Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer
File:                     21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer (raw, json)
Hash identifier:          O0ZNE1zC5B0U5gx+Kf+MYuY2tL+b9xb7k4Nhk6MjsVA=
Subject key identifier:   6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285849123F1FCA0929D6E90180C540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 01:45:33 +0000
Certificate not after:    Mon 07 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 14573
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:3f:1f:ca:09:29:d6:e9:01:80:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar  4 01:45:33 2025 GMT
            Not After : Jun  7 00:45:33 2027 GMT
        Subject: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:79:b1:f0:49:48:b1:2b:c8:93:04:74:d8:
                    d7:91:09:78:ee:be:78:fb:49:bf:39:28:45:c8:a7:
                    49:24:8a:cb:f5:84:59:58:bf:0e:19:fe:7f:4d:bb:
                    ed:02:ce:b7:84:ae:69:a7:f9:72:7e:06:a5:bf:4e:
                    dc:72:56:8b:b1:2f:b7:85:43:ab:95:10:9f:58:2a:
                    8b:43:2d:23:45:bd:49:12:34:b2:40:9c:bf:15:72:
                    df:5c:be:8a:36:16:59:ee:e1:93:17:01:12:0c:0f:
                    de:0a:4f:d6:46:b8:54:ca:1b:d2:6a:ec:fd:8f:a4:
                    a8:5d:49:d1:c4:50:8b:f0:90:2d:3f:18:ac:35:f4:
                    32:00:f9:ef:83:32:5d:78:af:8b:1b:82:b0:f5:00:
                    57:81:ba:81:12:17:37:96:01:51:ed:79:f7:00:26:
                    e0:82:f6:29:ce:b3:7c:8a:43:25:a4:de:70:2c:d6:
                    b4:32:da:77:9f:f3:89:37:ed:06:46:8d:14:28:ea:
                    bc:73:0f:03:41:6d:98:02:46:da:58:cf:37:37:78:
                    32:ad:39:74:c0:cb:b4:d7:c7:a0:69:99:4e:c9:ca:
                    df:82:ff:18:36:d0:03:be:df:4b:37:82:a2:d7:f3:
                    c1:d3:bd:7c:b3:0e:4a:26:e0:72:da:ef:4e:37:ed:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14573

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:36:f0:03:c1:58:1d:cc:ae:46:9c:20:5c:d3:ae:33:6b:
         92:06:62:65:16:a7:24:4d:86:f2:6c:13:7a:6c:32:57:a8:97:
         81:22:74:90:bf:e0:6e:00:50:92:d6:59:1c:2e:b0:35:d9:64:
         89:0c:0d:49:b2:f4:87:9a:fc:2a:63:67:b1:2f:b8:2a:eb:aa:
         f5:d6:65:5e:b9:0d:6a:32:c4:20:14:9f:0a:d9:18:62:de:05:
         07:24:44:6f:0b:cc:01:e4:dc:b4:a5:fc:56:01:07:44:fd:80:
         01:2d:d3:8c:8b:25:e7:a9:ad:bc:60:a1:e9:10:35:0e:63:a7:
         ed:5b:bb:e1:64:a5:f1:8a:1a:4a:47:70:37:74:16:fb:21:e3:
         4a:27:16:ee:38:cb:08:2f:7f:0f:7f:27:fa:d2:fc:97:96:f1:
         47:50:03:15:8a:9b:df:9a:25:43:d6:c5:d6:a7:0a:4a:f9:61:
         9d:75:c1:f7:49:07:67:ac:2d:08:76:6e:3a:29:76:57:3c:56:
         97:70:4e:f5:db:54:0a:6c:20:9d:e1:57:37:4e:de:1a:cc:eb:
         c1:3c:36:71:96:e3:d7:c2:47:b0:69:38:63:dd:bc:ac:7f:de:
         13:07:77:8a:16:21:1f:cf:16:2c:c5:34:16:1f:91:28:60:8d:
         73:23:9d:7f
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEkSPx/KCSnW6QGAxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk
MjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3ZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJ5sfBJSLEryJMEdNjXkQl47r54+0m/OShF
yKdJJIrL9YRZWL8OGf5/TbvtAs63hK5pp/lyfgalv07cclaLsS+3hUOrlRCfWCqL
Qy0jRb1JEjSyQJy/FXLfXL6KNhZZ7uGTFwESDA/eCk/WRrhUyhvSauz9j6SoXUnR
xFCL8JAtPxisNfQyAPnvgzJdeK+LG4Kw9QBXgbqBEhc3lgFR7Xn3ACbggvYpzrN8
ikMlpN5wLNa0Mtp3n/OJN+0GRo0UKOq8cw8DQW2YAkbaWM83N3gyrTl0wMu018eg
aZlOycrfgv8YNtADvt9LN4Ki1/PB0718sw5KJuBy2u9ON+0vJQIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFG+F9MerCuyBotT3TRQFoPTBV3mMMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y
MWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIxYmQwYTdkLTZkODktNDM4Zi1i
YThhLThjZTE2MWU5N2QzOS8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFl
OTdkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICOO0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGzs28APBWB3MrkacIFzTrjNrkgZi
ZRanJE2G8mwTemwyV6iXgSJ0kL/gbgBQktZZHC6wNdlkiQwNSbL0h5r8KmNnsS+4
Kuuq9dZlXrkNajLEIBSfCtkYYt4FByREbwvMAeTctKX8VgEHRP2AAS3TjIsl56mt
vGCh6RA1DmOn7Vu74WSl8YoaSkdwN3QW+yHjSicW7jjLCC9/D38n+tL8l5bxR1AD
FYqb35olQ9bF1qcKSvlhnXXB90kHZ6wtCHZuOil2VzxWl3BO9dtUCmwgneFXN07e
GszrwTw2cZbj18JHsGk4Y928rH/eEwd3ihYhH88WLMU0Fh+RKGCNcyOdfw==
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:57:39 2025 by rpki-client