Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/26dc5376-f0af-45f3-890e-d68ddee377d3.cer
File:                     26dc5376-f0af-45f3-890e-d68ddee377d3.cer (raw, json)
Hash identifier:          9rG/3I6cUfaEPUHAMbx7iOW8yUTxw+KN0gPDk3FPZNw=
Subject key identifier:   95:4A:C8:5D:37:7F:A2:06:66:85:31:5F:1A:92:58:D0:EA:09:DB:EC
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848DD341EC72FB1EFCA6B985880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/26dc5376-f0af-45f3-890e-d68ddee377d3/26dc5376-f0af-45f3-890e-d68ddee377d3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/26dc5376-f0af-45f3-890e-d68ddee377d3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Feb 2025 01:45:32 +0000
Certificate not after:    Wed 19 May 2027 00:45:32 +0000
Subordinate resources:    AS: 1061
                          IP: 69.57.222.0/24
                          IP: 192.133.101.0/24
                          IP: 2620:5d:a000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:34:1e:c7:2f:b1:ef:ca:6b:98:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 13 01:45:32 2025 GMT
            Not After : May 19 00:45:32 2027 GMT
        Subject: CN=26dc5376-f0af-45f3-890e-d68ddee377d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:04:03:77:75:b5:d5:63:70:85:7c:8c:a5:
                    9a:11:e6:8c:95:24:6a:e1:52:50:f6:ad:1e:f8:c1:
                    f2:36:bf:90:8d:6e:be:09:35:e2:43:63:36:64:ce:
                    75:ef:1c:3c:94:7f:61:95:9a:db:f9:4d:5b:aa:eb:
                    83:ac:0a:9c:a7:19:f8:24:bc:13:bd:ae:34:c2:8b:
                    5a:2d:33:25:92:23:16:67:1b:cd:66:92:b4:17:d6:
                    be:17:5d:dd:32:60:40:d3:f1:ed:18:4f:7e:72:18:
                    dc:2a:18:51:83:df:bb:7a:e7:cc:c2:8f:6f:8c:10:
                    bc:56:b6:8b:03:26:f8:ba:86:b5:9f:d5:1b:f6:91:
                    65:8b:d5:46:5e:66:f2:87:ef:a2:e0:72:87:91:6b:
                    2b:db:a8:5f:a7:50:49:19:2c:ce:29:f9:ad:28:2f:
                    a2:e3:fa:43:7a:fd:8e:4e:7b:fa:bf:a9:9d:68:03:
                    38:f3:7c:a8:86:f7:1c:70:8b:64:4b:6e:ca:01:af:
                    06:ba:d6:32:1d:87:89:05:ff:d3:12:56:ac:cf:97:
                    b6:fb:11:e3:b4:d8:63:73:36:38:dc:4d:d2:f0:23:
                    e2:2f:13:45:82:a8:6a:08:82:d9:47:dd:7b:58:60:
                    ae:14:ab:bd:51:d1:9e:86:11:a2:bb:45:64:58:11:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:C8:5D:37:7F:A2:06:66:85:31:5F:1A:92:58:D0:EA:09:DB:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/26dc5376-f0af-45f3-890e-d68ddee377d3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/26dc5376-f0af-45f3-890e-d68ddee377d3/26dc5376-f0af-45f3-890e-d68ddee377d3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.222.0/24
                  192.133.101.0/24
                IPv6:
                  2620:5d:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1061

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:94:05:67:bb:b9:1c:44:93:16:da:3a:2f:b2:19:72:38:
         66:a9:b0:7f:b3:23:af:d3:da:f9:09:24:da:23:d3:a7:a1:1c:
         99:6f:d6:81:9d:40:f5:bd:0a:e6:df:47:d6:a9:23:c3:09:1e:
         02:75:c3:be:12:f0:ff:6b:bd:c0:c7:1f:94:5a:dd:11:d9:70:
         18:5c:eb:7b:b8:69:61:5d:1d:4c:2d:87:26:20:01:40:50:70:
         21:83:bf:b9:1a:c8:0e:d7:28:af:e1:94:82:17:ea:3d:c0:19:
         e0:14:4b:df:6a:8a:7a:b2:47:c3:c4:0e:7d:dc:ae:d9:9d:4e:
         1a:9f:96:8d:89:ea:37:0a:6b:4b:70:b3:0a:14:80:f3:1b:28:
         cb:3b:29:09:57:ea:06:cc:7f:81:1b:c1:c4:2c:12:57:6a:02:
         d8:3f:ec:86:8a:0a:63:95:c6:78:32:e6:1d:0a:e8:23:ec:a9:
         4c:98:3d:66:54:28:c6:be:56:a4:c4:3e:00:0c:08:85:bc:5f:
         0b:a7:65:34:f9:8a:0d:89:96:f4:b7:e6:0a:71:34:d2:3a:b0:
         99:6b:97:64:34:4f:bc:f7:2d:dd:de:92:11:41:6f:37:47:4e:
         4d:dd:0e:67:36:ab:cc:97:f4:80:5f:35:50:05:85:f6:0d:fb:
         04:95:12:a8
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEjdNB7HL7HvymuYWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MDIxMzAxNDUzMloXDTI3MDUxOTAwNDUzMlowLzEtMCsGA1UEAxMk
MjZkYzUzNzYtZjBhZi00NWYzLTg5MGUtZDY4ZGRlZTM3N2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYEA3d1tdVjcIV8jKWaEeaMlSRq4VJQ9q0e
+MHyNr+QjW6+CTXiQ2M2ZM517xw8lH9hlZrb+U1bquuDrAqcpxn4JLwTva40wota
LTMlkiMWZxvNZpK0F9a+F13dMmBA0/HtGE9+chjcKhhRg9+7eufMwo9vjBC8VraL
Ayb4uoa1n9Ub9pFli9VGXmbyh++i4HKHkWsr26hfp1BJGSzOKfmtKC+i4/pDev2O
Tnv6v6mdaAM483yohvcccItkS27KAa8GutYyHYeJBf/TElasz5e2+xHjtNhjczY4
3E3S8CPiLxNFgqhqCILZR917WGCuFKu9UdGehhGiu0VkWBGEzQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFJVKyF03f6IGZoUxXxqSWNDqCdvsMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y
NmRjNTM3Ni1mMGFmLTQ1ZjMtODkwZS1kNjhkZGVlMzc3ZDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI2ZGM1Mzc2LWYwYWYtNDVmMy04
OTBlLWQ2OGRkZWUzNzdkMy8yNmRjNTM3Ni1mMGFmLTQ1ZjMtODkwZS1kNjhkZGVl
Mzc3ZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBABFOd4DBADAhWUwDwQCAAIwCQMHACYgAF2gADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgIEJTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsvJQFZ7u5HESTFto6
L7IZcjhmqbB/syOv09r5CSTaI9OnoRyZb9aBnUD1vQrm30fWqSPDCR4CdcO+EvD/
a73Axx+UWt0R2XAYXOt7uGlhXR1MLYcmIAFAUHAhg7+5GsgO1yiv4ZSCF+o9wBng
FEvfaop6skfDxA593K7ZnU4an5aNieo3CmtLcLMKFIDzGyjLOykJV+oGzH+BG8HE
LBJXagLYP+yGigpjlcZ4MuYdCugj7KlMmD1mVCjGvlakxD4ADAiFvF8Lp2U0+YoN
iZb0t+YKcTTSOrCZa5dkNE+89y3d3pIRQW83R05N3Q5nNqvMl/SAXzVQBYX2DfsE
lRKo
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:40 2025 by rpki-client