
        Subject: CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:fa:7f:35:a9:37:59:3b:bd:25:06:74:9e:
                    f4:4a:c3:4d:1e:32:d8:98:53:91:ae:da:eb:42:c2:
                    db:4b:8e:bb:a0:05:7a:85:00:e0:84:68:7d:a5:b5:
                    9a:06:a2:22:8a:5b:09:d6:66:96:30:c2:ab:0c:e4:
                    67:01:3f:9d:1e:44:53:f3:d4:43:73:c7:dc:ae:bd:
                    4b:d6:9a:a1:f0:4e:2d:6e:9a:29:f0:50:62:7a:4c:
                    bd:3e:19:d7:54:a9:65:64:fe:3f:c8:50:37:d9:20:
                    0a:c0:d5:a7:bc:0f:0e:72:0d:09:fe:11:65:c7:8d:
                    39:3b:c5:07:60:fc:4c:19:19:3c:32:17:9e:0b:7c:
                    f0:59:90:87:f0:75:08:01:5e:b4:d7:e0:85:2c:45:
                    81:27:dc:6a:12:e7:2f:c5:4b:97:c8:68:2f:49:16:
                    2b:97:22:6b:25:dd:c3:e0:25:75:4d:84:a0:c8:d3:
                    ff:0e:41:32:df:64:d7:bd:6e:8a:98:40:66:7c:a4:
                    94:dd:03:ea:94:58:05:86:8a:0a:ab:27:f3:20:d8:
                    00:bc:35:7a:0e:dd:d8:88:e2:f0:89:52:81:ed:f4:
                    ac:c4:52:3f:e8:e2:fc:20:93:a3:b6:f2:da:98:75:
                    29:df:49:bf:f0:73:e4:84:27:58:ff:eb:26:81:09:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.236.0/24
                IPv6:
                  2602:f6ff::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2c:5f:6e:92:26:92:69:dd:f2:47:47:a8:5e:d6:6f:b9:15:
         72:6d:00:d1:75:38:bd:37:3e:5f:83:60:31:45:fe:cc:02:5a:
         b0:51:f1:ad:0c:2b:5d:e4:46:0c:97:84:7c:b2:67:f1:d3:27:
         01:09:73:ec:30:b5:15:a0:23:b3:b3:16:e2:a0:4a:0f:99:f4:
         48:d9:7b:a1:7d:e5:22:d7:47:42:53:8a:79:66:ed:28:a1:19:
         d0:36:69:f3:9e:d9:61:f8:c6:79:e3:76:04:4c:77:27:a0:12:
         e9:db:ae:d3:32:0a:91:dd:9c:86:19:d6:ee:8f:07:88:e2:61:
         16:3d:3b:98:b7:da:c9:8f:00:b0:22:39:e5:d3:4c:d8:2a:ca:
         f5:f0:35:bf:3d:c4:b2:c1:6a:06:bf:87:c0:77:7b:31:64:8c:
         35:4b:ae:7c:af:57:07:52:3b:76:94:78:ec:3d:32:d5:42:01:
         ac:c2:b1:97:21:e2:a1:96:71:8d:81:2a:4b:c3:98:92:62:96:
         b9:c6:84:9f:dd:98:a8:b7:d2:2a:55:66:49:d7:27:85:4d:14:
         74:6a:0a:c6:07:44:72:b2:e9:af:3d:27:d7:63:fd:83:a9:14:
         4b:69:da:26:bd:62:60:00:fe:ea:01:1b:d9:ff:f6:22:10:76:
         a9:8f:74:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:27 2025 by rpki-client