Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
File:                     776cdb06-1306-4fbd-b690-680ab4fe3f19.cer (raw, json)
Hash identifier:          Ow2tN9sismO2/N7pXOuc+RqXtk7hMcqB11KJIR61YDE=
Subject key identifier:   CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858481C92EC8DC41F1800ED86E980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 06 Dec 2024 01:45:33 +0000
Certificate not after:    Thu 11 Mar 2027 01:45:33 +0000
Subordinate resources:    IP: 104.152.48.0/22
                          IP: 165.140.240.0/22
                          IP: 2602:fc16::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:92:ec:8d:c4:1f:18:00:ed:86:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec  6 01:45:33 2024 GMT
            Not After : Mar 11 01:45:33 2027 GMT
        Subject: CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:0a:36:8e:2d:12:a0:81:b7:b8:11:97:9a:
                    ff:82:8d:77:a7:08:91:fb:aa:c4:57:f2:2a:30:df:
                    97:45:a1:f2:63:45:79:e4:cd:18:80:9b:56:d2:5b:
                    78:7c:76:24:63:52:8a:ae:3c:82:28:2c:82:67:8c:
                    c1:e4:87:b8:6c:18:94:3d:da:74:35:ed:d4:10:d5:
                    58:99:73:ad:b9:fd:3f:03:0e:6c:74:3f:4d:61:c9:
                    f7:27:98:15:ad:41:95:4e:74:3a:36:0f:f8:c2:90:
                    8c:de:64:e4:0f:7a:d9:cd:13:7a:3c:66:51:ac:e7:
                    bf:8e:31:2a:34:0b:dd:6b:6c:e1:51:ea:af:b8:b3:
                    a9:fe:cc:2a:88:ba:99:7b:9a:04:b9:e7:13:7b:5a:
                    8d:d0:54:68:a2:0b:07:2f:52:ad:42:e8:e9:79:63:
                    60:88:ba:c3:a0:39:df:fa:53:7c:54:55:43:b4:bb:
                    05:20:54:81:f4:d1:2a:f3:f8:10:8f:09:da:52:08:
                    c6:8f:ad:3a:95:56:69:a0:32:f7:8a:df:d2:34:c0:
                    5c:91:a3:c7:d5:8d:13:42:f4:5e:ad:35:b7:d7:59:
                    4c:5b:6d:65:69:2c:2c:9b:48:c1:a9:ea:0e:ad:dc:
                    17:f0:d8:e7:91:1d:d1:8d:90:a1:b8:66:ef:c7:3b:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.48.0/22
                  165.140.240.0/22
                IPv6:
                  2602:fc16::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:2c:db:71:6b:86:f8:0a:da:50:0e:85:3a:fc:43:eb:9c:
         39:3e:9b:31:8b:eb:2d:37:70:c5:7d:cd:92:f0:a6:7a:9f:28:
         da:89:65:5e:53:71:20:95:b2:e2:ce:5d:54:cd:66:e7:43:b1:
         8d:57:0e:42:cf:c8:ff:5e:51:dd:35:af:26:25:92:8b:ac:f3:
         01:76:79:fd:f4:2a:d7:fe:b2:c9:f3:4d:7c:6f:1f:fb:7d:aa:
         bb:73:6f:7c:f1:1e:d5:91:f3:81:11:10:3a:6a:7f:fb:ce:9e:
         51:6f:87:36:10:64:f8:08:df:0a:89:18:da:d5:9f:d2:b0:3d:
         e3:95:49:44:21:6f:61:83:53:3b:0b:8d:7a:92:9a:f6:d9:15:
         e0:56:57:a8:53:75:9e:0f:d4:eb:5b:76:92:9d:3c:6a:a8:5c:
         52:19:a3:15:56:4f:84:a0:e7:66:c9:74:56:29:25:a3:13:50:
         e6:a0:8d:c6:ba:ce:76:a8:41:49:97:95:3d:36:ea:c6:ed:e5:
         76:1c:31:f7:2d:68:5a:41:94:44:f7:9b:e7:ad:48:80:fa:14:
         a2:0b:22:94:e6:cd:b1:b4:83:b4:ee:0e:bd:43:a8:f0:ae:f7:
         da:54:90:f4:a3:04:46:65:78:f8:a6:ed:c7:49:76:35:a0:7f:
         7b:a1:71:ec
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEgckuyNxB8YAO2G6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MTIwNjAxNDUzM1oXDTI3MDMxMTAxNDUzM1owLzEtMCsGA1UEAxMk
Nzc2Y2RiMDYtMTMwNi00ZmJkLWI2OTAtNjgwYWI0ZmUzZjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQAKNo4tEqCBt7gRl5r/go13pwiR+6rEV/Iq
MN+XRaHyY0V55M0YgJtW0lt4fHYkY1KKrjyCKCyCZ4zB5Ie4bBiUPdp0Ne3UENVY
mXOtuf0/Aw5sdD9NYcn3J5gVrUGVTnQ6Ng/4wpCM3mTkD3rZzRN6PGZRrOe/jjEq
NAvda2zhUeqvuLOp/swqiLqZe5oEuecTe1qN0FRoogsHL1KtQujpeWNgiLrDoDnf
+lN8VFVDtLsFIFSB9NEq8/gQjwnaUgjGj606lVZpoDL3it/SNMBckaPH1Y0TQvRe
rTW311lMW21laSwsm0jBqeoOrdwX8NjnkR3RjZChuGbvxztEuwIDAQABo4IEFTCC
BBEwHQYDVR0OBBYEFM8vGFHNL8Y07EjF2Af3iNvQ/I6EMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
NzZjZGIwNi0xMzA2LTRmYmQtYjY5MC02ODBhYjRmZTNmMTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc3NmNkYjA2LTEzMDYtNGZiZC1i
NjkwLTY4MGFiNGZlM2YxOS83NzZjZGIwNi0xMzA2LTRmYmQtYjY5MC02ODBhYjRm
ZTNmMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAJomDADBAKljPAwDgQCAAIwCAMGBCYC/BYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXDLNtxa4b4CtpQDoU6/EPrnDk+mzGL6y03cMV9zZLwpnqfKNqJZV5T
cSCVsuLOXVTNZudDsY1XDkLPyP9eUd01ryYlkous8wF2ef30Ktf+ssnzTXxvH/t9
qrtzb3zxHtWR84EREDpqf/vOnlFvhzYQZPgI3wqJGNrVn9KwPeOVSUQhb2GDUzsL
jXqSmvbZFeBWV6hTdZ4P1OtbdpKdPGqoXFIZoxVWT4Sg52bJdFYpJaMTUOagjca6
znaoQUmXlT026sbt5XYcMfctaFpBlET3m+etSID6FKILIpTmzbG0g7TuDr1DqPCu
99pUkPSjBEZlePim7cdJdjWgf3uhcew=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:11 2025 by rpki-client