Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/357498eb-69d8-4962-9dd3-2f16bccd0eee.cer
File:                     357498eb-69d8-4962-9dd3-2f16bccd0eee.cer (raw, json)
Hash identifier:          tK7L2HXcJ9X9abEyaP+1qNlFMGsSD/RZAochyWgT6ic=
Subject key identifier:   2F:35:67:E9:54:4B:AB:F6:90:29:E2:23:6E:60:47:9D:54:DC:CD:9B
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584913BA958E224980AEF0996260
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/357498eb-69d8-4962-9dd3-2f16bccd0eee/357498eb-69d8-4962-9dd3-2f16bccd0eee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/357498eb-69d8-4962-9dd3-2f16bccd0eee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 14:30:08 +0000
Certificate not after:    Mon 07 Jun 2027 13:30:08 +0000
Subordinate resources:    IP: 135.157.0.0/16
                          IP: 135.211.0.0/16
                          IP: 155.163.0.0/16
                          IP: 155.166.0.0/16
                          IP: 155.170.0.0/16
                          IP: 155.172.0.0 -- 155.174.255.255
                          IP: 199.88.232.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ba:95:8e:22:49:80:ae:f0:99:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar  4 14:30:08 2025 GMT
            Not After : Jun  7 13:30:08 2027 GMT
        Subject: CN=357498eb-69d8-4962-9dd3-2f16bccd0eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:75:48:a1:65:8b:8f:b0:4a:f8:b5:28:8c:
                    4e:91:dd:e0:3a:85:fe:cc:c1:37:9d:e6:a6:7d:40:
                    d6:47:3e:38:0d:2b:af:37:12:44:2f:ae:1e:52:bd:
                    27:bd:0b:fc:17:0c:53:27:5b:a4:d0:63:a8:7e:4e:
                    32:fa:f0:ee:44:a6:46:6f:09:99:fc:3a:95:e4:49:
                    9e:a9:6c:e2:13:53:a8:b4:3c:4e:7f:eb:9f:d9:08:
                    94:78:c9:6d:df:e2:24:7b:ee:38:67:2f:fb:e1:e4:
                    0f:2a:2a:7e:e3:b7:0f:22:75:36:1e:db:25:62:67:
                    a5:dc:3a:99:47:9f:b9:87:7d:f5:66:d1:fe:9a:f9:
                    5a:57:6c:f8:6b:14:25:30:62:41:19:fc:e1:ba:fe:
                    8f:d9:68:a7:3c:60:03:e0:6a:cf:f5:a0:3e:1d:36:
                    4a:84:86:4b:35:ee:0e:f0:e6:b6:4b:d3:0f:ae:c5:
                    64:46:1c:92:96:c3:e6:a8:07:4e:b0:85:00:1d:68:
                    1f:c9:89:8a:07:08:52:5c:72:21:38:e7:7e:0e:8d:
                    9e:a5:e8:34:eb:90:ac:7e:27:ec:9e:bb:04:5d:23:
                    28:b1:b0:ae:d7:9f:7e:58:21:86:81:b7:36:6d:fd:
                    4d:82:d3:bc:99:ff:a5:d0:55:57:86:8e:ac:9b:4d:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:35:67:E9:54:4B:AB:F6:90:29:E2:23:6E:60:47:9D:54:DC:CD:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/357498eb-69d8-4962-9dd3-2f16bccd0eee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/357498eb-69d8-4962-9dd3-2f16bccd0eee/357498eb-69d8-4962-9dd3-2f16bccd0eee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.157.0.0/16
                  135.211.0.0/16
                  155.163.0.0/16
                  155.166.0.0/16
                  155.170.0.0/16
                  155.172.0.0-155.174.255.255
                  199.88.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:3e:c0:5e:84:8a:27:88:d6:82:ba:97:27:e2:62:e4:cb:
         c2:42:8d:34:19:95:6b:bd:62:86:01:82:a0:28:ca:2f:20:9b:
         e5:3f:e7:1b:f7:02:77:88:82:5c:b3:f4:e4:75:6a:03:69:d0:
         d6:3b:9b:44:76:f1:d6:fd:a7:9f:f0:1c:c5:1a:e6:a4:77:76:
         1e:99:e9:a2:6a:a3:4b:91:97:45:37:21:9a:6a:ed:c1:45:c0:
         06:39:25:ef:38:4b:8d:fe:1f:c7:79:2e:38:86:f2:86:75:01:
         51:4d:c2:8a:69:55:c9:4f:29:bd:92:bf:26:0e:56:6f:2c:e1:
         be:6b:91:2a:24:27:f2:79:81:99:17:5d:de:5a:4e:f0:b3:be:
         fb:fd:11:d3:17:f1:09:3c:b5:47:58:73:ec:25:7e:b9:dd:c5:
         d7:cc:4e:d4:3b:fb:05:50:85:30:d9:6e:f5:21:10:0d:24:c6:
         40:d8:5b:0f:c9:e3:65:1d:a5:46:58:1a:16:46:46:fe:72:79:
         7e:27:97:4a:50:59:ae:01:f4:d0:05:ba:9e:0e:5f:6c:38:01:
         82:a6:ce:5f:aa:ac:40:61:56:83:3a:7d:45:5f:eb:4e:65:19:
         6f:1b:9d:55:e3:e2:f8:4e:78:7c:91:fd:3b:93:59:dc:bd:83:
         42:09:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:58 2025 by rpki-client