Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
File:                     67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer (raw, json)
Hash identifier:          enzwYCMVsTinOSkE895WqVt+VwfiROURfGyvlCKelgM=
Subject key identifier:   3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847F6E2AFD088070966367BF940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Nov 2024 13:45:33 +0000
Certificate not after:    Thu 25 Feb 2027 13:45:33 +0000
Subordinate resources:    AS: 14353
                          AS: 14838
                          IP: 64.7.220.0/24
                          IP: 64.95.157.0/24
                          IP: 65.38.108.0/24
                          IP: 70.42.116.0/24
                          IP: 70.42.119.0/24
                          IP: 199.15.160.0/22
                          IP: 216.52.12.0/24
                          IP: 216.52.15.0/24
                          IP: 216.52.17.0/24
                          IP: 216.52.21.0/24
                          IP: 2620:5:c000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:e2:af:d0:88:07:09:66:36:7b:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 22 13:45:33 2024 GMT
            Not After : Feb 25 13:45:33 2027 GMT
        Subject: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:d8:d9:2c:99:21:63:2c:23:1e:b4:c9:4c:
                    e7:3c:8a:94:0e:aa:19:b6:14:99:87:6f:9f:15:db:
                    4c:c7:6c:56:10:8a:6c:4a:56:69:a4:37:e1:02:30:
                    36:84:34:7c:88:90:19:70:3b:17:a2:f0:ce:5d:22:
                    a0:e5:77:c0:a6:16:6a:b8:c8:e8:12:f0:11:48:31:
                    79:78:25:e3:89:10:09:9b:45:bb:e2:5c:be:d0:18:
                    ea:0d:2e:1d:95:ec:14:e6:d0:26:8a:1a:b0:d0:ab:
                    d7:e8:93:6a:92:06:f3:95:f8:d0:fe:cb:e8:1f:c9:
                    94:e9:d1:98:37:a3:b0:42:15:23:c1:17:d4:55:1b:
                    87:9f:02:a4:73:f7:43:61:66:85:d4:05:0f:47:6d:
                    d9:3c:5d:b2:8f:dd:30:03:01:be:0b:8f:59:5d:87:
                    a6:03:31:8c:61:f8:6f:7b:71:c0:75:03:15:b6:17:
                    44:41:f6:69:4e:ad:bf:a4:dc:22:38:1f:47:13:c2:
                    5a:20:e5:02:f5:28:28:71:46:4b:a1:26:f6:c6:0d:
                    30:15:dd:57:ee:05:bf:68:9c:d8:09:d6:aa:57:09:
                    32:b4:f6:4d:18:0d:83:e5:42:5c:07:98:17:c3:de:
                    a8:c1:12:7c:c3:10:07:75:6e:6f:80:e6:cd:8d:8d:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.220.0/24
                  64.95.157.0/24
                  65.38.108.0/24
                  70.42.116.0/24
                  70.42.119.0/24
                  199.15.160.0/22
                  216.52.12.0/24
                  216.52.15.0/24
                  216.52.17.0/24
                  216.52.21.0/24
                IPv6:
                  2620:5:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14353
                  14838

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e1:eb:69:b0:53:4b:a2:fe:c1:46:09:15:f3:c0:8c:56:1a:
         41:69:70:ac:b4:82:35:9e:7b:53:20:68:1d:5b:73:37:a9:d9:
         e7:2c:85:ad:80:c4:b8:a3:dc:13:51:44:76:b2:34:06:e9:df:
         d4:45:13:b9:85:19:77:d4:dc:13:7b:f2:e4:fd:46:66:53:46:
         96:87:b5:83:06:1a:99:3d:6d:b5:d1:62:87:d5:af:33:db:7d:
         00:e0:02:6d:7e:1b:55:e8:03:b8:9e:f8:8a:cc:fb:8f:f1:b3:
         08:16:89:6b:ec:36:42:75:72:3a:6e:53:6f:53:e0:1a:7e:16:
         68:c8:10:5e:38:ac:26:78:92:e2:1c:93:12:c1:f3:f5:fc:17:
         06:1d:7a:09:35:9b:bf:0d:ed:af:b4:c4:92:bb:38:21:b4:16:
         47:c4:5d:7d:9f:90:d4:36:d6:a4:84:b5:77:3c:98:dd:4e:3b:
         f1:1b:61:56:be:1f:aa:66:b1:be:94:e3:cf:bb:bb:fc:89:f8:
         53:95:b1:c5:8d:bd:ab:a4:df:25:bf:15:9b:d7:0a:cf:2b:bd:
         b5:54:15:17:e5:cc:9b:fd:d7:7c:a9:1a:45:41:c8:9b:19:46:
         a8:08:1f:2c:29:3a:b6:f7:c6:ac:ce:a8:40:5c:37:2c:c5:17:
         aa:77:5d:00
-----BEGIN CERTIFICATE-----
MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEf24q/QiAcJZjZ7+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTEyMjEzNDUzM1oXDTI3MDIyNTEzNDUzM1owLzEtMCsGA1UEAxMk
NjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThlNWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDTY2SyZIWMsIx60yUznPIqUDqoZthSZh2+f
FdtMx2xWEIpsSlZppDfhAjA2hDR8iJAZcDsXovDOXSKg5XfAphZquMjoEvARSDF5
eCXjiRAJm0W74ly+0BjqDS4dlewU5tAmihqw0KvX6JNqkgbzlfjQ/svoH8mU6dGY
N6OwQhUjwRfUVRuHnwKkc/dDYWaF1AUPR23ZPF2yj90wAwG+C49ZXYemAzGMYfhv
e3HAdQMVthdEQfZpTq2/pNwiOB9HE8JaIOUC9SgocUZLoSb2xg0wFd1X7gW/aJzY
CdaqVwkytPZNGA2D5UJcB5gXw96owRJ8wxAHdW5vgObNjY1RwwIDAQABo4IEZTCC
BGEwHQYDVR0OBBYEFDzV9pxToOO21z0CMLThLQMobDBoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82
N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzY3YzhlMWEyLTY5NTUtNDVhYS1i
ZDU4LWMyZWMyNmU4ZTVlYy82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZl
OGU1ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwZgYIKwYBBQUH
AQcBAf8EVzBVMEIEAgABMDwDBABAB9wDBABAX50DBABBJmwDBABGKnQDBABGKncD
BALHD6ADBADYNAwDBADYNA8DBADYNBEDBADYNBUwDwQCAAIwCQMHACYgAAXAADAd
BggrBgEFBQcBCAEB/wQOMAygCjAIAgI4EQICOfYwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKuHrabBTS6L+
wUYJFfPAjFYaQWlwrLSCNZ57UyBoHVtzN6nZ5yyFrYDEuKPcE1FEdrI0Bunf1EUT
uYUZd9TcE3vy5P1GZlNGloe1gwYamT1ttdFih9WvM9t9AOACbX4bVegDuJ74isz7
j/GzCBaJa+w2QnVyOm5Tb1PgGn4WaMgQXjisJniS4hyTEsHz9fwXBh16CTWbvw3t
r7TEkrs4IbQWR8RdfZ+Q1DbWpIS1dzyY3U478RthVr4fqmaxvpTjz7u7/In4U5Wx
xY29q6TfJb8Vm9cKzyu9tVQVF+XMm/3XfKkaRUHImxlGqAgfLCk6tvfGrM6oQFw3
LMUXqnddAA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:44:48 2025 by rpki-client