Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer
File:                     1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer (raw, json)
Hash identifier:          ss7loPZxjdCW5aO7PJLwVuE0u6UlDjvbtcWMdMBT0p0=
Subject key identifier:   CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584922E1736D69A78641A3BB6BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 00:45:33 +0000
Certificate not after:    Sun 13 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 399979
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:22:e1:73:6d:69:a7:86:41:a3:bb:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar 10 00:45:33 2025 GMT
            Not After : Jun 13 00:45:33 2027 GMT
        Subject: CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:ed:3a:f1:e0:5e:2a:4d:68:54:65:f9:7e:
                    05:e3:aa:d5:29:ae:a6:0a:e4:16:b3:e3:b1:e9:f7:
                    05:ad:94:99:e2:1e:5b:bc:d2:7a:d0:86:56:01:76:
                    42:8d:c7:4a:40:8b:a4:65:97:b8:82:c2:57:3c:b7:
                    b6:2a:71:fa:b6:a6:6e:5c:f1:7a:fc:cd:69:4e:5c:
                    c3:ab:60:21:27:ec:e8:8c:32:24:1f:50:00:3b:da:
                    5a:fe:00:99:b2:78:10:88:51:7d:44:ee:38:88:9f:
                    00:98:d8:0a:4f:fa:f3:87:18:1e:6b:2d:de:37:6f:
                    72:c8:9a:1c:69:12:93:20:32:de:4f:35:fe:a8:d4:
                    2a:ab:23:81:21:d0:c5:f1:5d:e1:1e:1b:31:de:69:
                    05:c9:44:54:06:2a:88:d1:01:21:45:71:2b:b6:61:
                    7f:b0:06:a3:1a:e0:82:c6:61:3c:9f:96:26:e0:cd:
                    56:f9:88:39:26:c0:7e:df:2a:49:31:c5:97:d4:b0:
                    8c:25:0d:68:20:4a:1c:bc:30:20:3f:76:f5:5b:59:
                    15:3a:23:94:a0:31:0f:83:a9:11:9d:c6:59:4c:76:
                    a8:22:4d:2c:eb:6d:0b:03:28:42:8c:f5:50:eb:16:
                    6b:d9:8a:af:e2:60:60:ec:7e:ea:a0:f2:4a:20:22:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399979

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:71:50:3d:23:13:10:5c:82:66:7b:72:8a:b6:85:08:e7:9f:
         57:f5:45:e1:58:2a:fd:b2:13:20:78:fd:ce:b6:f3:8d:be:7d:
         b0:69:7e:62:b5:00:a9:c8:df:36:0a:b2:7f:63:8d:6e:14:82:
         c2:61:61:86:8e:87:20:ce:11:f3:33:5c:de:5c:dc:7a:0e:8e:
         21:ca:10:47:03:f2:89:81:8f:0a:ba:fd:38:c8:f0:93:ea:cf:
         08:28:53:11:2c:cc:73:9c:62:50:3f:00:72:4f:f8:06:8a:04:
         9a:cb:d5:db:37:04:f6:28:64:79:68:ef:e0:a3:37:78:1f:f6:
         57:b7:47:2c:5c:48:23:ae:61:cb:ae:20:31:86:2f:4b:a6:88:
         5d:ea:59:26:ca:78:c4:77:8f:f0:62:4b:0c:a2:34:fe:4a:ca:
         48:3a:94:f8:b2:a6:26:10:da:89:bc:82:0a:42:e5:cc:b9:d7:
         4c:8a:82:66:38:90:0c:ba:8c:78:15:3f:64:2b:13:52:7a:59:
         de:04:b5:25:2b:0b:0d:09:13:12:a4:19:ce:a4:04:37:54:cf:
         fd:5c:d9:88:4a:b7:f6:6d:23:97:f7:b8:9b:51:8f:77:71:34:
         5d:41:cf:d6:7f:ec:72:8c:8b:80:cb:4d:68:bc:c7:c4:28:41:
         22:42:4d:1d
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEki4XNtaaeGQaO7a8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDMxMDAwNDUzM1oXDTI3MDYxMzAwNDUzM1owLzEtMCsGA1UEAxMk
MTAxOWE2MmMtYzZlNi00NWE2LWEwZTctNDcyYTg0YjViYTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwftOvHgXipNaFRl+X4F46rVKa6mCuQWs+Ox
6fcFrZSZ4h5bvNJ60IZWAXZCjcdKQIukZZe4gsJXPLe2KnH6tqZuXPF6/M1pTlzD
q2AhJ+zojDIkH1AAO9pa/gCZsngQiFF9RO44iJ8AmNgKT/rzhxgeay3eN29yyJoc
aRKTIDLeTzX+qNQqqyOBIdDF8V3hHhsx3mkFyURUBiqI0QEhRXErtmF/sAajGuCC
xmE8n5Ym4M1W+Yg5JsB+3ypJMcWX1LCMJQ1oIEocvDAgP3b1W1kVOiOUoDEPg6kR
ncZZTHaoIk0s620LAyhCjPVQ6xZr2Yqv4mBg7H7qoPJKICKnNQIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFM4CDhFiRS5X1hO6tu6FUsIwMb6BMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x
MDE5YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJhODRiNWJhNjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzEwMTlhNjJjLWM2ZTYtNDVhNi1h
MGU3LTQ3MmE4NGI1YmE2OC8xMDE5YTYyYy1jNmU2LTQ1YTYtYTBlNy00NzJhODRi
NWJhNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBhprMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJlxUD0jExBcgmZ7coq2hQjnn1f1
ReFYKv2yEyB4/c62842+fbBpfmK1AKnI3zYKsn9jjW4UgsJhYYaOhyDOEfMzXN5c
3HoOjiHKEEcD8omBjwq6/TjI8JPqzwgoUxEszHOcYlA/AHJP+AaKBJrL1ds3BPYo
ZHlo7+CjN3gf9le3RyxcSCOuYcuuIDGGL0umiF3qWSbKeMR3j/BiSwyiNP5Kykg6
lPiypiYQ2om8ggpC5cy510yKgmY4kAy6jHgVP2QrE1J6Wd4EtSUrCw0JExKkGc6k
BDdUz/1c2YhKt/ZtI5f3uJtRj3dxNF1Bz9Z/7HKMi4DLTWi8x8QoQSJCTR0=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:39:22 2025 by rpki-client