Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
File:                     7e488bf9-7470-4c89-8aed-6849e5450eee.cer (raw, json)
Hash identifier:          lw8J9+Z4yUbw2C4ox9G++eGUFmMK9sI3nsNkJJAOHCc=
Subject key identifier:   B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858483B48711317EC8EBA743CE640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 01:45:32 +0000
Certificate not after:    Mon 22 Mar 2027 00:45:32 +0000
Subordinate resources:    AS: 19566
                          IP: 69.58.16.0 -- 69.58.26.255
                          IP: 2607:d700::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:48:71:13:17:ec:8e:ba:74:3c:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec 17 01:45:32 2024 GMT
            Not After : Mar 22 00:45:32 2027 GMT
        Subject: CN=7e488bf9-7470-4c89-8aed-6849e5450eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:d9:a7:ce:53:e3:fc:8d:94:1f:ad:be:eb:58:
                    29:17:16:26:de:95:58:46:61:a8:c8:32:ea:92:7d:
                    18:fe:9b:95:0b:59:d6:ea:16:79:a6:56:52:fb:14:
                    f5:1a:db:b1:b0:3f:e2:f9:00:79:f1:74:19:6b:c3:
                    02:ac:33:95:55:4d:b6:81:b8:76:30:a7:9c:93:b9:
                    0c:4a:a2:98:c1:e3:70:32:78:ad:e4:32:a7:29:19:
                    b4:11:8b:a1:02:01:ff:73:26:bc:ad:4d:a0:2e:bd:
                    d1:87:60:be:13:3c:c4:bf:2d:98:0c:2a:db:39:1b:
                    3a:72:75:9c:01:e3:9f:76:a7:dc:47:e1:be:f3:8c:
                    75:57:76:3b:b5:55:24:64:0b:43:75:f3:3d:33:75:
                    a8:28:ef:d0:60:0f:cf:3f:ac:24:58:35:58:b1:54:
                    af:ac:a5:ae:39:62:08:58:a7:72:cc:f1:c8:89:e1:
                    86:e2:45:e4:e8:cf:b1:ab:d1:ed:e4:18:bb:8c:f3:
                    80:0a:69:33:fc:76:4d:9b:98:ba:ee:8d:04:a9:b2:
                    88:13:85:29:58:d7:e2:c3:f6:b2:6e:08:54:ea:c9:
                    11:eb:cc:92:64:a0:c6:7c:ab:52:83:17:b8:d8:22:
                    f5:be:f9:4c:35:cb:24:9c:12:04:9b:92:51:1e:bc:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.16.0-69.58.26.255
                IPv6:
                  2607:d700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19566

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:47:b4:03:d0:9b:9d:8a:74:3a:39:44:e2:a8:ad:7b:ff:
         69:81:e5:ce:90:fd:fd:d4:a2:7b:1b:ed:aa:d9:09:98:3a:a0:
         4e:8c:53:6c:fc:72:41:99:45:9e:57:f0:4d:b9:c6:14:11:93:
         3a:62:19:9a:1f:52:e2:31:52:00:81:38:30:f2:27:cb:90:63:
         5a:cd:8a:7e:5e:bb:24:2c:b2:b2:18:24:1b:13:3b:16:12:47:
         47:dc:57:fd:4f:48:02:eb:e3:b2:57:a9:0a:0c:30:b8:50:bd:
         0d:4d:ce:ee:64:72:6d:ec:0e:30:95:58:24:ce:91:c6:c2:9c:
         9d:20:1d:12:09:83:81:d8:db:7f:4c:a1:05:63:be:97:aa:83:
         cd:df:1f:00:44:50:c3:1a:9c:7e:1c:b5:a8:61:58:6e:dc:4c:
         6f:fa:d3:ff:8d:90:a0:c4:2e:10:45:05:32:55:95:e3:e7:ae:
         b8:ca:26:9d:3e:b9:44:5e:81:3f:ef:57:74:b6:1d:71:40:f0:
         8c:83:66:4c:07:b7:b9:27:fb:ce:d4:31:c7:1d:51:1d:7c:1d:
         01:88:1c:53:99:d4:0c:dc:71:b3:c0:45:d2:67:5d:3b:d5:8c:
         d2:21:30:6f:8a:29:f8:78:56:91:cd:8d:d6:f5:91:c2:f7:3d:
         f4:31:74:b7
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEg7SHETF+yOunQ85kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MTIxNzAxNDUzMloXDTI3MDMyMjAwNDUzMlowLzEtMCsGA1UEAxMk
N2U0ODhiZjktNzQ3MC00Yzg5LThhZWQtNjg0OWU1NDUwZWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/tmnzlPj/I2UH62+61gpFxYm3pVYRmGoyDLq
kn0Y/puVC1nW6hZ5plZS+xT1GtuxsD/i+QB58XQZa8MCrDOVVU22gbh2MKeck7kM
SqKYweNwMnit5DKnKRm0EYuhAgH/cya8rU2gLr3Rh2C+EzzEvy2YDCrbORs6cnWc
AeOfdqfcR+G+84x1V3Y7tVUkZAtDdfM9M3WoKO/QYA/PP6wkWDVYsVSvrKWuOWII
WKdyzPHIieGG4kXk6M+xq9Ht5Bi7jPOACmkz/HZNm5i67o0EqbKIE4UpWNfiw/ay
bghU6skR68ySZKDGfKtSgxe42CL1vvlMNcsknBIEm5JRHrxxpwIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFLMOFKFskXG5Ag3YhHhTSsvANLlQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83
ZTQ4OGJmOS03NDcwLTRjODktOGFlZC02ODQ5ZTU0NTBlZWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzdlNDg4YmY5LTc0NzAtNGM4OS04
YWVkLTY4NDllNTQ1MGVlZS83ZTQ4OGJmOS03NDcwLTRjODktOGFlZC02ODQ5ZTU0
NTBlZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBQEAgABMA4wDAMEBEU6EAMEAEU6GjANBAIAAjAHAwUAJgfXADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJMbjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMjke0A9CbnYp0OjlE
4qite/9pgeXOkP391KJ7G+2q2QmYOqBOjFNs/HJBmUWeV/BNucYUEZM6YhmaH1Li
MVIAgTgw8ifLkGNazYp+XrskLLKyGCQbEzsWEkdH3Ff9T0gC6+OyV6kKDDC4UL0N
Tc7uZHJt7A4wlVgkzpHGwpydIB0SCYOB2Nt/TKEFY76XqoPN3x8ARFDDGpx+HLWo
YVhu3Exv+tP/jZCgxC4QRQUyVZXj5664yiadPrlEXoE/71d0th1xQPCMg2ZMB7e5
J/vO1DHHHVEdfB0BiBxTmdQM3HGzwEXSZ1071YzSITBviin4eFaRzY3W9ZHC9z30
MXS3
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:11 2025 by rpki-client