Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c.cer
File:                     13f95d00-e723-4d02-a4d7-88fe5200506c.cer (raw, json)
Hash identifier:          /MRIOw96PXteaYPyIH5G6G8rstAFWXr3Gw5QcLiiZVY=
Subject key identifier:   A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848D89C3AFDC3870DE3C1982368
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Feb 2025 10:16:17 +0000
Certificate not after:    Mon 17 May 2027 09:16:17 +0000
Subordinate resources:    IP: 153.40.0.0/16
                          IP: 163.35.0.0 -- 163.39.255.255
                          IP: 192.193.0.0/16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d8:9c:3a:fd:c3:87:0d:e3:c1:98:23:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 11 10:16:17 2025 GMT
            Not After : May 17 09:16:17 2027 GMT
        Subject: CN=13f95d00-e723-4d02-a4d7-88fe5200506c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:70:d9:5b:df:b0:cf:8e:48:6b:dc:cb:57:
                    af:91:dc:13:7d:70:ac:e1:08:52:b5:e5:9b:65:c3:
                    fc:96:ad:be:95:ea:c8:6d:aa:c8:8a:f4:16:be:c9:
                    86:f1:fc:81:68:58:d2:3d:8f:dc:b9:c2:79:c1:d5:
                    24:4c:cd:7d:a3:f5:ea:6e:d4:fd:19:d6:8a:60:4b:
                    17:bb:dd:30:c7:90:0d:50:e2:36:82:9d:f1:0b:27:
                    7e:fc:1d:1e:42:49:c2:80:c2:46:e1:d1:93:32:4a:
                    85:fa:5a:91:6a:56:7c:09:7e:f7:04:ab:d8:c2:ec:
                    98:3f:57:0d:bb:46:6c:b0:8f:b5:13:db:62:01:cd:
                    40:6b:17:38:7e:dc:59:7a:a0:e4:93:d3:35:b1:cc:
                    65:af:51:32:6a:43:09:01:14:2c:53:da:02:71:f9:
                    73:8d:d3:d0:3e:f6:a0:ab:74:d6:c3:95:ed:64:21:
                    44:25:ae:92:43:95:61:30:84:78:92:f0:9d:18:ae:
                    e2:c2:29:7d:d9:57:82:a6:0e:60:27:99:1e:33:a5:
                    6e:35:e9:da:f0:b6:57:4b:d2:c8:39:03:9f:07:dd:
                    bc:4d:e5:e6:b9:a0:d2:f8:fb:e1:01:65:13:b6:aa:
                    8d:d4:c2:40:79:0b:1b:8b:40:f4:41:4c:53:2f:31:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.40.0.0/16
                  163.35.0.0-163.39.255.255
                  192.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e5:52:15:98:6d:39:68:0d:1b:51:27:c3:fb:b9:33:c0:f0:
         42:e2:30:6e:50:aa:47:0f:ec:fe:ac:41:48:64:58:08:2a:e9:
         69:6f:6b:3e:82:b0:c1:cb:bb:e1:95:7a:21:de:5f:4a:82:19:
         fe:da:ce:a0:7d:cb:2e:14:34:93:3f:ff:a1:cc:6f:25:e3:fb:
         3d:ed:19:1f:4f:a1:49:fa:b5:05:65:44:42:58:74:6e:96:ae:
         00:87:08:a9:bb:86:75:a8:52:3b:76:91:87:ac:34:9e:69:86:
         50:b3:fd:7e:0f:1d:86:43:3b:89:58:a2:e8:03:ab:26:09:5d:
         2e:d4:ad:55:0b:3d:00:49:af:7b:c8:e4:1d:01:35:39:2a:c0:
         de:5e:2f:61:bd:51:72:70:77:c4:00:ba:4d:f2:be:73:5e:c2:
         c3:b6:ea:d5:ac:4c:1e:2b:1c:a1:a1:e5:39:06:ef:ab:d2:10:
         79:78:72:3e:cb:ad:f4:6d:00:31:21:e5:e7:e1:8e:f6:51:48:
         c3:e7:9f:ad:fd:c8:9a:ee:a4:7b:12:4e:ad:76:73:45:a0:76:
         98:0e:c0:98:8d:49:06:00:6a:3a:05:d1:a4:f1:bb:f3:79:d9:
         b5:41:5f:fd:91:f6:5d:80:1b:0d:f6:08:79:68:e9:51:37:1b:
         6f:ff:49:0d
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjYnDr9w4cN48GYI2gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDIxMTEwMTYxN1oXDTI3MDUxNzA5MTYxN1owLzEtMCsGA1UEAxMk
MTNmOTVkMDAtZTcyMy00ZDAyLWE0ZDctODhmZTUyMDA1MDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4tw2VvfsM+OSGvcy1evkdwTfXCs4QhSteWb
ZcP8lq2+lerIbarIivQWvsmG8fyBaFjSPY/cucJ5wdUkTM19o/XqbtT9GdaKYEsX
u90wx5ANUOI2gp3xCyd+/B0eQknCgMJG4dGTMkqF+lqRalZ8CX73BKvYwuyYP1cN
u0ZssI+1E9tiAc1Aaxc4ftxZeqDkk9M1scxlr1EyakMJARQsU9oCcflzjdPQPvag
q3TWw5XtZCFEJa6SQ5VhMIR4kvCdGK7iwil92VeCpg5gJ5keM6VuNena8LZXS9LI
OQOfB928TeXmuaDS+PvhAWUTtqqN1MJAeQsbi0D0QUxTLzEcQwIDAQABo4IEDzCC
BAswHQYDVR0OBBYEFKZ9aLibMYXkzjMUZnyOYlqbAG4MMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x
M2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIwMDUwNmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzZjk1ZDAwLWU3MjMtNGQwMi1h
NGQ3LTg4ZmU1MjAwNTA2Yy8xM2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIw
MDUwNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMBwEAgABMBYDAwCZKDAKAwMAoyMDAwOjIAMDAMDBMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AKjlUhWYbTloDRtRJ8P7uTPA8ELiMG5QqkcP7P6sQUhkWAgq6Wlvaz6CsMHLu+GV
eiHeX0qCGf7azqB9yy4UNJM//6HMbyXj+z3tGR9PoUn6tQVlREJYdG6WrgCHCKm7
hnWoUjt2kYesNJ5phlCz/X4PHYZDO4lYougDqyYJXS7UrVULPQBJr3vI5B0BNTkq
wN5eL2G9UXJwd8QAuk3yvnNewsO26tWsTB4rHKGh5TkG76vSEHl4cj7LrfRtADEh
5efhjvZRSMPnn639yJrupHsSTq12c0WgdpgOwJiNSQYAajoF0aTxu/N52bVBX/2R
9l2AGw32CHlo6VE3G2//SQ0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:39 2025 by rpki-client