Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
File:                     4a6ba250-5086-4d58-8336-494a05894bf9.cer (raw, json)
Hash identifier:          VRQ6pVTfyXxDG3gke4VdIpNXqTvef4axc3m35opcYW8=
Subject key identifier:   CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848DA6971021ADF347383C03680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Feb 2025 01:45:33 +0000
Certificate not after:    Tue 18 May 2027 00:45:33 +0000
Subordinate resources:    AS: 62809
                          IP: 23.128.144.0/22
                          IP: 104.152.136.0/22
                          IP: 104.244.20.0/22
                          IP: 130.51.4.0/22
                          IP: 162.222.28.0/22
                          IP: 162.251.124.0/22
                          IP: 199.184.14.0/23
                          IP: 199.202.232.0/23
                          IP: 2605:2a40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:69:71:02:1a:df:34:73:83:c0:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 12 01:45:33 2025 GMT
            Not After : May 18 00:45:33 2027 GMT
        Subject: CN=4a6ba250-5086-4d58-8336-494a05894bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:38:a2:e3:99:ef:40:d1:57:22:93:16:72:
                    ef:f4:4c:f0:00:55:25:66:db:3c:7d:74:d4:18:b5:
                    f5:0b:3d:45:c6:b2:5c:4e:b5:ec:a7:ef:f2:cf:9f:
                    9d:88:9a:a8:f8:ab:36:bc:8f:0f:66:dd:fa:d0:cb:
                    b5:f3:f7:20:5b:5b:73:c4:5c:46:72:d1:1e:fa:ff:
                    9e:86:9c:b2:e1:36:47:49:3f:db:22:7a:c8:34:10:
                    2b:f1:d8:3b:65:ed:a8:5f:1a:a7:ca:d2:8c:4e:d4:
                    64:05:58:f9:96:e7:13:03:e0:4a:8d:25:ea:63:7d:
                    52:3a:3c:7b:f6:9d:4c:ae:91:6e:c8:ff:e5:6d:c0:
                    9b:ef:1f:e5:fa:46:c1:b6:4d:3d:d3:4d:32:0c:bc:
                    be:37:e3:5e:e4:6a:e6:75:be:f3:ce:a8:f8:0a:ff:
                    fe:44:7f:6f:e6:f5:c4:8c:9c:d6:91:e3:cd:c6:44:
                    a0:a8:49:df:ed:ae:72:d6:17:46:f0:9b:a6:b1:e0:
                    c1:95:57:75:f4:a8:86:29:39:84:0c:d5:ac:db:35:
                    d0:fc:1b:0a:1b:ed:ee:10:67:98:b3:6f:11:ad:df:
                    5d:3d:4e:5b:52:df:86:af:68:f7:e0:7d:a9:72:b8:
                    a9:da:95:31:ef:9a:7b:b4:e9:45:7f:6a:80:58:8f:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.144.0/22
                  104.152.136.0/22
                  104.244.20.0/22
                  130.51.4.0/22
                  162.222.28.0/22
                  162.251.124.0/22
                  199.184.14.0/23
                  199.202.232.0/23
                IPv6:
                  2605:2a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:8c:7a:26:d4:1f:69:53:d0:3f:08:34:a1:bb:04:b2:4e:
         e7:26:5b:54:10:c0:62:a8:66:d8:be:87:22:46:d3:a1:d7:69:
         e4:3f:6b:a5:70:0c:67:2a:b8:d0:8d:61:a1:af:b7:c5:aa:ce:
         f0:93:33:c8:ba:5c:6d:d6:e3:37:c7:37:9d:16:3f:e2:b6:c8:
         93:a9:44:11:94:87:41:ff:da:71:5e:a5:d6:a6:f0:ef:13:e7:
         2d:9e:75:56:71:de:45:22:08:7e:3c:61:78:f0:94:d9:c8:00:
         a3:b3:e3:9d:ad:36:e7:b4:97:3e:b1:00:e6:d6:b7:aa:a6:6c:
         e5:bd:a3:70:e9:54:a4:f7:92:f9:c7:d7:3f:d6:c6:d5:9c:ea:
         0c:e9:d6:39:90:8f:b7:18:a8:b4:98:4c:5d:c7:b3:3a:25:cf:
         ae:81:ac:7d:d2:c8:df:e9:d5:78:23:9a:5b:51:51:90:79:5b:
         45:38:3c:e2:e3:d6:f6:2c:4c:c3:0d:45:04:2b:5a:b0:d2:fd:
         1c:d2:79:06:ba:e4:21:24:e0:93:9f:72:c5:b7:97:29:ee:3e:
         b8:0d:c5:5b:3b:37:5a:9f:c3:fb:23:54:dc:37:5c:81:0b:0e:
         a4:c4:0e:88:11:bf:67:65:76:50:64:d9:fb:47:4e:e7:48:a2:
         a0:97:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:07 2025 by rpki-client