Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
File:                     3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer (raw, json)
Hash identifier:          W9XtiiluiAnKRswBzAzvYiTR9LY9BWtrtNrX1xBHc+M=
Subject key identifier:   1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858480A51F1A87F3D21C63D298940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 29 Nov 2024 12:50:05 +0000
Certificate not after:    Thu 04 Mar 2027 12:50:05 +0000
Subordinate resources:    AS: 401502
                          IP: 23.130.28.0/24
                          IP: 2602:f783::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:51:f1:a8:7f:3d:21:c6:3d:29:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Nov 29 12:50:05 2024 GMT
            Not After : Mar  4 12:50:05 2027 GMT
        Subject: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:26:5e:4c:c0:37:2b:0f:ab:37:b2:bd:6e:
                    ae:a4:5e:d0:90:36:a4:81:d0:6f:bd:4f:92:f0:d2:
                    34:0c:46:3d:38:aa:9c:aa:89:c2:fb:5b:ec:a9:bd:
                    fe:b7:bd:bc:ce:1d:cc:0d:c0:07:6e:bd:4f:e4:18:
                    0a:f2:2a:d7:91:65:81:13:5b:41:70:4f:22:9d:e1:
                    44:ef:b7:72:45:2b:d1:b7:15:04:a5:7c:0a:66:2d:
                    d1:94:17:43:e3:bc:af:fb:63:89:03:39:bb:dc:e4:
                    00:56:7d:ff:f5:11:1c:13:34:c3:dd:50:be:5d:6a:
                    9d:ce:6c:57:9a:e7:3b:f1:37:e6:7e:a7:5a:3e:be:
                    76:64:fd:5e:b8:5c:b3:be:4f:19:e1:da:74:06:da:
                    ed:2c:9c:2e:3f:e1:f7:d0:d3:ff:34:2a:a5:59:0a:
                    5e:c1:ae:df:70:35:a2:b1:3f:da:af:15:f3:1d:0d:
                    8d:15:12:72:fe:63:f5:63:1f:82:c0:61:09:a7:73:
                    39:a6:51:db:6f:f1:a7:d0:5d:5d:7e:7c:16:58:94:
                    67:46:a9:e9:01:51:70:f0:32:36:c0:cd:ee:a6:ff:
                    d9:13:9b:60:70:a9:10:29:83:33:8b:c9:dd:7b:6b:
                    ab:ad:0a:6d:d2:80:70:76:21:db:75:5c:01:52:b8:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.28.0/24
                IPv6:
                  2602:f783::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401502

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:87:5a:f0:ee:ff:d4:9b:e0:d8:b3:85:05:ba:2f:d1:46:d2:
         d3:2f:ac:72:f5:12:24:e5:75:af:9a:12:47:e2:2e:09:01:4b:
         f6:bd:71:26:3b:43:a6:28:39:a3:ed:e0:0f:c6:54:a5:0d:17:
         71:fd:a8:e5:be:00:b2:c7:88:30:43:74:a8:21:c6:e0:66:25:
         7a:28:07:4a:22:7e:52:0a:e7:ef:d0:f8:1a:d1:12:4c:ba:2b:
         14:d9:79:62:3c:d6:7f:3a:11:e5:70:d2:06:f7:15:dd:b2:7b:
         e9:fb:b5:8c:7e:ca:f3:3c:2c:59:15:cd:74:de:99:64:0f:8e:
         de:09:5b:7e:c9:28:d6:03:28:93:6b:f1:13:3b:bc:31:69:42:
         71:6a:fd:12:2a:ce:ba:48:c1:00:64:dd:4e:ac:a1:01:81:16:
         94:b3:d5:53:2a:e0:e6:a4:ff:3c:da:eb:a2:ca:ae:35:ab:b7:
         32:61:4d:4e:5c:78:b6:47:2b:6a:c2:b6:85:9b:c5:08:58:8d:
         43:ac:bf:dc:41:0a:84:4d:f5:f9:e7:99:b9:b3:0e:73:d0:00:
         bd:07:e2:f9:15:10:84:73:6d:87:0b:a1:0b:65:af:a1:90:4b:
         9e:77:d8:dc:e7:91:0b:83:96:95:c1:62:d8:b8:b6:2d:ba:49:
         e2:67:a8:49
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEgKUfGofz0hxj0piUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI0MTEyOTEyNTAwNVoXDTI3MDMwNDEyNTAwNVowLzEtMCsGA1UEAxMk
M2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFmM2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wEmXkzANysPqzeyvW6upF7QkDakgdBvvU+S
8NI0DEY9OKqcqonC+1vsqb3+t728zh3MDcAHbr1P5BgK8irXkWWBE1tBcE8ineFE
77dyRSvRtxUEpXwKZi3RlBdD47yv+2OJAzm73OQAVn3/9REcEzTD3VC+XWqdzmxX
muc78TfmfqdaPr52ZP1euFyzvk8Z4dp0BtrtLJwuP+H30NP/NCqlWQpewa7fcDWi
sT/arxXzHQ2NFRJy/mP1Yx+CwGEJp3M5plHbb/Gn0F1dfnwWWJRnRqnpAVFw8DI2
wM3upv/ZE5tgcKkQKYMzi8nde2urrQpt0oBwdiHbdVwBUrhHrwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFBofWmqUXbOFCkFTgjRclApU9DovMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z
YTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNhOTU5YWJhLWVmNjktNGE1Ni1h
YTZiLTFjYTFmYTVhZjNhMC8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1
YWYzYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXghwwDgQCAAIwCAMGACYC94MAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYgXjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZh1rw7v/Um+DYs4UFui/RRtLT
L6xy9RIk5XWvmhJH4i4JAUv2vXEmO0OmKDmj7eAPxlSlDRdx/ajlvgCyx4gwQ3So
IcbgZiV6KAdKIn5SCufv0Pga0RJMuisU2XliPNZ/OhHlcNIG9xXdsnvp+7WMfsrz
PCxZFc103plkD47eCVt+ySjWAyiTa/ETO7wxaUJxav0SKs66SMEAZN1OrKEBgRaU
s9VTKuDmpP882uuiyq41q7cyYU1OXHi2RytqwraFm8UIWI1DrL/cQQqETfX555m5
sw5z0AC9B+L5FRCEc22HC6ELZa+hkEued9jc55ELg5aVwWLYuLYtukniZ6hJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:07:07 2025 by rpki-client