Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/C2CE978AF2AFEE773E9B3C6D3C6EB634231840F2.cer
File:                     C2CE978AF2AFEE773E9B3C6D3C6EB634231840F2.cer (raw, json)
Hash identifier:          MEoKHWO5hPBsFeRafgV5hP+GCjqYTSDvTfUFp3B+XYs=
Subject key identifier:   C2:CE:97:8A:F2:AF:EE:77:3E:9B:3C:6D:3C:6E:B6:34:23:18:40:F2
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       786F3628CEF19032677E4D09BD7F41635C7E47DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/5/C2CE978AF2AFEE773E9B3C6D3C6EB634231840F2.mft
caRepository:             rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/5/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 14:21:28 +0000
Certificate not after:    Fri 10 Apr 2026 14:26:28 +0000
Subordinate resources:    AS: 11967
                          IP: 23.133.172.0/24
                          IP: 2602:f72e::/43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6f:36:28:ce:f1:90:32:67:7e:4d:09:bd:7f:41:63:5c:7e:47:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Apr 11 14:21:28 2025 GMT
            Not After : Apr 10 14:26:28 2026 GMT
        Subject: CN=C2CE978AF2AFEE773E9B3C6D3C6EB634231840F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:bb:d0:de:02:5c:a6:d0:3f:60:a7:93:0b:
                    f3:c4:58:b9:4e:22:1b:2d:35:dd:4b:3b:80:ad:1c:
                    22:08:d9:f4:a4:36:5b:51:a4:9b:ec:ce:69:8e:bc:
                    09:50:5e:e5:36:68:c5:68:3f:23:83:20:13:c4:77:
                    7f:27:5e:0e:09:13:22:cb:48:6a:a4:b6:dd:8a:c7:
                    02:15:fc:7e:96:23:9b:9b:24:61:3f:69:e0:0e:b6:
                    d4:12:52:f4:17:fd:77:f9:e1:41:8c:27:b7:73:5f:
                    44:a7:5a:78:f8:4e:ff:7e:4b:31:f2:86:81:a7:51:
                    5c:16:3c:e1:09:d2:04:2a:e4:03:32:9a:ef:20:b6:
                    16:d8:95:02:18:e7:64:a2:d0:f0:15:17:58:2e:6d:
                    3b:18:55:96:5d:a2:b6:c9:ca:3e:a4:7c:76:e6:5b:
                    86:54:06:be:d0:a3:2d:aa:b2:58:89:f6:85:32:04:
                    eb:65:60:d9:e4:14:0e:3a:31:20:b3:d8:38:ed:6a:
                    07:86:34:bc:e8:52:ed:83:dd:66:f5:18:ea:ba:37:
                    ee:2d:bb:8d:ae:5c:32:e8:85:bf:32:98:d2:dd:c9:
                    a9:63:06:d1:65:d2:af:0b:8a:c2:8d:df:3f:35:56:
                    cd:cd:7d:aa:fa:c4:f3:27:c3:c4:8e:d9:f9:fb:0d:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:CE:97:8A:F2:AF:EE:77:3E:9B:3C:6D:3C:6E:B6:34:23:18:40:F2
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/5/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/5/C2CE978AF2AFEE773E9B3C6D3C6EB634231840F2.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.172.0/24
                IPv6:
                  2602:f72e::/43

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11967

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:c9:a5:90:45:76:23:6f:02:9c:94:d7:be:52:1d:d0:94:
         ce:f6:2e:1a:fa:9b:22:1a:43:c1:b6:8e:a0:f9:5b:1b:0b:06:
         cf:bf:3e:a5:81:d9:0f:4f:40:b8:13:b5:0e:3b:f4:f5:23:9c:
         f6:96:e5:35:d8:b8:0f:ce:03:c3:ac:72:ae:b2:53:61:5a:71:
         e6:41:05:11:1b:97:b0:e7:9d:19:e2:6d:14:c6:1d:56:88:61:
         4d:c3:7b:01:90:c9:b7:2f:49:9c:ba:ae:78:6c:3a:a6:59:bd:
         29:c6:d0:c4:bc:5e:9b:2b:bd:db:5e:72:45:29:83:80:6b:5c:
         c0:b7:4e:d6:79:8e:0d:92:73:62:8e:3c:cf:c6:f2:09:fe:d3:
         b3:c6:c3:77:f6:61:b7:61:16:aa:4e:fa:a7:bb:e9:ca:84:23:
         06:e9:7f:e0:10:b3:f5:04:28:92:35:d0:91:1e:2c:10:58:dd:
         91:ff:c7:2d:ec:78:db:c6:1a:d9:84:0b:33:96:5f:8e:0a:73:
         43:08:56:5e:83:7a:3a:86:c5:db:ee:ec:5a:b9:8c:89:b7:2b:
         cf:2a:db:f5:b2:c3:d4:a1:a7:01:19:0e:1f:3d:be:34:4e:62:
         9a:03:f7:1e:0f:06:19:32:3d:17:9b:ab:02:7a:36:35:36:0f:
         b0:9c:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net