Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
File:                     6e005a51-3e55-4f51-b393-eb9918255f3f.cer (raw, json)
Hash identifier:          tsvoaD0W+XeY0fhBW6vy1HV8R5uB0baC3xn9dkJhjsY=
Subject key identifier:   7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858480E9D827256A824F8B7136980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 01 Dec 2024 01:45:33 +0000
Certificate not after:    Sat 06 Mar 2027 01:45:33 +0000
Subordinate resources:    AS: 26968
                          IP: 74.121.32.0/22
                          IP: 199.58.192.0/22
                          IP: 2602:ff93::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:9d:82:72:56:a8:24:f8:b7:13:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec  1 01:45:33 2024 GMT
            Not After : Mar  6 01:45:33 2027 GMT
        Subject: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:dd:37:3b:7f:8b:b6:61:60:f5:84:6f:41:
                    a2:c0:ef:12:09:df:b2:06:c6:e7:60:09:18:9f:0a:
                    b2:44:ee:e9:e1:12:22:ab:7b:58:c0:85:b2:57:5d:
                    84:46:35:67:48:36:fa:79:1d:97:8a:d1:c1:be:0a:
                    29:72:2e:5c:30:5b:13:74:a8:ba:2a:8a:6f:f8:16:
                    74:db:78:d9:56:f8:a2:23:45:58:30:fb:d4:45:af:
                    4d:ce:d7:e8:86:fc:ac:a5:bc:df:85:b3:0d:b3:db:
                    02:f9:43:5b:af:4e:af:b9:76:43:ff:99:f7:ff:99:
                    5f:cf:31:ef:59:98:8e:b5:98:f4:97:b8:dc:79:8d:
                    b9:73:ed:ed:73:b3:42:e9:f1:17:89:8a:c8:9a:52:
                    bf:48:ba:9a:90:c1:5e:03:75:62:c6:af:f0:a6:72:
                    83:b9:9d:46:77:85:18:be:7a:b7:0b:89:7b:5d:0b:
                    b2:36:6e:4e:dd:83:8e:c0:f8:3b:5e:e2:3e:2b:d6:
                    bd:84:b9:d5:d8:0c:5a:73:1f:da:7e:41:00:4e:07:
                    aa:48:97:20:8b:f7:06:1c:2e:47:34:ba:68:d2:49:
                    05:aa:4f:57:e0:14:d7:f5:24:7b:9b:4f:64:16:b9:
                    58:2f:33:ac:c6:99:37:16:a8:1e:21:33:50:4b:0e:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.32.0/22
                  199.58.192.0/22
                IPv6:
                  2602:ff93::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26968

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:11:74:e6:ee:c5:03:f2:c8:7d:28:2e:ac:ff:85:a8:30:
         40:ed:4d:5d:69:89:f6:ba:23:96:92:c3:19:d1:57:71:13:7e:
         a9:5f:96:af:d6:6a:9a:7a:c0:d0:c8:bb:e6:90:d2:fc:77:c7:
         ef:d5:64:39:0e:cc:50:1a:00:bb:07:48:d6:5d:36:c2:e6:c1:
         2d:1b:3f:93:95:5f:9d:d9:90:3f:1a:c3:91:95:61:06:e0:da:
         5a:76:95:8a:b0:9f:e3:b8:d9:56:eb:b7:9c:94:a1:f8:69:07:
         c7:7e:3a:19:7d:1e:f1:7b:b2:6a:c2:17:40:61:8e:90:20:c3:
         d7:0d:1a:00:b4:75:cf:83:0e:14:2d:aa:63:69:64:cb:61:5f:
         c4:46:2d:df:ce:53:63:99:c7:5a:e9:3d:b4:a1:18:97:ec:ad:
         27:45:67:53:dd:60:b7:23:7b:fc:de:ce:7e:77:68:5c:b3:48:
         fd:4b:a4:55:38:0a:66:50:0f:61:2d:66:10:6b:da:12:d1:20:
         d4:44:0a:79:44:0f:40:75:f6:1b:6b:84:e1:f8:2a:d1:a3:86:
         d9:c8:fe:37:68:9e:2f:11:cc:04:10:59:ba:c8:d7:15:9b:09:
         8e:44:66:0f:d6:be:6d:36:f6:f3:82:8f:4a:5c:7c:f3:46:f1:
         c5:0d:ab:e8
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEgOnYJyVqgk+LcTaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MTIwMTAxNDUzM1oXDTI3MDMwNjAxNDUzM1owLzEtMCsGA1UEAxMk
NmUwMDVhNTEtM2U1NS00ZjUxLWIzOTMtZWI5OTE4MjU1ZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouzdNzt/i7ZhYPWEb0GiwO8SCd+yBsbnYAkY
nwqyRO7p4RIiq3tYwIWyV12ERjVnSDb6eR2XitHBvgopci5cMFsTdKi6Kopv+BZ0
23jZVviiI0VYMPvURa9NztfohvyspbzfhbMNs9sC+UNbr06vuXZD/5n3/5lfzzHv
WZiOtZj0l7jceY25c+3tc7NC6fEXiYrImlK/SLqakMFeA3Vixq/wpnKDuZ1Gd4UY
vnq3C4l7XQuyNm5O3YOOwPg7XuI+K9a9hLnV2Axacx/afkEATgeqSJcgi/cGHC5H
NLpo0kkFqk9X4BTX9SR7m09kFrlYLzOsxpk3FqgeITNQSw7NawIDAQABo4IELzCC
BCswHQYDVR0OBBYEFH+l4VRspdJz8RM1QTSePa4P7Gv+MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82
ZTAwNWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5MTgyNTVmM2YvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzZlMDA1YTUxLTNlNTUtNGY1MS1i
MzkzLWViOTkxODI1NWYzZi82ZTAwNWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5MTgy
NTVmM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJKeSADBALHOsAwDQQCAAIwBwMFACYC/5MwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICaVgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS3oRdObuxQPyyH0oLqz/
hagwQO1NXWmJ9rojlpLDGdFXcRN+qV+Wr9ZqmnrA0Mi75pDS/HfH79VkOQ7MUBoA
uwdI1l02wubBLRs/k5VfndmQPxrDkZVhBuDaWnaVirCf47jZVuu3nJSh+GkHx346
GX0e8XuyasIXQGGOkCDD1w0aALR1z4MOFC2qY2lky2FfxEYt385TY5nHWuk9tKEY
l+ytJ0VnU91gtyN7/N7OfndoXLNI/UukVTgKZlAPYS1mEGvaEtEg1EQKeUQPQHX2
G2uE4fgq0aOG2cj+N2ieLxHMBBBZusjXFZsJjkRmD9a+bTb284KPSlx880bxxQ2r
6A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:51 2025 by rpki-client