Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96.cer
File:                     b81fd917-6002-4314-85ac-1016672b3f96.cer (raw, json)
Hash identifier:          UxBK27qZn0EGWqzQQ8wZk5OEGmY7zyHC8h3Dt8W/VnA=
Subject key identifier:   E9:D3:A7:B6:75:C6:7E:97:9C:6B:B6:8D:6A:0A:01:74:AC:F6:48:EF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848EB298CE662E63D5C067BEA60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/b81fd917-6002-4314-85ac-1016672b3f96.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 01:45:34 +0000
Certificate not after:    Mon 24 May 2027 00:45:34 +0000
Subordinate resources:    IP: 162.208.17.0/24
                          IP: 206.130.43.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:29:8c:e6:62:e6:3d:5c:06:7b:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 18 01:45:34 2025 GMT
            Not After : May 24 00:45:34 2027 GMT
        Subject: CN=b81fd917-6002-4314-85ac-1016672b3f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:94:33:5f:6a:00:75:c0:ce:8a:f3:1e:8a:
                    d8:99:3b:ff:fe:59:0c:e3:f3:c4:61:2b:ee:92:e2:
                    1c:a2:48:ab:8f:d8:39:9b:91:0b:75:27:e4:32:98:
                    de:37:20:d8:fd:d9:cf:1e:89:d8:bb:ee:06:42:4b:
                    6c:8e:bd:78:be:4f:05:e2:64:2d:77:a6:37:ff:98:
                    67:ea:58:90:78:64:67:a8:d4:52:a5:20:d9:df:ef:
                    9e:62:01:a0:e0:b2:2c:6b:93:7d:24:4c:f1:f6:63:
                    b6:68:2b:0b:0e:a3:08:17:55:7e:23:08:ce:96:48:
                    01:1b:5e:f0:b6:fd:9e:ff:ea:dc:ef:bc:87:ad:c4:
                    68:a5:f4:c7:cd:7a:9c:5e:d9:04:da:d9:e5:78:2c:
                    82:dd:86:a3:22:41:b4:16:6f:68:b8:d2:87:ac:71:
                    fa:52:aa:fb:66:a1:2a:1a:b0:f3:b3:2b:24:79:e3:
                    3f:d2:82:b5:68:16:98:35:bd:76:e3:f6:67:e4:92:
                    71:12:60:42:7d:c9:ad:f2:ae:ba:04:8e:d8:c4:f1:
                    8d:c4:52:15:9f:cf:d0:82:88:17:c4:99:3a:5b:4b:
                    2d:c7:80:28:6c:a8:8e:e2:dd:33:06:91:08:f8:ca:
                    b1:7a:f7:75:a5:51:3b:e0:b0:14:f8:9d:25:45:ed:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:A7:B6:75:C6:7E:97:9C:6B:B6:8D:6A:0A:01:74:AC:F6:48:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/b81fd917-6002-4314-85ac-1016672b3f96.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.17.0/24
                  206.130.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:f1:1e:c4:23:23:37:b3:04:fe:7d:6c:fd:59:7c:ed:5a:
         2c:60:03:74:8f:0d:80:fd:ec:b7:25:83:18:d2:08:0e:a5:05:
         fb:09:73:4f:c9:a6:fe:2c:f0:c9:07:b0:ac:7e:01:83:bf:39:
         0f:3f:50:e4:59:a1:02:14:f4:fa:f8:de:34:8a:38:5c:dc:0a:
         4e:47:a1:ec:24:7f:08:27:e0:fb:a9:86:aa:81:ce:c3:27:b2:
         5e:e7:a2:14:1c:f1:fa:80:6c:6c:35:0a:59:2a:5b:78:5e:2a:
         37:de:46:b2:48:a4:12:eb:09:ef:31:6e:8c:42:e2:b0:4a:eb:
         39:49:8d:7a:2a:98:db:61:63:3e:11:14:db:33:f1:20:c7:45:
         31:46:21:8d:0b:4e:f5:97:02:d4:d7:05:7b:48:a5:58:6a:bd:
         f4:75:25:09:cf:60:0b:c8:27:24:81:b8:40:16:22:e7:3d:e0:
         b1:00:bd:00:40:6d:f2:f0:ff:b8:98:70:c3:86:75:86:de:85:
         55:79:c0:70:19:ca:5c:fa:c3:cf:6d:2e:73:ab:7f:bc:4e:73:
         84:e4:22:ee:0a:69:2c:33:c1:0f:8a:79:12:49:3e:f6:57:38:
         81:2d:82:7c:a2:de:8f:b4:64:2f:5b:6e:4c:55:52:eb:6b:ab:
         c5:a6:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:42 2025 by rpki-client