Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
File:                     95e29289-6f1c-4c2f-84f4-c944e9e54940.cer (raw, json)
Hash identifier:          S5UZMqhGBWH8PMZjjX8mraT1++VTqe9ld+P0uke8/OE=
Subject key identifier:   4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858484C088D471CBD41619CCA8F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Dec 2024 01:45:33 +0000
Certificate not after:    Sun 28 Mar 2027 00:45:33 +0000
Subordinate resources:    AS: 12068
                          AS: 36329
                          IP: 64.58.48.0/20
                          IP: 155.254.144.0/20
                          IP: 199.36.164.0/22
                          IP: 2604:7b00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:08:8d:47:1c:bd:41:61:9c:ca:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 23 01:45:33 2024 GMT
            Not After : Mar 28 00:45:33 2027 GMT
        Subject: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:62:4e:6f:52:1f:41:01:e6:9e:72:fc:26:
                    5a:8a:45:5e:bc:2b:c1:5c:52:92:0a:1f:30:2a:b4:
                    2e:b1:1d:01:2f:ac:d5:13:e5:a6:70:83:7a:99:0b:
                    3c:2b:22:a4:b9:72:83:d4:ae:f1:1f:7b:d2:52:19:
                    64:3d:34:40:ae:0c:96:70:48:1a:df:0f:6e:d9:6a:
                    86:ed:9a:5c:81:0a:44:0b:e6:35:35:66:fd:4e:49:
                    db:50:c2:7e:40:77:ba:3b:3b:92:f3:92:d8:b1:60:
                    f4:55:15:b6:6b:01:1b:a9:cd:79:3d:89:e5:56:c8:
                    c8:c8:36:09:81:f7:72:ce:93:ec:79:05:5d:7e:34:
                    8a:7f:2d:3d:26:3b:f8:02:29:8c:1f:ee:40:29:db:
                    2c:b6:51:71:6d:29:7a:08:9f:8a:e9:ea:dd:86:86:
                    e8:c9:f8:d9:d4:a5:4d:3a:fb:a7:f5:25:54:98:7b:
                    4d:76:cb:bb:cf:b8:41:d7:03:d9:48:50:a0:78:a1:
                    ef:35:4c:29:20:e3:af:6e:c3:94:75:df:be:ef:20:
                    1f:47:e4:65:bd:f8:2c:60:5d:be:22:db:d7:4d:b4:
                    54:ad:be:f9:ac:55:09:97:4a:25:e6:4a:66:b3:89:
                    27:69:45:59:a5:50:59:fb:fb:f2:ba:3b:d1:c0:78:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.48.0/20
                  155.254.144.0/20
                  199.36.164.0/22
                IPv6:
                  2604:7b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12068
                  36329

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:8e:e8:aa:1d:68:94:83:f9:51:19:d0:77:8f:12:c5:3c:ce:
         67:b3:e4:59:9c:7e:cb:c8:35:8d:fa:f5:56:cc:c4:95:46:30:
         76:c1:5d:7d:21:e1:82:f8:65:e6:c2:5a:f3:52:89:f0:73:22:
         4a:b8:ef:ff:06:3c:c1:d9:cf:0e:33:fa:94:d5:ca:5f:28:6b:
         2f:e3:4d:84:c9:9e:fd:25:21:fc:4e:70:c5:b6:a5:88:09:a4:
         b3:bd:55:db:a3:47:cf:1f:82:a7:f7:75:a1:a6:03:b2:f0:c9:
         f7:ec:ed:9e:4b:a0:eb:37:11:7e:b3:b1:6a:0f:7a:8a:26:65:
         11:f3:31:5e:42:6d:0d:1c:dc:75:a1:a2:25:34:5a:f2:61:fb:
         ee:95:ae:62:b9:c3:09:d6:77:50:56:b7:5f:26:0b:ef:1e:02:
         27:c2:11:18:ef:39:96:e9:0f:14:e0:3c:59:12:a4:0a:56:da:
         89:ec:d3:5e:0a:ed:e3:ad:f2:e5:cc:6f:44:cf:7f:12:38:28:
         d2:21:a9:19:28:5b:4c:e6:fc:ff:02:b1:a2:85:1f:19:20:a3:
         c3:aa:7d:df:11:9e:a8:c0:76:82:cf:df:63:cf:23:18:a1:bd:
         1d:f6:6f:67:c5:a3:8d:11:eb:0d:cc:55:84:d4:08:6f:3c:fc:
         3f:64:d2:5d
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEhMCI1HHL1BYZzKjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MTIyMzAxNDUzM1oXDTI3MDMyODAwNDUzM1owLzEtMCsGA1UEAxMk
OTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpliTm9SH0EB5p5y/CZaikVevCvBXFKSCh8w
KrQusR0BL6zVE+WmcIN6mQs8KyKkuXKD1K7xH3vSUhlkPTRArgyWcEga3w9u2WqG
7ZpcgQpEC+Y1NWb9TknbUMJ+QHe6OzuS85LYsWD0VRW2awEbqc15PYnlVsjIyDYJ
gfdyzpPseQVdfjSKfy09Jjv4AimMH+5AKdsstlFxbSl6CJ+K6erdhoboyfjZ1KVN
Ovun9SVUmHtNdsu7z7hB1wPZSFCgeKHvNUwpIOOvbsOUdd++7yAfR+RlvfgsYF2+
ItvXTbRUrb75rFUJl0ol5kpms4knaUVZpVBZ+/vyujvRwHhqmwIDAQABo4IEOjCC
BDYwHQYDVR0OBBYEFE26RaqruYdjpeZvswnFbpcwlJqeMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1ZTI5Mjg5LTZmMWMtNGMyZi04
NGY0LWM5NDRlOWU1NDk0MC85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTll
NTQ5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBARAOjADBASb/pADBALHJKQwDQQCAAIwBwMFACYE
ewAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICLyQCAwCN6TBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzjuiq
HWiUg/lRGdB3jxLFPM5ns+RZnH7LyDWN+vVWzMSVRjB2wV19IeGC+GXmwlrzUonw
cyJKuO//BjzB2c8OM/qU1cpfKGsv402EyZ79JSH8TnDFtqWICaSzvVXbo0fPH4Kn
93WhpgOy8Mn37O2eS6DrNxF+s7FqD3qKJmUR8zFeQm0NHNx1oaIlNFryYfvula5i
ucMJ1ndQVrdfJgvvHgInwhEY7zmW6Q8U4DxZEqQKVtqJ7NNeCu3jrfLlzG9Ez38S
OCjSIakZKFtM5vz/ArGihR8ZIKPDqn3fEZ6owHaCz99jzyMYob0d9m9nxaONEesN
zFWE1AhvPPw/ZNJd
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:41 2025 by rpki-client