Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer
File:                     647c9192-235d-4283-a432-fa5f0508c594.cer (raw, json)
Hash identifier:          rujj64Nx+v15sb1DsIPQM26wxexIXI1ysErN7TBoDec=
Subject key identifier:   CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584919AAEA581DF0DE5E524E0780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:33:24 +0000
Certificate not after:    Tue 01 Jun 2027 07:24:22 +0000
Subordinate resources:    IP: 23.135.188.0/24
                          IP: 45.45.132.0/22
                          IP: 2604:6a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:aa:ea:58:1d:f0:de:5e:52:4e:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar  6 17:33:24 2025 GMT
            Not After : Jun  1 07:24:22 2027 GMT
        Subject: CN=647c9192-235d-4283-a432-fa5f0508c594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:b2:98:2b:0a:44:5c:39:59:bb:3e:ee:a2:
                    79:78:9e:44:dc:ae:60:ca:b4:9e:b2:22:c1:7c:35:
                    44:9b:59:53:4d:4b:43:c1:7c:f8:19:2d:77:ee:db:
                    36:ec:0f:dd:20:d5:af:da:24:e4:7c:16:7c:77:15:
                    c9:93:d2:ed:42:be:90:d2:48:80:96:71:68:ec:09:
                    d1:99:04:38:70:54:03:37:08:75:5d:88:a5:f1:ad:
                    97:10:16:be:c8:46:a2:d2:61:a1:67:9f:94:7e:42:
                    37:4f:92:f9:02:d6:10:0e:f6:a8:80:ba:e8:72:47:
                    96:86:f6:31:d6:fb:50:e3:64:4f:85:8d:bc:94:84:
                    a9:56:39:b6:7b:67:5c:b7:10:44:ca:02:d2:98:1b:
                    40:96:8f:17:2a:64:c4:e5:b4:27:91:bf:0a:a3:1d:
                    66:c8:21:f4:3a:99:4c:66:30:ec:44:2d:2b:79:2b:
                    00:67:a7:24:92:6e:82:7e:a3:9c:f0:e8:bc:6f:75:
                    1b:00:44:a0:5c:59:fc:d8:91:c7:75:b9:a6:7a:b8:
                    99:ee:f3:22:1a:00:c1:d6:4b:a9:b9:6a:b4:dc:13:
                    26:ec:86:c1:14:ce:0a:6d:e2:2c:fd:dd:af:73:1d:
                    4f:8b:42:23:b0:1e:5f:69:82:68:9e:9f:e0:03:7a:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.188.0/24
                  45.45.132.0/22
                IPv6:
                  2604:6a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b7:23:85:c0:d9:ca:68:bf:ef:42:46:14:cf:ee:22:a4:51:
         4f:c8:68:4e:d6:56:3d:90:13:9c:74:1a:62:ce:db:f6:16:da:
         b8:2b:28:88:4d:27:a5:ad:c6:8e:73:10:46:2d:64:d1:c9:39:
         48:6f:d4:47:0b:f0:7c:70:90:e1:a9:ba:b4:4c:8e:f9:66:4d:
         19:eb:94:02:31:91:99:d1:28:23:7e:1e:e8:8f:d7:75:32:47:
         e6:79:82:70:a8:15:43:b0:22:c8:37:0a:aa:23:ab:50:29:13:
         ec:ca:bf:88:a8:07:51:fc:4e:e7:a6:96:6c:ed:b2:f7:b7:d6:
         16:47:bd:67:05:0c:67:4b:37:2c:48:f6:9e:d4:93:c3:37:1f:
         57:e8:a0:74:f9:ed:e2:41:a4:80:db:9a:de:b5:3c:2a:08:9b:
         45:fd:c1:47:80:25:7d:7a:5b:cd:43:05:ae:4c:5f:9a:81:ef:
         60:97:e8:d9:03:ee:63:62:82:0a:f8:85:30:a0:dc:d5:17:44:
         c5:e5:f8:12:d6:cb:db:bb:16:c5:f0:8f:91:ac:9a:16:17:7f:
         02:07:9f:36:57:87:87:a8:c6:49:1b:f7:3b:af:98:86:8b:c4:
         a7:a9:2c:37:61:39:93:2c:78:91:91:22:62:e9:f5:42:2c:0b:
         45:25:09:9c
-----BEGIN CERTIFICATE-----
MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEkZqupYHfDeXlJOB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDMwNjE3MzMyNFoXDTI3MDYwMTA3MjQyMlowLzEtMCsGA1UEAxMk
NjQ3YzkxOTItMjM1ZC00MjgzLWE0MzItZmE1ZjA1MDhjNTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVqymCsKRFw5Wbs+7qJ5eJ5E3K5gyrSesiLB
fDVEm1lTTUtDwXz4GS137ts27A/dINWv2iTkfBZ8dxXJk9LtQr6Q0kiAlnFo7AnR
mQQ4cFQDNwh1XYil8a2XEBa+yEai0mGhZ5+UfkI3T5L5AtYQDvaogLrockeWhvYx
1vtQ42RPhY28lISpVjm2e2dctxBEygLSmBtAlo8XKmTE5bQnkb8Kox1myCH0OplM
ZjDsRC0reSsAZ6ckkm6CfqOc8Oi8b3UbAESgXFn82JHHdbmmeriZ7vMiGgDB1kup
uWq03BMm7IbBFM4KbeIs/d2vcx1Pi0IjsB5faYJonp/gA3ojSQIDAQABo4IEFDCC
BBAwHQYDVR0OBBYEFM0xH3Zz9JhTr0/TJV9TtLpPR8kBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82
NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUwOGM1OTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY0N2M5MTkyLTIzNWQtNDI4My1h
NDMyLWZhNWYwNTA4YzU5NC82NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUw
OGM1OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAAXh7wDBAItLYQwDQQCAAIwBwMFACYEBqAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHrcjhcDZymi/70JGFM/uIqRRT8hoTtZWPZATnHQaYs7b9hbauCsoiE0n
pa3GjnMQRi1k0ck5SG/URwvwfHCQ4am6tEyO+WZNGeuUAjGRmdEoI34e6I/XdTJH
5nmCcKgVQ7AiyDcKqiOrUCkT7Mq/iKgHUfxO56aWbO2y97fWFke9ZwUMZ0s3LEj2
ntSTwzcfV+igdPnt4kGkgNua3rU8KgibRf3BR4AlfXpbzUMFrkxfmoHvYJfo2QPu
Y2KCCviFMKDc1RdExeX4EtbL27sWxfCPkayaFhd/AgefNleHh6jGSRv3O6+YhovE
p6ksN2E5kyx4kZEiYun1QiwLRSUJnA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:51 2025 by rpki-client