Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer
File:                     5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer (raw, json)
Hash identifier:          tHpYGMuztNWmw7c3cMNM5MUZmpixkzctTxzHt67LLYY=
Subject key identifier:   B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848A48173CDB3818867538928C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Jan 2025 18:20:17 +0000
Certificate not after:    Wed 28 Apr 2027 17:20:17 +0000
Subordinate resources:    IP: 199.182.205.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:81:73:cd:b3:81:88:67:53:89:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 23 18:20:17 2025 GMT
            Not After : Apr 28 17:20:17 2027 GMT
        Subject: CN=5c76d4a1-73e2-4f34-9886-0c16d4b02008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:12:7e:98:96:25:c2:4e:88:32:14:7d:86:
                    6c:89:ba:da:e0:5c:6b:25:65:86:a0:6e:da:b5:fc:
                    eb:c5:62:d0:af:15:f3:40:89:29:d4:08:3f:e9:7b:
                    37:3b:8a:b9:5c:9e:fd:88:e4:f3:38:5e:7c:44:83:
                    60:14:67:9b:13:4a:ef:32:16:30:c6:36:ac:8e:8e:
                    7d:db:d2:bf:46:37:2b:91:be:ed:8b:d3:74:19:a8:
                    8f:b2:f8:b7:6e:1a:32:0f:68:2c:98:28:cc:29:22:
                    13:1f:fa:06:32:85:44:d0:f8:28:a0:be:60:2a:94:
                    ce:e2:ec:57:4f:d0:58:f0:4f:da:51:c9:ab:e8:70:
                    1f:90:20:98:a8:2a:b4:3e:59:f0:18:cf:90:12:6e:
                    c0:e2:4a:ef:9c:f6:4b:b2:b5:bd:f0:5b:68:2d:b0:
                    88:92:9e:69:85:b4:ce:d5:cd:6a:18:d1:d3:e6:cf:
                    2b:90:5d:ae:f9:3e:2c:e7:da:be:80:62:08:cc:42:
                    7f:aa:89:68:35:3a:5e:1a:35:1e:c4:5b:c5:76:90:
                    af:07:67:f3:23:54:94:ee:50:ca:34:68:93:2b:de:
                    1c:e4:fc:a9:cd:c5:b4:b1:e7:00:08:59:8c:b6:b9:
                    11:7c:82:af:c3:9d:02:e0:f8:ae:fb:b5:53:b2:f1:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:1a:61:a2:13:1e:99:1e:ed:bb:f7:df:18:8a:1f:d3:16:
         69:9a:ee:dd:e4:84:92:06:25:07:d6:76:3e:89:f7:c6:c0:33:
         2c:4d:a1:57:84:e9:31:6e:4e:62:c2:ad:d3:d9:f8:c6:d1:b9:
         45:40:3e:a4:3a:91:98:cf:59:1a:ef:f3:71:fe:3b:78:05:26:
         eb:e2:f5:78:d9:1f:64:9b:18:59:0e:1b:91:47:44:23:a6:f9:
         4a:6a:5b:88:87:f6:f5:47:24:e4:88:a9:79:dc:e9:92:ce:76:
         01:3c:b7:57:85:64:47:b8:1d:24:06:45:77:c4:38:ca:11:ce:
         00:b0:28:4a:57:3c:b3:07:7c:20:68:39:7d:60:d6:66:2f:14:
         20:47:61:4d:74:72:6e:c2:32:12:74:1b:fb:da:25:52:10:b3:
         aa:f9:d6:a7:9f:80:70:02:eb:fc:df:ef:18:48:9c:75:17:ac:
         ed:82:ab:91:57:29:bc:eb:9e:86:57:5c:9a:45:38:97:61:0c:
         85:17:7d:e5:b9:f9:fc:c3:9f:f1:d6:6c:98:34:9d:78:2d:c5:
         58:40:85:8e:4c:39:c8:3d:37:54:a5:f9:66:36:42:5e:5f:12:
         ce:e1:e0:0b:c1:1d:6b:9a:3c:7f:8e:00:04:85:a8:74:2c:fe:
         9f:fa:3c:3e
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEikgXPNs4GIZ1OJKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDEyMzE4MjAxN1oXDTI3MDQyODE3MjAxN1owLzEtMCsGA1UEAxMk
NWM3NmQ0YTEtNzNlMi00ZjM0LTk4ODYtMGMxNmQ0YjAyMDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqASfpiWJcJOiDIUfYZsibra4FxrJWWGoG7a
tfzrxWLQrxXzQIkp1Ag/6Xs3O4q5XJ79iOTzOF58RINgFGebE0rvMhYwxjasjo59
29K/Rjcrkb7ti9N0GaiPsvi3bhoyD2gsmCjMKSITH/oGMoVE0PgooL5gKpTO4uxX
T9BY8E/aUcmr6HAfkCCYqCq0PlnwGM+QEm7A4krvnPZLsrW98FtoLbCIkp5phbTO
1c1qGNHT5s8rkF2u+T4s59q+gGIIzEJ/qoloNTpeGjUexFvFdpCvB2fzI1SU7lDK
NGiTK94c5PypzcW0secACFmMtrkRfIKvw50C4Piu+7VTsvHUUQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFLDoHBlLPpu70cjZuKhwzY5Kw3fSMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81
Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRiMDIwMDgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjNzZkNGExLTczZTItNGYzNC05
ODg2LTBjMTZkNGIwMjAwOC81Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRi
MDIwMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADHts0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc9UaYaITHpke7bv33xiK
H9MWaZru3eSEkgYlB9Z2Pon3xsAzLE2hV4TpMW5OYsKt09n4xtG5RUA+pDqRmM9Z
Gu/zcf47eAUm6+L1eNkfZJsYWQ4bkUdEI6b5SmpbiIf29Uck5Iipedzpks52ATy3
V4VkR7gdJAZFd8Q4yhHOALAoSlc8swd8IGg5fWDWZi8UIEdhTXRybsIyEnQb+9ol
UhCzqvnWp5+AcALr/N/vGEicdRes7YKrkVcpvOuehldcmkU4l2EMhRd95bn5/MOf
8dZsmDSdeC3FWECFjkw5yD03VKX5ZjZCXl8SzuHgC8Eda5o8f44ABIWodCz+n/o8
Pg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:04 2025 by rpki-client