Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
File:                     09440a93-986f-41da-8723-7b67f81bdbce.cer (raw, json)
Hash identifier:          SqC5t/RJ714y+FAnrpP2O4IrJAETsjD3svTni2mbr9w=
Subject key identifier:   48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285848428023F63FD49818927E3580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 15:48:26 +0000
Certificate not after:    Wed 21 Oct 2026 20:30:29 +0000
Subordinate resources:    AS: 19901
                          IP: 67.144.0.0/14
                          IP: 143.103.0.0/16
                          IP: 146.135.0.0/17
                          IP: 207.48.0.0 -- 207.50.127.255
                          IP: 207.50.160.0 -- 207.50.255.255
                          IP: 208.160.0.0/15
                          IP: 2601:1e00::/28
                          IP: 2607:6c40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:80:23:f6:3f:d4:98:18:92:7e:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Dec 19 15:48:26 2024 GMT
            Not After : Oct 21 20:30:29 2026 GMT
        Subject: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:36:e6:c7:12:1b:6c:ab:2d:b8:cf:e2:81:
                    0c:a9:38:82:d0:cf:54:07:ec:a7:1f:48:89:52:4e:
                    6e:5a:88:7e:cd:69:1e:11:48:50:0a:6f:fa:16:03:
                    d9:1b:30:23:29:db:18:35:80:7d:e9:f5:ba:1d:27:
                    63:43:f5:40:af:91:dc:67:78:d5:24:a1:88:65:e0:
                    a7:93:30:86:0e:9c:22:87:9d:53:2c:b2:0c:27:f2:
                    63:c8:23:68:a8:95:69:f5:9c:2a:b1:c9:9d:c2:37:
                    33:c3:86:fc:08:e1:d6:d2:82:02:20:c5:c9:c2:fe:
                    b9:32:54:fa:df:f4:97:16:c9:e9:b3:9b:2a:f3:1d:
                    85:11:c2:34:fc:ae:5d:09:e7:b1:ee:2b:d1:a1:42:
                    ee:7e:6d:c5:01:40:37:78:35:ae:e5:73:40:d7:da:
                    ae:b6:09:65:52:83:35:bf:34:a9:7c:e8:36:5f:20:
                    fe:8e:17:c2:08:1b:3c:9a:94:49:7e:44:15:77:ae:
                    b8:66:69:7b:f7:59:9a:a1:d1:49:82:4e:cb:e3:df:
                    91:40:57:9d:9e:e3:b2:70:cf:d3:ad:66:4a:82:94:
                    90:09:56:cf:7a:4e:36:c7:db:c7:5c:eb:66:02:e6:
                    52:e6:8f:05:9f:95:a8:2c:aa:52:2c:00:40:c1:60:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.144.0.0/14
                  143.103.0.0/16
                  146.135.0.0/17
                  207.48.0.0-207.50.127.255
                  207.50.160.0-207.50.255.255
                  208.160.0.0/15
                IPv6:
                  2601:1e00::/28
                  2607:6c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19901

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:78:2c:ef:36:40:a7:db:7e:81:1a:e7:59:3d:80:22:a7:d6:
         96:3d:30:35:b2:8c:11:9b:a3:c1:8a:87:27:e5:13:d7:d5:bb:
         7b:fc:2c:4b:a7:25:73:7f:b2:5a:16:42:6f:4a:8e:01:a1:53:
         e5:b8:ae:ea:41:00:8c:00:1f:27:c3:bd:12:35:67:ca:d6:17:
         b7:65:5f:01:a8:0b:ca:67:74:f2:2c:f2:25:8b:96:50:a0:73:
         21:89:ba:e9:09:43:35:61:f3:7e:89:72:9b:e6:7f:43:90:61:
         1a:80:77:e1:b1:e1:63:eb:eb:0a:98:40:a9:69:bd:47:db:58:
         2c:40:7a:fd:1b:53:c4:40:14:cb:74:48:ad:c3:5c:c7:f6:13:
         de:b6:11:90:ae:00:67:27:e1:7a:0f:29:d0:83:3d:c4:53:7d:
         21:3d:a8:20:bb:38:de:97:ff:06:48:b5:48:6f:58:ec:8d:78:
         7b:b2:44:0c:a2:32:36:88:3d:99:c8:83:e5:a2:8d:7a:f2:65:
         91:80:30:c4:17:82:90:f7:a5:81:61:c0:3b:e1:a5:49:94:d6:
         08:ba:0e:ce:08:1b:36:e6:28:e2:2b:67:3b:7d:a3:30:d1:61:
         17:f6:af:fb:b2:7a:3b:ce:35:c0:58:90:ec:ea:c0:53:62:c8:
         e1:20:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:12:24 2025 by rpki-client