Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45.cer
File:                     f621e93b-af72-4dc7-bd05-abfaefba3c45.cer (raw, json)
Hash identifier:          /ZXzwEWnt4L2uXWDYO0e/fN1BXXIoehgomJT6vSAC9A=
Subject key identifier:   E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848F8857E12F8C97A2508A5E3A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 22 Feb 2025 20:36:20 +0000
Certificate not after:    Fri 28 May 2027 19:36:20 +0000
Subordinate resources:    AS: 40958
                          IP: 23.135.12.0/24
                          IP: 2602:81b:2000::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f8:85:7e:12:f8:c9:7a:25:08:a5:e3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 22 20:36:20 2025 GMT
            Not After : May 28 19:36:20 2027 GMT
        Subject: CN=f621e93b-af72-4dc7-bd05-abfaefba3c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:30:2f:94:81:fd:2c:4c:63:4b:e3:ad:dd:
                    06:d0:fb:27:f9:a4:0a:68:7e:92:c1:21:6b:de:2c:
                    4a:a5:09:c4:40:b4:54:54:f0:38:46:a6:0a:7f:b6:
                    d5:5c:11:e0:26:1f:f0:75:29:0d:b3:ec:aa:ac:2f:
                    5c:96:c7:be:22:d2:e7:86:1e:9b:9d:9a:83:09:e0:
                    4d:90:06:a7:01:24:32:3b:bd:65:69:f2:41:9b:c4:
                    f8:04:9a:c3:10:38:82:e5:ec:a4:2b:aa:70:3a:0d:
                    3e:04:37:2f:6f:eb:04:7c:b8:2a:72:5d:22:77:94:
                    d6:56:e2:7d:04:d1:89:66:2c:dc:d5:90:a5:12:a0:
                    6a:42:68:54:03:26:6d:f4:ec:13:c5:97:08:22:53:
                    c8:72:ca:14:a0:73:c1:33:9a:c8:79:68:cc:1a:b5:
                    af:8b:bd:f6:8d:a9:30:9d:9e:03:a9:10:85:66:f7:
                    1e:51:78:d4:77:74:c8:64:0b:6f:8d:3d:02:5c:f1:
                    ce:d4:37:11:b8:cf:de:3c:07:6a:ee:90:23:f0:2b:
                    56:93:a9:f9:b8:68:e1:b5:f0:48:b3:9c:8e:23:18:
                    e5:c1:85:33:28:a2:b9:73:3f:e0:7e:60:fb:c0:ef:
                    88:db:9c:43:e6:23:59:40:31:be:f4:de:e4:0a:05:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.12.0/24
                IPv6:
                  2602:81b:2000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40958

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:62:87:d1:c8:4f:6c:8f:94:4c:3a:1d:ad:d9:92:7f:17:
         c8:07:b3:bf:c7:b5:fe:7f:db:a1:27:f6:60:c9:7c:6f:6f:b3:
         1c:89:40:9d:1e:71:fa:d0:d9:b3:06:07:d9:be:d7:8d:77:14:
         fb:36:d4:aa:62:94:4d:04:82:92:05:f3:4f:34:fd:5b:8c:d7:
         7a:59:39:3a:10:8c:1a:f5:8f:bf:c8:53:66:62:80:9a:e0:a1:
         e4:8e:05:f3:d6:5c:95:f6:72:b2:5c:13:21:de:51:fc:35:8c:
         6f:c1:cd:1f:12:d4:78:20:4a:ed:81:5e:83:ac:af:5b:e7:7d:
         3e:96:33:2d:6a:c6:8a:8c:1e:d6:09:6a:ae:c2:6d:79:69:86:
         7f:f2:3e:aa:4e:61:f2:45:43:03:0a:69:9d:b2:df:f0:cb:7d:
         90:ee:50:b6:bb:6e:a2:d5:70:57:be:90:53:24:2d:6a:c5:3a:
         da:56:27:d9:a1:6e:52:b8:3d:06:a3:27:c5:01:89:3c:7f:b8:
         40:79:a4:56:16:99:ae:27:3f:2e:83:1d:1c:e1:6f:d8:1d:f8:
         d4:24:2b:dd:60:2d:cc:14:fd:68:3b:59:85:da:c2:be:d8:74:
         97:1c:98:48:b6:fd:41:dd:46:48:95:6b:03:f8:ca:ad:68:c2:
         7c:7c:4d:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:40 2025 by rpki-client