Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
File:                     369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer (raw, json)
Hash identifier:          Cok3QBZNIvWfwdB9zczYHyFhe5GLQ7gr5FEvcRkO8ac=
Subject key identifier:   41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority key identifier: 4C:AC:44:27:AD:47:97:5D:01:18:A4:B3:04:B0:CF:51:42:25:18:EC
Certificate issuer:       /CN=c576633f-343d-4ac3-a936-98958e5630e6
Certificate serial:       010D0C9F432858497DC8AF7951DC36628FBC6C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
caRepository:             rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 14:14:13 +0000
Certificate not after:    Thu 15 Jul 2027 14:14:13 +0000
Subordinate resources:    AS: 11967
                          AS: 63286
                          AS: 397658
                          IP: 23.133.172.0/24
                          IP: 2602:f72e::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:c8:af:79:51:dc:36:62:8f:bc:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c576633f-343d-4ac3-a936-98958e5630e6
        Validity
            Not Before: Apr 11 14:14:13 2025 GMT
            Not After : Jul 15 14:14:13 2027 GMT
        Subject: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:53:8b:54:80:7f:3d:d8:44:69:ab:c2:f4:
                    5e:99:08:4a:a8:3e:fc:00:dd:95:77:cc:78:5c:23:
                    8d:ca:73:a6:e3:67:72:6e:5c:0f:cc:fb:4e:f9:66:
                    fa:60:d8:82:8e:03:84:d0:a9:ac:f4:e5:1e:d5:32:
                    d6:91:ab:a0:e6:e0:42:df:51:c3:65:eb:00:d2:49:
                    ea:12:5a:3b:eb:26:df:39:e7:be:fb:5e:ba:12:44:
                    f8:27:b1:58:9f:a3:30:9d:7e:9f:5e:20:4a:83:90:
                    7a:0f:ff:d6:a0:b7:3e:47:37:5f:8c:3e:3a:7e:5c:
                    a5:38:24:92:f7:fd:f3:c1:6c:ca:46:41:b7:f4:52:
                    89:d8:8a:b9:89:e0:7e:2e:46:16:b4:fd:82:3f:b7:
                    98:e6:96:04:f0:9d:b8:5f:85:f9:fe:5d:c3:fd:33:
                    0c:2b:02:4d:4a:bd:18:40:e2:67:7a:ce:16:69:82:
                    7a:e1:65:66:72:8d:a5:0c:fe:27:f1:78:58:7f:5a:
                    04:1d:04:9a:83:b6:e4:68:e1:d9:3f:9f:3a:6f:cb:
                    c7:84:0b:ad:37:04:6e:d9:08:cc:4c:a1:99:79:3d:
                    89:1b:b6:bf:cc:1d:8d:28:80:c7:70:7f:2d:08:09:
                    0b:bf:d4:47:ba:59:53:f3:5b:b0:ef:a3:c7:4f:b6:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl

            X509v3 Authority Key Identifier:
                keyid:4C:AC:44:27:AD:47:97:5D:01:18:A4:B3:04:B0:CF:51:42:25:18:EC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.172.0/24
                IPv6:
                  2602:f72e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11967
                  63286
                  397658

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:ea:7c:22:b3:b7:18:ce:01:b8:6c:29:88:dd:5b:89:f8:
         ba:ca:2c:40:9c:42:d1:31:f2:a0:0c:3b:fc:91:ef:02:28:84:
         a7:2d:a8:68:e4:72:e5:c8:e6:2f:26:36:4a:7f:ee:37:f3:05:
         65:a6:60:23:a3:59:ae:ac:1e:44:c1:ac:01:a5:22:10:d5:00:
         01:02:46:97:26:59:41:66:09:f8:3c:00:6e:e3:da:12:44:fc:
         2f:bf:56:c9:32:6d:aa:fd:1d:1c:9a:c3:14:c1:40:6c:d8:a2:
         22:4a:52:8e:56:16:c9:d9:81:53:5e:60:d6:53:8b:58:cc:1c:
         fb:e1:45:75:4f:5e:34:2c:f2:d4:21:0d:0f:8f:bb:8e:fe:a4:
         17:36:5f:d2:33:98:b2:0e:73:b4:3b:36:7c:ae:6a:b4:ba:c9:
         47:57:a4:9c:ec:61:53:b6:c4:c6:e7:86:a5:32:14:85:c1:42:
         57:ba:64:48:f8:ba:ac:57:f6:b7:f1:30:0a:9f:7a:b8:e6:8d:
         13:c5:72:6a:58:fb:9a:04:4c:3d:7d:86:70:6a:bb:bb:a2:41:
         ab:d8:2a:74:15:ae:26:a6:1c:ca:82:b7:ec:87:7b:09:d7:1f:
         51:22:98:8e:59:f1:16:6d:79:1c:f8:14:09:08:39:c5:95:1d:
         37:81:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:03 2025 by rpki-client on console.sobornost.net