Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
File:                     6528c9ac-3735-430d-99f2-7ac01944d688.cer (raw, json)
Hash identifier:          oJaG5hUTGpRp6f1MK4+1Il2bpwFlBPd+m2v/erfgwbA=
Subject key identifier:   64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848646B8CD1E55E972DF466BD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Dec 2024 19:24:25 +0000
Certificate not after:    Mon 09 Feb 2026 01:45:14 +0000
Subordinate resources:    AS: 54696
                          IP: 23.148.152.0 -- 23.148.154.255
                          IP: 216.181.164.0/23
                          IP: 2602:fa9e::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:64:6b:8c:d1:e5:5e:97:2d:f4:66:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 31 19:24:25 2024 GMT
            Not After : Feb  9 01:45:14 2026 GMT
        Subject: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:b1:50:b9:a0:ec:f5:31:26:49:22:a5:28:
                    7f:b3:90:bd:f2:a5:21:c7:c6:d6:b1:6e:c0:6d:15:
                    45:ac:e4:d3:9b:08:ff:7c:e8:4c:cf:ac:15:d9:e9:
                    e8:69:87:f8:73:9c:e1:d5:70:5a:cf:32:f0:06:c3:
                    c5:8b:58:37:dc:62:9b:a1:81:48:dd:05:d1:e8:b9:
                    a3:ef:59:03:33:d0:7d:95:62:c2:c0:da:c9:5f:22:
                    bb:66:13:85:20:29:d2:12:88:55:0e:2a:d9:2d:45:
                    9a:96:f1:9a:a6:61:26:04:7d:50:27:e3:04:a9:c2:
                    4b:6d:27:a2:f8:bd:3d:55:47:08:e4:5a:54:2c:0d:
                    d0:97:4b:34:6b:5b:af:ba:31:a3:67:e9:6e:0d:7f:
                    49:3f:ee:83:2f:c0:a7:f5:0e:da:9e:51:a6:d6:3c:
                    c3:16:33:a5:37:2f:f1:c8:3f:a7:0d:b7:b4:d2:ca:
                    08:8f:68:30:4b:90:9d:53:28:15:9b:6c:6f:23:4a:
                    c7:8b:02:56:0f:a7:35:8a:c9:89:91:f4:c3:3a:3e:
                    4a:12:a0:6f:81:74:79:ac:08:90:ce:a4:51:b3:1b:
                    98:e5:f2:f3:1f:02:98:3f:fc:17:ff:61:81:35:8c:
                    cc:c9:76:b7:08:2f:67:84:60:58:b7:23:25:97:38:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.152.0-23.148.154.255
                  216.181.164.0/23
                IPv6:
                  2602:fa9e::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54696

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:8e:ba:e1:49:05:24:ff:13:8b:93:77:8a:1f:d9:fd:f4:
         31:0a:cc:44:ad:45:3d:58:3a:78:c1:6b:07:05:58:5a:1e:f2:
         55:f7:24:ec:e2:f9:f5:c4:59:a4:af:38:10:a3:03:b3:68:cf:
         eb:b5:05:74:08:91:8e:86:79:cb:f9:31:bb:af:81:2c:31:68:
         e1:8c:57:09:f0:bf:b5:2a:52:9d:d8:94:eb:3d:f4:6d:1b:a8:
         2b:6a:35:5d:90:2b:69:c7:69:8c:07:17:63:6d:45:52:9e:83:
         04:4b:bd:6a:34:fd:f1:d3:e3:92:f3:c1:3f:1e:41:3b:fc:3a:
         d7:bd:a2:72:4c:47:54:87:74:c3:30:d9:59:ea:83:2e:b4:5d:
         60:21:22:71:6a:37:5d:2d:37:7f:af:c9:a3:4d:8c:73:34:d9:
         a7:65:9e:1d:05:0e:f5:49:5e:e6:bc:d6:a7:3a:a1:32:fa:c9:
         e9:fe:4f:09:57:7b:4a:38:5b:a3:3d:99:7b:e6:cb:8a:70:30:
         99:e4:0a:f9:5e:c9:d4:1d:10:c3:96:92:79:2f:d2:04:e9:1b:
         79:aa:e1:af:1f:a3:b3:84:7e:7d:0e:b3:91:39:5f:c0:48:9a:
         d5:ff:ab:3b:b6:87:2a:5c:cd:e5:78:a7:93:05:cb:2a:5c:c4:
         f7:1f:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:53 2025 by rpki-client