Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
File:                     994eeb97-12ef-4721-824f-9ba41ba67983.cer (raw, json)
Hash identifier:          SaGcTrid5V+Yckt/pGAdTGLBTHPpuO90b3jL52L59BU=
Subject key identifier:   1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848B0892EF16A104461FBB61BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Jan 2025 01:45:33 +0000
Certificate not after:    Mon 03 May 2027 00:45:33 +0000
Subordinate resources:    AS: 23539
                          IP: 23.138.176.0/24
                          IP: 147.185.188.0/24
                          IP: 209.163.114.0/24
                          IP: 2605:4f40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:89:2e:f1:6a:10:44:61:fb:b6:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 28 01:45:33 2025 GMT
            Not After : May  3 00:45:33 2027 GMT
        Subject: CN=994eeb97-12ef-4721-824f-9ba41ba67983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:77:72:eb:10:4d:6b:6c:93:bd:58:a5:14:
                    e3:62:ac:a4:55:aa:df:86:4a:fb:f4:d8:4f:27:e1:
                    d6:7f:52:8b:f5:f0:90:aa:fd:b0:55:05:c1:52:ad:
                    7a:49:ce:c3:2f:95:0c:22:93:9f:ac:3d:4c:18:8e:
                    a3:a7:27:b5:c2:73:3e:08:a7:28:2a:17:b7:13:35:
                    cb:54:47:ed:b4:f3:26:99:a4:89:2c:53:aa:b2:c2:
                    f9:75:cc:f8:a2:bc:8b:f0:eb:64:df:93:d8:be:e7:
                    d9:c9:ae:1c:16:f2:a7:e5:67:53:29:d7:09:67:e1:
                    79:9c:88:d6:3d:45:cd:56:25:07:dc:03:4d:59:79:
                    35:00:6f:74:ed:a3:4c:c8:f8:6d:c4:c2:36:5f:26:
                    88:42:30:1b:fe:52:96:58:94:c4:e1:12:ec:c6:7c:
                    3d:47:fe:11:21:ce:77:37:db:a8:52:68:b6:60:61:
                    b5:0b:d4:48:c4:40:75:18:ea:37:88:5a:14:99:1d:
                    52:3b:5d:3c:cc:a5:56:fb:f3:7d:ff:46:ea:4e:16:
                    66:1c:96:c0:de:33:e8:1c:49:0a:22:2d:10:38:1e:
                    e1:41:10:a4:35:d4:e9:ee:91:6f:d0:a7:6d:e6:b3:
                    ce:db:f9:a7:fa:77:88:0b:da:c3:e8:ce:ce:84:2d:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.176.0/24
                  147.185.188.0/24
                  209.163.114.0/24
                IPv6:
                  2605:4f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23539

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:2b:fb:bf:bb:01:ea:0b:24:58:20:cf:9b:58:d6:f3:0b:
         b6:ba:8c:26:c5:72:c3:30:3a:b8:18:23:5c:f1:b1:38:68:89:
         36:6f:26:29:ac:53:66:a3:a6:84:48:1c:e5:d7:a8:0b:a4:3c:
         9b:e8:1e:65:12:29:60:4f:2e:91:96:74:78:e9:52:14:bd:62:
         9c:71:36:af:b8:0a:0e:a9:78:e5:e1:be:bb:2f:05:d8:c6:f1:
         0b:27:0b:26:56:5b:e0:0f:8b:9d:4f:7b:e3:b0:3b:a7:c5:e7:
         22:68:ef:db:ec:48:8d:57:ff:c6:83:c1:9f:a1:14:b8:fb:4b:
         a2:c4:fa:f2:50:a9:f4:1c:1c:c6:76:e8:d6:ed:5d:69:74:70:
         47:d1:37:24:7d:32:81:fb:eb:86:f9:97:a8:d5:c5:ae:bd:81:
         a4:f0:97:02:11:18:84:0f:59:f2:ff:9a:09:f4:c0:ca:6b:27:
         06:b8:1f:65:5a:35:56:b6:91:24:43:22:0a:0c:bd:af:46:8b:
         43:d9:15:5b:db:2e:22:e3:8f:b1:63:b6:27:b1:80:62:36:bb:
         e0:5b:ab:0e:a9:a9:42:2d:60:fd:60:51:47:81:32:a4:0e:03:
         1a:00:74:22:e0:8c:2b:27:66:cc:48:aa:a7:c8:7b:3a:54:47:
         22:ff:e1:fb
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEiwiS7xahBEYfu2G8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk
OTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3OTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrh3cusQTWtsk71YpRTjYqykVarfhkr79NhP
J+HWf1KL9fCQqv2wVQXBUq16Sc7DL5UMIpOfrD1MGI6jpye1wnM+CKcoKhe3EzXL
VEfttPMmmaSJLFOqssL5dcz4oryL8Otk35PYvufZya4cFvKn5WdTKdcJZ+F5nIjW
PUXNViUH3ANNWXk1AG907aNMyPhtxMI2XyaIQjAb/lKWWJTE4RLsxnw9R/4RIc53
N9uoUmi2YGG1C9RIxEB1GOo3iFoUmR1SO108zKVW+/N9/0bqThZmHJbA3jPoHEkK
Ii0QOB7hQRCkNdTp7pFv0Kdt5rPO2/mn+neIC9rD6M7OhC2hZwIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFBx2xH/Cy/qMQmATE3feNUGa1OREMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85
OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzk5NGVlYjk3LTEyZWYtNDcyMS04
MjRmLTliYTQxYmE2Nzk4My85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJh
Njc5ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAAXirADBACTubwDBADRo3IwDQQCAAIwBwMFACYF
T0AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICW/MwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY/Ar+7+7AeoL
JFggz5tY1vMLtrqMJsVywzA6uBgjXPGxOGiJNm8mKaxTZqOmhEgc5deoC6Q8m+ge
ZRIpYE8ukZZ0eOlSFL1inHE2r7gKDql45eG+uy8F2MbxCycLJlZb4A+LnU9747A7
p8XnImjv2+xIjVf/xoPBn6EUuPtLosT68lCp9Bwcxnbo1u1daXRwR9E3JH0ygfvr
hvmXqNXFrr2BpPCXAhEYhA9Z8v+aCfTAymsnBrgfZVo1VraRJEMiCgy9r0aLQ9kV
W9suIuOPsWO2J7GAYja74FurDqmpQi1g/WBRR4EypA4DGgB0IuCMKydmzEiqp8h7
OlRHIv/h+w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:19 2025 by rpki-client