Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
File:                     9df74e6e-da16-4cba-a854-ee087e767113.cer (raw, json)
Hash identifier:          7mTB1iAk2Vz/2y6/S0g/JapPPwvPtNkcAy6TQOwmeUc=
Subject key identifier:   12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858497C3756E82477B473EBDFFE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 00:45:34 +0000
Certificate not after:    Thu 15 Jul 2027 00:45:34 +0000
Subordinate resources:    IP: 132.206.0.0/16
                          IP: 132.216.0.0/16
                          IP: 142.157.0.0/16
                          IP: 192.197.121.0/24
                          IP: 198.168.128.0/18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:37:56:e8:24:77:b4:73:eb:df:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 11 00:45:34 2025 GMT
            Not After : Jul 15 00:45:34 2027 GMT
        Subject: CN=9df74e6e-da16-4cba-a854-ee087e767113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:4b:1e:bb:a7:f1:d1:97:38:86:7a:ed:b9:
                    67:a4:90:d8:bc:72:5a:37:a4:a2:2a:0a:2f:00:6e:
                    8d:83:00:93:cf:5d:fa:f7:2d:af:53:da:19:e4:af:
                    72:51:08:65:75:0b:f0:77:7e:dc:77:b3:b5:37:24:
                    5c:39:0c:55:61:5b:0c:d3:21:fd:d4:57:d3:53:cd:
                    9e:d9:b0:ba:7b:d6:1a:30:8d:82:25:6e:d9:22:c3:
                    a0:cb:2c:19:84:97:34:64:69:00:3c:70:7a:61:be:
                    30:94:f3:ef:56:b1:ed:ef:93:99:26:f8:24:75:c9:
                    ac:76:d9:c7:ca:de:3d:cd:a9:34:1c:ba:6c:96:c6:
                    92:2c:f7:0c:6a:c2:89:6a:af:d1:43:fd:79:07:39:
                    4f:cb:96:23:e8:a0:ce:15:9a:29:50:12:bb:31:0e:
                    89:c2:1c:aa:48:7c:ff:9f:72:70:b3:b5:23:80:e9:
                    f0:8f:4e:3d:a2:00:c5:b0:fa:a4:28:28:65:a4:9b:
                    3d:4f:eb:76:be:2c:e7:9a:ba:81:85:c8:b9:6e:c4:
                    3c:65:93:1d:11:21:f1:3b:fd:b9:6f:08:88:b6:f2:
                    f6:be:f3:16:eb:23:c9:7c:ff:80:7e:ee:cd:2c:7b:
                    7d:de:c2:62:c2:f9:d0:70:a2:30:b7:a2:05:a7:35:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.206.0.0/16
                  132.216.0.0/16
                  142.157.0.0/16
                  192.197.121.0/24
                  198.168.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c3:13:57:63:ab:7f:d0:8b:ca:0a:9d:f8:10:a8:c3:62:9c:
         91:b2:ec:b1:d5:c9:d7:e3:97:f5:fd:dd:dc:9f:48:20:92:f8:
         eb:c2:f1:87:26:ee:90:7a:57:f1:89:ff:de:e8:e0:51:08:a0:
         33:03:ee:17:4c:d5:90:aa:51:8f:4a:04:0a:0b:2c:02:23:95:
         f1:83:35:24:54:60:16:23:31:c1:46:46:cb:f9:58:51:2a:3c:
         9e:77:ce:9c:83:70:73:58:4f:00:6a:07:51:e5:96:a7:6e:86:
         34:14:95:8d:b5:78:1a:7f:4f:f1:b3:7e:67:39:29:1d:a9:2b:
         8a:20:07:9b:c4:63:ea:d4:7c:83:29:6a:fb:4f:55:e7:23:f5:
         68:43:ec:9d:5b:4c:d0:bc:04:f7:6a:ae:77:69:66:2c:52:9b:
         6e:ea:e6:18:bb:84:c1:3c:c5:88:b8:de:59:86:99:f5:74:31:
         19:87:20:8b:a1:c1:98:2e:3d:79:a3:52:85:98:92:d3:47:b2:
         f9:d5:e6:87:12:df:86:42:fc:c5:9e:c5:df:ee:df:88:16:7b:
         1e:9a:ba:51:62:a1:6e:ee:4e:38:7b:42:b9:f6:74:58:e7:ca:
         4b:11:c6:c6:93:87:2b:6b:c1:eb:1c:3f:ab:9f:bb:4a:ea:72:
         4c:79:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:26 2025 by rpki-client on console.sobornost.net