Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
File:                     46c07e76-66d8-48d7-826a-85de29c66a22.cer (raw, json)
Hash identifier:          0fQLjHbZjAnBoP2g62cXnJNRNDl4REnFu3zjKBouSLU=
Subject key identifier:   DA:05:67:51:F0:7F:0E:4A:8C:98:73:1C:95:C9:7F:09:EA:0A:E5:34
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848B1D0B6D3DC7E058342FDC070
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Jan 2025 12:45:30 +0000
Certificate not after:    Sat 11 Apr 2026 00:45:16 +0000
Subordinate resources:    AS: 14651
                          IP: 23.150.8.0/22
                          IP: 140.235.196.0/22
                          IP: 2602:fa94::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:d0:b6:d3:dc:7e:05:83:42:fd:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 28 12:45:30 2025 GMT
            Not After : Apr 11 00:45:16 2026 GMT
        Subject: CN=46c07e76-66d8-48d7-826a-85de29c66a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:c9:1c:46:fb:c7:e6:2d:f9:df:16:a1:96:
                    54:7d:a5:8a:76:67:cb:57:16:6b:e6:23:e0:ad:2e:
                    f5:59:ee:f7:a6:a5:e5:fc:00:19:df:da:17:f0:65:
                    f9:04:98:c1:c7:6d:49:e6:2a:06:c4:1d:7e:b8:96:
                    a9:c2:d4:75:85:c5:68:93:c4:21:46:ef:52:c4:d4:
                    c8:33:de:c4:e0:6e:43:74:48:a9:3e:ae:f0:f8:43:
                    b0:d7:03:76:ad:e2:55:0b:0d:2e:aa:83:f9:40:27:
                    49:7b:84:33:97:13:19:18:e6:16:e5:9f:f4:0b:c5:
                    0d:d6:ca:73:64:3b:82:fa:8e:9e:4a:f9:f0:b4:25:
                    78:08:21:2f:f8:c5:1c:e9:64:32:4e:db:f2:87:d9:
                    4a:46:a2:f9:86:f7:6b:70:c9:ef:f1:61:c4:87:e5:
                    0e:76:f5:df:f3:1d:2c:24:f9:07:13:1c:83:cc:13:
                    cf:3b:67:40:97:a6:ba:b1:37:84:26:a7:c7:1b:6d:
                    b5:24:d5:ba:88:5b:0e:d9:d3:fc:49:a1:70:d2:98:
                    48:00:9c:c0:85:9c:4c:25:4e:98:69:b1:04:8a:9e:
                    57:40:01:89:b7:a5:db:33:f0:e5:7b:8c:80:e6:e0:
                    f8:91:2e:5f:78:b9:a8:1c:55:d4:32:ef:28:ff:dd:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:05:67:51:F0:7F:0E:4A:8C:98:73:1C:95:C9:7F:09:EA:0A:E5:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22
                  140.235.196.0/22
                IPv6:
                  2602:fa94::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14651

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:a3:31:8e:8f:0e:f1:b0:06:bd:6e:bd:c9:db:4f:8e:b5:
         35:89:1c:13:86:6e:1c:a4:15:a4:46:0a:04:6b:28:a9:50:ed:
         33:24:a6:4b:22:b2:0b:1a:9f:eb:9c:25:7c:06:f3:d4:c5:55:
         f8:fa:73:93:e7:b4:18:ec:82:c4:35:20:6f:ca:1c:f8:54:45:
         34:e9:b3:da:6d:37:85:49:ec:73:e2:94:f0:46:a6:26:24:71:
         67:c4:0e:c2:1f:7d:eb:00:52:c3:c5:6a:50:29:8f:39:07:62:
         37:65:be:2f:e2:2a:a7:98:0e:e5:29:65:16:7b:0d:a6:ba:de:
         08:ab:f3:6f:fb:56:dc:be:e0:1d:cc:8f:70:15:e1:81:d0:04:
         20:6f:7f:f0:85:41:48:58:f6:c0:06:7b:17:2c:6a:42:93:15:
         d3:b1:13:70:43:8a:11:46:2c:39:88:94:bd:0e:f4:2d:e3:2c:
         63:a2:b5:76:30:0f:ac:b5:db:bf:2e:c2:0d:dc:ae:53:1c:62:
         cf:2f:c4:d2:75:7a:76:38:dc:ae:a7:46:39:77:d1:3d:9b:bc:
         f6:4d:e4:92:f5:37:5e:b0:bb:1f:69:5b:62:64:07:43:87:0b:
         d8:26:28:a9:f1:10:e3:09:6c:d8:ef:65:26:4e:ce:ce:4f:67:
         d4:ba:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:29 2025 by rpki-client