Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
File:                     87edc032-d938-4504-bf4b-96c599e50195.cer (raw, json)
Hash identifier:          BxUJ67xX2Z9WvgrtP9DWPpPQmI3jKOdE78UUbCFXnVU=
Subject key identifier:   1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858480265245E117BEB450C278340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 26 Nov 2024 16:42:18 +0000
Certificate not after:    Mon 01 Mar 2027 16:42:18 +0000
Subordinate resources:    AS: 27005
                          AS: 62818
                          IP: 65.39.96.0/19
                          IP: 69.2.0.0/20
                          IP: 148.59.212.0/23
                          IP: 162.253.232.0/21
                          IP: 207.254.192.0 -- 207.254.203.255
                          IP: 2606:6d80::/32
                          IP: 2607:fbf0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:65:24:5e:11:7b:eb:45:0c:27:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Nov 26 16:42:18 2024 GMT
            Not After : Mar  1 16:42:18 2027 GMT
        Subject: CN=87edc032-d938-4504-bf4b-96c599e50195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:4f:5a:74:e3:95:d2:9b:c3:52:6d:f4:da:
                    0a:46:87:ff:9e:31:90:2f:ec:bd:0e:97:9f:9d:e6:
                    1a:44:19:a6:12:43:59:b8:e9:e1:10:19:07:e0:31:
                    25:ad:e4:b1:94:83:9f:c4:7f:ce:56:f8:19:17:8f:
                    e0:df:0a:c9:19:f8:3b:d6:e2:3f:a2:ae:e0:fc:8d:
                    29:87:3a:14:52:8c:3e:a5:f5:b7:cd:a3:5b:a3:eb:
                    a7:ae:8b:80:1d:c9:47:59:72:6d:e2:14:f0:d3:83:
                    4f:6c:82:3b:25:7b:57:18:a3:33:7f:97:36:1f:c1:
                    df:d9:9e:ef:63:91:94:29:44:24:ac:35:b2:4e:a9:
                    ac:e7:70:5e:7b:d3:50:36:71:80:43:78:28:e8:36:
                    14:ad:3c:2b:d9:04:af:63:9f:6c:81:3e:ed:d0:f4:
                    27:cf:07:a5:ef:0f:52:3e:83:aa:3e:51:87:58:a7:
                    09:19:77:0a:f9:df:30:b9:1b:d9:d3:b3:b5:e3:7b:
                    5c:18:2d:9a:2f:06:bb:da:9f:79:ed:8e:99:f3:3e:
                    6b:52:a2:b6:05:e9:58:d4:1a:59:d9:f1:87:c0:5a:
                    dc:54:18:8f:0d:38:99:fd:25:97:21:6b:14:ce:53:
                    51:cd:96:fc:82:7f:f6:c6:03:f1:13:d8:c7:8a:7b:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.96.0/19
                  69.2.0.0/20
                  148.59.212.0/23
                  162.253.232.0/21
                  207.254.192.0-207.254.203.255
                IPv6:
                  2606:6d80::/32
                  2607:fbf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27005
                  62818

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:d2:60:d9:3f:19:57:41:8e:86:7c:58:49:a7:68:d5:32:
         24:ca:b1:0f:c5:43:af:09:54:fa:a4:51:d8:c7:47:02:76:b1:
         e2:5a:d8:5c:97:ee:ec:21:1a:1f:a9:64:a9:fd:3b:3c:de:80:
         77:70:53:5c:68:bc:ea:1d:0c:07:ac:4f:e7:21:ac:69:4f:54:
         eb:99:19:eb:f3:8a:4d:96:5f:6f:37:d3:2e:05:9f:9b:f9:19:
         ce:fe:ed:cc:bc:f2:6c:6d:9d:02:f8:c4:59:c4:6e:99:40:ed:
         24:71:49:fc:a1:59:2a:c4:1e:9b:b6:ea:9d:de:54:e7:10:ee:
         25:4d:88:dd:39:8c:13:4f:b2:ad:5c:52:34:65:f9:f4:0a:2c:
         85:4a:23:cc:f2:c1:cb:0d:88:11:7b:21:e4:9c:fe:80:54:8b:
         6b:09:76:89:0b:0d:b5:56:f7:71:15:a0:d8:7b:8e:64:ea:f5:
         d6:1d:8f:61:92:c3:44:8b:96:34:9f:79:00:e8:6b:04:11:f2:
         63:2d:c6:14:a0:72:34:10:32:b8:80:c3:fb:69:db:22:c4:49:
         af:46:68:37:46:b2:6a:5a:4d:a5:6d:32:3e:b6:3e:76:06:ed:
         6e:af:a6:3a:29:40:65:51:cd:5c:09:94:9e:ec:0b:6b:82:18:
         d7:8d:26:91
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAQ0Mn0MoWEgCZSReEXvrRQwng0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI0MTEyNjE2NDIxOFoXDTI3MDMwMTE2NDIxOFowLzEtMCsGA1UEAxMk
ODdlZGMwMzItZDkzOC00NTA0LWJmNGItOTZjNTk5ZTUwMTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gZPWnTjldKbw1Jt9NoKRof/njGQL+y9Dpef
neYaRBmmEkNZuOnhEBkH4DElreSxlIOfxH/OVvgZF4/g3wrJGfg71uI/oq7g/I0p
hzoUUow+pfW3zaNbo+unrouAHclHWXJt4hTw04NPbII7JXtXGKMzf5c2H8Hf2Z7v
Y5GUKUQkrDWyTqms53Bee9NQNnGAQ3go6DYUrTwr2QSvY59sgT7t0PQnzwel7w9S
PoOqPlGHWKcJGXcK+d8wuRvZ07O143tcGC2aLwa72p957Y6Z8z5rUqK2BelY1BpZ
2fGHwFrcVBiPDTiZ/SWXIWsUzlNRzZb8gn/2xgPxE9jHinvEFQIDAQABo4IEVTCC
BFEwHQYDVR0OBBYEFBvu1RhgfT2pwugttw4OndAMjWHoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84
N2VkYzAzMi1kOTM4LTQ1MDQtYmY0Yi05NmM1OTllNTAxOTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg3ZWRjMDMyLWQ5MzgtNDUwNC1i
ZjRiLTk2YzU5OWU1MDE5NS84N2VkYzAzMi1kOTM4LTQ1MDQtYmY0Yi05NmM1OTll
NTAxOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwVQYIKwYBBQUH
AQcBAf8ERjBEMCwEAgABMCYDBAVBJ2ADBARFAgADBAGUO9QDBAOi/egwDAMEBs/+
wAMEAs/+yDAUBAIAAjAOAwUAJgZtgAMFACYH+/AwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICaX0CAwD1YjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5XNJg2T8ZV0GOhnxYSado1TIkyrEPxUOv
CVT6pFHYx0cCdrHiWthcl+7sIRofqWSp/Ts83oB3cFNcaLzqHQwHrE/nIaxpT1Tr
mRnr84pNll9vN9MuBZ+b+RnO/u3MvPJsbZ0C+MRZxG6ZQO0kcUn8oVkqxB6btuqd
3lTnEO4lTYjdOYwTT7KtXFI0Zfn0CiyFSiPM8sHLDYgReyHknP6AVItrCXaJCw21
VvdxFaDYe45k6vXWHY9hksNEi5Y0n3kA6GsEEfJjLcYUoHI0EDK4gMP7adsixEmv
Rmg3RrJqWk2lbTI+tj52Bu1ur6Y6KUBlUc1cCZSe7AtrghjXjSaR
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:34 2025 by rpki-client