Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.cer
File:                     fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.cer (raw, json)
Hash identifier:          +N64X+9e2PQu1oUAP21kgjO5IbATtKsf/v6er2nAxFc=
Subject key identifier:   9F:E1:DB:03:7C:50:EB:C7:EC:37:7D:41:0B:4C:B0:D9:B9:A9:06:1C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858482C621098BAE74E4352618440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Dec 2024 17:40:03 +0000
Certificate not after:    Tue 16 Mar 2027 16:40:03 +0000
Subordinate resources:    AS: 11611
                          AS: 53397
                          IP: 23.158.112.0/24
                          IP: 2602:fd61::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:62:10:98:ba:e7:4e:43:52:61:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 11 17:40:03 2024 GMT
            Not After : Mar 16 16:40:03 2027 GMT
        Subject: CN=fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:b5:6b:bd:0b:8b:88:9d:e5:19:ec:bc:7c:
                    ae:9c:95:f0:c7:44:6f:6e:0b:c4:97:30:84:b4:64:
                    15:56:87:98:d8:aa:c4:c9:d7:ca:e2:50:e0:8c:07:
                    8b:c7:ee:d7:db:2c:2b:6c:6b:03:97:81:5c:dc:15:
                    b9:c7:03:ca:ec:60:19:0d:0e:4a:44:b9:7f:96:9f:
                    0d:49:11:db:51:65:a8:41:7a:48:84:5a:f3:ce:d4:
                    ab:db:59:01:27:35:03:c2:84:43:69:dc:3b:ef:e0:
                    0e:87:33:d1:29:b5:45:ba:78:38:d4:04:5e:5f:21:
                    c4:0a:cf:b5:5e:94:d1:11:1f:df:04:3b:de:82:0f:
                    2b:17:e1:e8:4b:22:86:79:a6:24:c3:1c:90:80:04:
                    3d:c8:e2:a3:c6:24:45:fa:15:b1:c4:41:a3:52:75:
                    d5:ca:f3:00:7a:20:74:e2:cb:c7:b6:05:42:ff:f4:
                    31:8b:71:2f:16:4a:76:96:2d:be:7c:9f:1a:b4:48:
                    f7:0b:73:ba:69:a9:4d:6b:b5:09:5b:44:f6:23:4a:
                    59:0c:ec:dd:c4:03:20:24:70:5b:95:6c:7f:1e:ee:
                    79:cd:2a:bf:35:af:13:4e:fc:90:02:ef:49:3e:8f:
                    ac:05:0d:52:53:a1:33:a7:21:54:32:50:cb:07:a9:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E1:DB:03:7C:50:EB:C7:EC:37:7D:41:0B:4C:B0:D9:B9:A9:06:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.112.0/24
                IPv6:
                  2602:fd61::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11611
                  53397

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:03:79:0f:f0:5c:18:27:74:91:7d:93:9c:77:32:c1:e0:d4:
         17:49:37:cf:39:80:97:e7:85:7b:ba:0a:b1:6b:71:f5:47:0d:
         fd:d6:17:62:a1:6b:29:52:90:9a:b7:48:cc:e2:40:50:cc:54:
         45:77:88:a8:6b:a5:3a:c5:37:89:15:89:35:5f:19:99:96:95:
         a5:3f:07:49:ba:c0:17:52:2d:9e:67:44:b6:07:68:6e:85:49:
         c5:b5:6e:36:a6:64:4d:b7:85:76:a0:b1:3c:b6:55:1d:19:78:
         61:5c:4c:bc:b5:92:80:24:2d:29:c1:04:12:49:a3:6e:a5:59:
         7d:1f:7b:77:a5:04:17:2d:e3:f0:48:52:b6:f6:2e:13:93:55:
         9e:4b:54:d8:fa:c8:c8:2a:9a:b7:a5:42:1d:de:64:a2:7d:eb:
         a2:51:3a:2b:01:f4:62:aa:bb:ff:9c:a9:b6:91:c1:62:a5:f9:
         53:f0:59:5f:c8:c2:bc:b6:0a:83:a3:7b:ee:9d:5d:d3:32:d1:
         0f:35:6f:8a:48:36:b8:4a:e6:a8:f5:76:c6:1e:4b:a7:2b:aa:
         a1:9f:a6:ca:2b:c4:49:9a:83:4f:22:8a:76:04:c7:38:ed:27:
         f3:8d:64:fa:bc:65:f0:a1:3c:6d:8c:30:ab:35:2f:f4:81:35:
         b9:a4:cd:05
-----BEGIN CERTIFICATE-----
MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEgsYhCYuudOQ1JhhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTIxMTE3NDAwM1oXDTI3MDMxNjE2NDAwM1owLzEtMCsGA1UEAxMk
ZmM3ZTUxOTMtZThlZi00YThlLWJlMWEtMGJiNmJjZTI1OWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKi1a70Li4id5RnsvHyunJXwx0RvbgvElzCE
tGQVVoeY2KrEydfK4lDgjAeLx+7X2ywrbGsDl4Fc3BW5xwPK7GAZDQ5KRLl/lp8N
SRHbUWWoQXpIhFrzztSr21kBJzUDwoRDadw77+AOhzPRKbVFung41AReXyHECs+1
XpTRER/fBDvegg8rF+HoSyKGeaYkwxyQgAQ9yOKjxiRF+hWxxEGjUnXVyvMAeiB0
4svHtgVC//Qxi3EvFkp2li2+fJ8atEj3C3O6aalNa7UJW0T2I0pZDOzdxAMgJHBb
lWx/Hu55zSq/Na8TTvyQAu9JPo+sBQ1SU6EzpyFUMlDLB6mXtQIDAQABo4IELjCC
BCowHQYDVR0OBBYEFJ/h2wN8UOvH7Dd9QQtMsNm5qQYcMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m
YzdlNTE5My1lOGVmLTRhOGUtYmUxYS0wYmI2YmNlMjU5ZDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ZjN2U1MTkzLWU4ZWYtNGE4ZS1i
ZTFhLTBiYjZiY2UyNTlkNi9mYzdlNTE5My1lOGVmLTRhOGUtYmUxYS0wYmI2YmNl
MjU5ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAAXnnAwDQQCAAIwBwMFACYC/WEwHgYIKwYBBQUH
AQgBAf8EDzANoAswCQICLVsCAwDQlTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTA3kP8FwYJ3SRfZOcdzLB
4NQXSTfPOYCX54V7ugqxa3H1Rw391hdioWspUpCat0jM4kBQzFRFd4ioa6U6xTeJ
FYk1XxmZlpWlPwdJusAXUi2eZ0S2B2huhUnFtW42pmRNt4V2oLE8tlUdGXhhXEy8
tZKAJC0pwQQSSaNupVl9H3t3pQQXLePwSFK29i4Tk1WeS1TY+sjIKpq3pUId3mSi
feuiUTorAfRiqrv/nKm2kcFipflT8FlfyMK8tgqDo3vunV3TMtEPNW+KSDa4Suao
9XbGHkunK6qhn6bKK8RJmoNPIop2BMc47SfzjWT6vGXwoTxtjDCrNS/0gTW5pM0F
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:53:48 2025 by rpki-client