Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
File:                     998a132f-4994-4d96-a767-25e4ce264bc4.cer (raw, json)
Hash identifier:          iABMlAeGt2G7inTZBKGWxUwI9zdgQBqKPh/XYCdCpsQ=
Subject key identifier:   58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848EFFA375D0147A3A87EFFA800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Feb 2025 19:09:14 +0000
Certificate not after:    Tue 25 May 2027 18:09:14 +0000
Subordinate resources:    AS: 19520
                          IP: 198.169.172.0/24
                          IP: 2602:fb4e::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:fa:37:5d:01:47:a3:a8:7e:ff:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 19 19:09:14 2025 GMT
            Not After : May 25 18:09:14 2027 GMT
        Subject: CN=998a132f-4994-4d96-a767-25e4ce264bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:33:07:42:60:ef:6e:a5:fe:aa:53:aa:ac:
                    61:61:45:ed:d0:85:70:12:17:13:e7:b0:c0:9f:49:
                    4e:97:e1:c1:70:bb:38:4f:da:08:de:95:cc:e5:1d:
                    0a:87:ec:f0:7f:16:59:38:83:1c:b3:2c:ea:6c:14:
                    dc:46:6b:a9:01:97:a3:7d:50:e0:59:bd:8d:9f:9c:
                    4b:b9:cf:da:40:a4:3d:d3:cd:df:d9:a5:26:3c:f8:
                    a5:6b:6a:d4:4c:7d:42:19:58:fb:4e:74:40:f5:b9:
                    b0:76:0f:ed:ca:95:92:cf:2c:1a:57:4d:84:57:d1:
                    42:78:b8:96:25:5e:d1:27:b0:59:ab:b5:ca:d6:e3:
                    92:4d:37:29:13:45:ec:bf:7d:db:0f:ab:25:bf:93:
                    a3:5d:2e:0d:c7:eb:7a:b2:dc:8e:94:88:0b:95:c1:
                    0e:5c:8e:eb:ef:a2:a3:35:17:7f:ce:f9:de:df:70:
                    f2:28:19:58:7a:9e:6f:8a:5c:7b:bc:93:02:dd:6d:
                    06:93:01:dd:e8:86:1f:c8:01:a1:89:2f:5f:75:4f:
                    a2:bb:19:a8:72:36:6a:fc:c5:4d:59:53:f3:f4:f7:
                    1e:ea:08:53:4a:2e:1c:fa:d0:4c:76:80:6c:d2:46:
                    a4:c1:bc:3e:43:a9:a8:f9:9d:7b:0c:13:be:b7:93:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.172.0/24
                IPv6:
                  2602:fb4e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19520

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:52:ba:ed:b5:7e:f8:5c:96:b7:8a:91:cd:f6:d1:04:c2:e9:
         5f:a7:46:5a:ed:04:88:79:ec:64:11:c5:79:5e:cd:8d:da:a9:
         ef:bb:38:fb:0d:f3:19:3a:59:e4:97:98:97:d4:8b:69:e0:55:
         79:96:0a:42:3e:cd:51:4c:16:22:0c:7f:8e:d7:45:1a:2a:6f:
         cb:82:e9:80:68:be:c4:f8:77:4a:8f:16:bc:6b:94:a6:9b:5e:
         58:19:c4:9f:00:de:58:4d:eb:fa:5c:8f:7a:62:fd:ca:de:f1:
         68:0f:3c:74:64:90:be:d0:ad:d5:29:3b:79:2f:84:3e:d2:3c:
         dc:48:dd:70:3d:c3:19:14:4a:ee:ee:eb:f2:3d:c9:cf:c1:3e:
         6f:e7:d2:f0:df:1d:ff:59:a3:08:2a:1c:37:96:ac:6d:87:3d:
         34:a2:1a:13:90:36:32:a6:8c:4b:5c:e9:b4:d7:22:20:7c:5f:
         c3:8b:fb:5d:dc:09:86:7e:af:a6:e1:5d:5b:cf:21:00:66:c6:
         6b:eb:1b:29:16:0c:46:dc:0c:98:92:d3:41:b5:c0:8e:71:e4:
         8b:ce:22:f8:59:7c:9a:9c:26:74:8d:70:fa:48:78:2e:0b:2e:
         14:82:64:76:ac:96:a8:0d:74:67:cf:86:aa:93:74:66:04:a2:
         77:b0:16:cf
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjv+jddAUejqH7/qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDIxOTE5MDkxNFoXDTI3MDUyNTE4MDkxNFowLzEtMCsGA1UEAxMk
OTk4YTEzMmYtNDk5NC00ZDk2LWE3NjctMjVlNGNlMjY0YmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA008zB0Jg726l/qpTqqxhYUXt0IVwEhcT57DA
n0lOl+HBcLs4T9oI3pXM5R0Kh+zwfxZZOIMcsyzqbBTcRmupAZejfVDgWb2Nn5xL
uc/aQKQ9083f2aUmPPila2rUTH1CGVj7TnRA9bmwdg/typWSzywaV02EV9FCeLiW
JV7RJ7BZq7XK1uOSTTcpE0Xsv33bD6slv5OjXS4Nx+t6styOlIgLlcEOXI7r76Kj
NRd/zvne33DyKBlYep5vilx7vJMC3W0GkwHd6IYfyAGhiS9fdU+iuxmocjZq/MVN
WVPz9Pce6ghTSi4c+tBMdoBs0kakwbw+Q6mo+Z17DBO+t5PhjQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFFhhmdegm2PWo2eSDAO0uCjx1iy4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85
OThhMTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0Y2UyNjRiYzQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk5OGExMzJmLTQ5OTQtNGQ5Ni1h
NzY3LTI1ZTRjZTI2NGJjNC85OThhMTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0Y2Uy
NjRiYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBADGqawwDgQCAAIwCAMGACYC+04AMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAkxAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHJSuu21fvhclreKkc320QTC6V+n
RlrtBIh57GQRxXlezY3aqe+7OPsN8xk6WeSXmJfUi2ngVXmWCkI+zVFMFiIMf47X
RRoqb8uC6YBovsT4d0qPFrxrlKabXlgZxJ8A3lhN6/pcj3pi/cre8WgPPHRkkL7Q
rdUpO3kvhD7SPNxI3XA9wxkUSu7u6/I9yc/BPm/n0vDfHf9ZowgqHDeWrG2HPTSi
GhOQNjKmjEtc6bTXIiB8X8OL+13cCYZ+r6bhXVvPIQBmxmvrGykWDEbcDJiS00G1
wI5x5IvOIvhZfJqcJnSNcPpIeC4LLhSCZHaslqgNdGfPhqqTdGYEonewFs8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:46 2025 by rpki-client