Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/027e4505-a544-4c43-ae6c-48133f69f1c9.cer
File:                     027e4505-a544-4c43-ae6c-48133f69f1c9.cer (raw, json)
Hash identifier:          08QaxummujAgnuvFuyYWqzWgyh64ZqgGR7ul5i7dzgc=
Subject key identifier:   DB:F1:0D:41:77:64:0B:C7:15:BA:AD:B2:C6:99:C6:89:57:67:C4:2B
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858490714631E9762C18DA637C900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/027e4505-a544-4c43-ae6c-48133f69f1c9/027e4505-a544-4c43-ae6c-48133f69f1c9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/027e4505-a544-4c43-ae6c-48133f69f1c9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 03 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 35913
                          IP: 23.147.224.0/21
                          IP: 172.81.40.0/22
                          IP: 2602:fe90::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:14:63:1e:97:62:c1:8d:a6:37:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 28 01:45:33 2025 GMT
            Not After : Jun  3 00:45:33 2027 GMT
        Subject: CN=027e4505-a544-4c43-ae6c-48133f69f1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:a9:6a:ae:0b:91:a7:aa:d8:de:f7:f3:3a:
                    3d:4e:73:ad:cc:bb:43:b7:b4:62:27:86:45:e7:1a:
                    a6:b0:71:4c:f4:5b:36:72:f8:5e:2f:4b:3d:05:e5:
                    f0:04:d0:61:d3:07:a5:99:c2:42:73:af:e9:24:5a:
                    b7:3f:c7:db:04:3f:13:ff:cb:42:96:b8:75:c9:d4:
                    5e:7b:da:f1:66:4a:c4:81:d7:61:29:a7:f3:ce:ad:
                    2e:e2:5b:b2:fc:6e:f3:4d:84:7e:9f:3d:2f:18:ab:
                    74:a4:a1:16:f7:89:d9:5b:55:ef:a9:20:17:c7:6e:
                    9e:d8:74:20:6b:b6:32:d4:77:b8:57:67:2a:c8:2a:
                    6f:0d:e1:7f:fb:ca:d7:75:fa:87:74:3f:a6:ae:38:
                    30:33:cc:ac:31:ab:d5:f0:e3:cb:05:b0:df:57:6a:
                    93:7a:20:5b:2c:68:f7:3f:18:a7:3b:26:12:b5:7d:
                    16:ee:51:67:04:1d:a5:44:6d:53:8c:b5:6e:c8:db:
                    0b:c9:a3:85:b7:63:ec:69:6e:5b:f1:e0:ff:a2:02:
                    6f:b6:4b:00:c0:76:9f:98:4f:a4:36:e6:95:08:04:
                    d8:cf:07:d6:8b:d7:7a:7b:eb:09:69:d5:e1:98:26:
                    60:29:7d:0a:a6:44:40:68:d9:16:60:ef:8f:dd:0c:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F1:0D:41:77:64:0B:C7:15:BA:AD:B2:C6:99:C6:89:57:67:C4:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/027e4505-a544-4c43-ae6c-48133f69f1c9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/027e4505-a544-4c43-ae6c-48133f69f1c9/027e4505-a544-4c43-ae6c-48133f69f1c9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.224.0/21
                  172.81.40.0/22
                IPv6:
                  2602:fe90::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35913

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:da:80:c5:c3:a3:13:10:bd:f3:9e:12:58:fb:fa:47:b6:75:
         eb:32:ff:48:1d:a3:62:c4:e3:93:07:24:cf:86:72:ff:d8:0f:
         c6:56:dd:44:a0:50:1e:bd:94:75:b3:ef:dc:63:48:f6:61:5a:
         ab:21:2b:d6:25:af:fe:94:19:8e:1e:99:b7:8e:e5:bb:de:18:
         d2:3d:ca:2b:3e:c2:49:a9:07:26:04:51:3e:53:d9:dd:e7:43:
         67:05:41:46:36:7a:42:66:3c:6e:c9:66:1c:b5:f1:f0:41:08:
         d4:dc:8a:b8:8f:b9:89:04:e1:23:80:f9:c9:8b:ef:f6:1a:30:
         e1:ff:d9:ba:62:fe:e8:09:63:84:d3:b1:a6:99:06:97:03:67:
         5a:75:1f:20:0a:4b:ac:ca:15:2e:5f:80:6e:73:53:de:59:49:
         d7:7e:67:0a:9d:b8:42:32:c4:01:c1:f6:61:f3:cc:85:c6:67:
         a4:57:fd:b3:2d:1d:64:36:fb:31:22:9f:7a:b4:1e:b4:22:80:
         ef:1d:5e:99:b7:09:28:2f:0e:b5:6b:ee:00:6c:be:9c:50:4e:
         83:7b:34:00:10:dc:83:91:70:c9:9a:74:e5:bb:a5:39:5b:96:
         f3:4d:81:ee:f1:53:b7:26:2b:8b:42:a3:c8:d3:3d:fc:ee:2a:
         66:cd:98:4f
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEkHFGMel2LBjaY3yQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI1MDIyODAxNDUzM1oXDTI3MDYwMzAwNDUzM1owLzEtMCsGA1UEAxMk
MDI3ZTQ1MDUtYTU0NC00YzQzLWFlNmMtNDgxMzNmNjlmMWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvapaq4Lkaeq2N738zo9TnOtzLtDt7RiJ4ZF
5xqmsHFM9Fs2cvheL0s9BeXwBNBh0welmcJCc6/pJFq3P8fbBD8T/8tClrh1ydRe
e9rxZkrEgddhKafzzq0u4luy/G7zTYR+nz0vGKt0pKEW94nZW1XvqSAXx26e2HQg
a7Yy1He4V2cqyCpvDeF/+8rXdfqHdD+mrjgwM8ysMavV8OPLBbDfV2qTeiBbLGj3
PxinOyYStX0W7lFnBB2lRG1TjLVuyNsLyaOFt2PsaW5b8eD/ogJvtksAwHafmE+k
NuaVCATYzwfWi9d6e+sJadXhmCZgKX0KpkRAaNkWYO+P3QyzZQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFNvxDUF3ZAvHFbqtssaZxolXZ8QrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w
MjdlNDUwNS1hNTQ0LTRjNDMtYWU2Yy00ODEzM2Y2OWYxYzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzAyN2U0NTA1LWE1NDQtNGM0My1h
ZTZjLTQ4MTMzZjY5ZjFjOS8wMjdlNDUwNS1hNTQ0LTRjNDMtYWU2Yy00ODEzM2Y2
OWYxYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAMXk+ADBAKsUSgwDgQCAAIwCAMGBCYC/pAAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCMSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD2oDFw6MTEL3znhJY
+/pHtnXrMv9IHaNixOOTByTPhnL/2A/GVt1EoFAevZR1s+/cY0j2YVqrISvWJa/+
lBmOHpm3juW73hjSPcorPsJJqQcmBFE+U9nd50NnBUFGNnpCZjxuyWYctfHwQQjU
3Iq4j7mJBOEjgPnJi+/2GjDh/9m6Yv7oCWOE07GmmQaXA2dadR8gCkusyhUuX4Bu
c1PeWUnXfmcKnbhCMsQBwfZh88yFxmekV/2zLR1kNvsxIp96tB60IoDvHV6Ztwko
Lw61a+4AbL6cUE6DezQAENyDkXDJmnTlu6U5W5bzTYHu8VO3JiuLQqPI0z387ipm
zZhP
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:44 2025 by rpki-client