Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c255f317018b400e143b427e9fcb6ed51509c798637.cer
File:                     0735111c255f317018b400e143b427e9fcb6ed51509c798637.cer (raw, json)
Hash identifier:          XnC4t/iMabLbbIYGC2VZ5IR89lYvDHCZcF9zoMtwhfQ=
Subject key identifier:   3F:12:7A:74:5C:4A:45:C3:1F:C1:F0:A3:CB:EF:F3:AE:37:1A:5F:50
Authority key identifier: 9F:6A:C1:55:67:D4:B5:F5:1C:1B:30:21:70:8C:EB:1F:4A:88:C4:4B
Certificate issuer:       /CN=787ebbf9-1a0e-4410-81a0-a4a02a27fa2b
Certificate serial:       010D0C9F43285848C08826FCAFD0AC0C73013180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/3F127A745C4A45C31FC1F0A3CBEFF3AE371A5F50.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 02 Feb 2025 19:16:25 +0000
Certificate not after:    Sat 08 May 2027 18:16:25 +0000
Subordinate resources:    AS: 393577
                          IP: 23.142.248.0/24
                          IP: 167.253.78.0/24
                          IP: 2602:291::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c0:88:26:fc:af:d0:ac:0c:73:01:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787ebbf9-1a0e-4410-81a0-a4a02a27fa2b
        Validity
            Not Before: Feb  2 19:16:25 2025 GMT
            Not After : May  8 18:16:25 2027 GMT
        Subject: CN=0735111c255f317018b400e143b427e9fcb6ed51509c798637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:06:4a:15:bd:9e:af:6c:5f:8e:5e:58:9c:c2:
                    75:9a:36:e1:79:32:ad:9a:5e:49:55:48:a1:60:79:
                    77:a5:26:11:a2:13:1d:1a:35:e4:db:2a:a8:c9:65:
                    d9:3e:36:2d:37:0a:5a:f7:3d:40:95:f5:b9:df:3a:
                    fc:cf:13:6a:fa:bf:22:72:f3:78:18:75:da:c3:6a:
                    bc:c0:39:35:3d:20:09:46:2a:59:2a:98:89:3e:1f:
                    fd:b6:7f:69:0c:e7:c6:f5:69:06:07:f2:87:27:92:
                    e5:1e:83:e9:6c:1f:98:dd:a8:d2:57:e3:91:df:76:
                    5a:48:b2:e1:08:7f:5a:e2:63:b5:22:34:ae:33:33:
                    1e:90:c0:1e:64:fc:0b:3b:04:06:5b:ff:d5:f4:33:
                    08:39:62:65:de:b7:58:81:88:20:ba:e0:bc:8b:64:
                    a2:ee:7a:8c:b3:d9:06:bd:04:c2:de:8d:21:0e:5b:
                    44:18:8b:47:ce:a2:e6:e1:ac:7b:f4:1e:06:63:26:
                    3e:61:10:dd:3f:c5:79:40:1f:4c:f5:04:54:7b:a7:
                    66:d0:64:e7:31:40:81:d4:62:ce:4c:4a:2f:f2:a8:
                    cf:c3:fb:8b:e4:45:cb:60:90:46:78:48:cd:c7:af:
                    a5:5f:e0:b6:d4:68:7c:ca:ad:ad:0a:17:1d:94:4f:
                    53:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:7A:74:5C:4A:45:C3:1F:C1:F0:A3:CB:EF:F3:AE:37:1A:5F:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/3F127A745C4A45C31FC1F0A3CBEFF3AE371A5F50.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl

            X509v3 Authority Key Identifier:
                keyid:9F:6A:C1:55:67:D4:B5:F5:1C:1B:30:21:70:8C:EB:1F:4A:88:C4:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.248.0/24
                  167.253.78.0/24
                IPv6:
                  2602:291::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393577

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:9e:ac:82:da:96:ea:cd:f5:de:6f:02:31:77:90:76:a1:
         fc:f9:99:2a:c5:8a:68:00:ac:a3:d4:05:c1:b9:b6:b1:c9:5e:
         3f:22:fa:46:af:f4:55:8a:d0:8d:af:70:6b:11:c0:00:94:f6:
         c2:98:6d:d6:24:8e:a9:b8:68:09:09:21:45:89:a9:d2:54:83:
         b4:94:33:62:f8:c2:d4:6d:dd:f5:c4:be:c6:03:c6:7c:14:69:
         2e:59:bd:59:91:ee:ba:aa:cb:34:76:f9:de:80:fb:0d:94:c3:
         ef:b6:a5:53:5e:b0:75:8e:24:ee:01:2f:a2:9a:49:6b:94:4f:
         0f:89:0a:6c:3a:ce:10:a4:6b:46:4c:c8:9a:ea:19:5b:0a:19:
         43:57:81:84:13:4a:48:4f:3b:0d:84:7f:cd:67:41:0b:98:6a:
         51:ca:6e:4a:08:d1:5f:da:7c:11:92:07:ed:fd:24:c8:f0:26:
         07:2e:11:4a:27:a3:60:e4:44:4c:ef:b3:e2:f6:25:05:80:f1:
         84:5e:06:f7:95:4f:d4:5a:53:94:13:c4:15:6e:c9:60:10:42:
         1c:14:7a:81:b4:86:ac:fc:de:3e:db:e5:b6:ea:b2:42:85:02:
         77:ef:2b:84:37:c6:03:91:18:d3:b2:7c:c8:68:da:bf:30:19:
         14:77:2e:d1
-----BEGIN CERTIFICATE-----
MIIG0zCCBbugAwIBAgIUAQ0Mn0MoWEjAiCb8r9CsDHMBMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg3ZWJiZjktMWEwZS00NDEwLTgxYTAtYTRhMDJhMjdm
YTJiMB4XDTI1MDIwMjE5MTYyNVoXDTI3MDUwODE4MTYyNVowPTE7MDkGA1UEAxMy
MDczNTExMWMyNTVmMzE3MDE4YjQwMGUxNDNiNDI3ZTlmY2I2ZWQ1MTUwOWM3OTg2
MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBkoVvZ6vbF+OXlic
wnWaNuF5Mq2aXklVSKFgeXelJhGiEx0aNeTbKqjJZdk+Ni03Clr3PUCV9bnfOvzP
E2r6vyJy83gYddrDarzAOTU9IAlGKlkqmIk+H/22f2kM58b1aQYH8ocnkuUeg+ls
H5jdqNJX45HfdlpIsuEIf1riY7UiNK4zMx6QwB5k/As7BAZb/9X0Mwg5YmXet1iB
iCC64LyLZKLueoyz2Qa9BMLejSEOW0QYi0fOoubhrHv0HgZjJj5hEN0/xXlAH0z1
BFR7p2bQZOcxQIHUYs5MSi/yqM/D+4vkRctgkEZ4SM3Hr6Vf4LbUaHzKra0KFx2U
T1O7AgMBAAGjggPXMIID0zAdBgNVHQ4EFgQUPxJ6dFxKRcMfwfCjy+/zrjcaX1Aw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTVjYjBhNDAxOTE5MDIy
ZWYwNzFlZmUvMS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTVjYjBhNDAxOTE5MDIyZWYwNzFlZmUv
MS8zRjEyN0E3NDVDNEE0NUMzMUZDMUYwQTNDQkVGRjNBRTM3MUE1RjUwLm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5
YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzc4N2ViYmY5LTFhMGUtNDQxMC04MWEw
LWE0YTAyYTI3ZmEyYi83ODdlYmJmOS0xYTBlLTQ0MTAtODFhMC1hNGEwMmEyN2Zh
MmIuY3JsMB8GA1UdIwQYMBaAFJ9qwVVn1LX1HBswIXCM6x9KiMRLMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYt
OTU4Ni05MmRkNDllZjMyMjMvNzg3ZWJiZjktMWEwZS00NDEwLTgxYTAtYTRhMDJh
MjdmYTJiLmNlcjA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEABeO+AMEAKf9
TjAOBAIAAjAIAwYEJgICkQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgFpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjlnqyC2pbqzfXebwIxd5B2ofz5mSrFimgArKPUBcG5trHJXj8i+kav
9FWK0I2vcGsRwACU9sKYbdYkjqm4aAkJIUWJqdJUg7SUM2L4wtRt3fXEvsYDxnwU
aS5ZvVmR7rqqyzR2+d6A+w2Uw++2pVNesHWOJO4BL6KaSWuUTw+JCmw6zhCka0ZM
yJrqGVsKGUNXgYQTSkhPOw2Ef81nQQuYalHKbkoI0V/afBGSB+39JMjwJgcuEUon
o2DkREzvs+L2JQWA8YReBveVT9RaU5QTxBVuyWAQQhwUeoG0hqz83j7b5bbqskKF
AnfvK4Q3xgORGNOyfMho2r8wGRR3LtE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 05:33:36 2025 by rpki-client