Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer
File:                     cf438e4b-3515-40c3-b514-36b1b15593d8.cer (raw, json)
Hash identifier:          7oydhyobXe41CDPBU4VoNxcsPYhJyei+/r3q5JlX+oU=
Subject key identifier:   BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285849387A59084B94129A44E77D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Mar 2025 18:25:36 +0000
Certificate not after:    Sun 20 Jun 2027 18:25:36 +0000
Subordinate resources:    IP: 23.142.82.0 -- 23.142.84.255
                          IP: 2602:fafe::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:38:7a:59:08:4b:94:12:9a:44:e7:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 17 18:25:36 2025 GMT
            Not After : Jun 20 18:25:36 2027 GMT
        Subject: CN=cf438e4b-3515-40c3-b514-36b1b15593d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:1b:c6:de:84:de:c2:7e:06:25:21:23:42:
                    fb:18:df:b0:c8:38:19:39:0d:76:18:a3:ed:44:c5:
                    e2:fa:72:92:8c:0a:f2:27:24:cf:78:49:fd:9c:3d:
                    a1:84:20:1f:6d:22:75:1d:1d:d8:e8:7f:29:eb:53:
                    09:37:05:e5:76:1a:41:1f:6d:cf:05:f0:6d:e8:b9:
                    a0:0b:8c:b0:51:a7:7f:0b:19:e6:9e:7f:44:e8:76:
                    dd:6a:4f:79:e0:47:39:50:8b:ca:61:87:39:3c:7c:
                    71:87:38:53:c7:8d:45:9d:a5:4f:a0:d4:ef:3a:ce:
                    c3:8d:25:e1:66:ab:95:97:88:d2:3b:6d:fe:0d:73:
                    4c:98:c0:17:95:d9:4f:3c:12:ba:9b:b7:b4:bc:1b:
                    bc:ad:e1:92:2f:2d:f1:b0:65:21:59:74:92:27:ca:
                    6e:98:6c:14:a1:c8:45:05:8d:dd:21:ae:2f:8b:78:
                    e2:d7:62:8c:de:37:32:b4:ed:8b:33:6d:4b:56:ec:
                    d3:ce:a7:12:19:80:a4:9b:b7:81:ab:27:7a:d9:9a:
                    8d:b8:98:c3:e0:cf:ef:fd:fa:54:a0:ab:4c:db:ef:
                    85:4e:b8:9e:ff:57:98:4d:9e:04:dd:7f:19:90:6d:
                    7b:1e:ba:c7:70:ad:7b:a5:b5:68:2b:97:90:24:f7:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.82.0-23.142.84.255
                IPv6:
                  2602:fafe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:3f:04:e5:46:0c:36:7b:9a:8b:d8:79:25:94:66:a5:4b:
         79:04:71:4e:d3:e0:50:db:96:9a:73:e6:d0:09:3e:6e:e9:e3:
         1b:8c:f2:f3:4f:a9:d0:a2:55:41:b5:b5:76:e3:14:81:98:d6:
         48:0d:de:7d:af:f0:f8:07:db:ff:46:59:a0:e7:6e:0d:be:04:
         a6:2d:ea:56:7a:91:db:0b:b9:d7:79:5a:bb:c9:dc:66:a9:bc:
         8b:17:0b:0f:8a:b5:1f:de:68:6d:5b:a2:12:b8:b6:70:a0:38:
         29:58:49:93:9d:3f:82:ba:ad:eb:28:5c:86:51:2a:64:82:40:
         8c:4e:ba:44:2f:03:8e:8d:b4:bd:7d:0e:66:b7:68:5f:55:6c:
         98:c5:cd:aa:18:85:d3:c7:65:34:96:f1:42:b0:e4:45:e2:7c:
         91:3b:1e:b9:12:dc:63:d7:60:4c:28:cf:24:e2:a3:d9:a7:b9:
         ed:32:08:91:35:16:14:c5:2b:c4:d5:31:b1:ee:41:a5:25:ba:
         48:65:46:43:ca:e6:b1:70:d3:27:2e:d9:14:b7:b4:42:2a:6f:
         3c:b0:94:07:90:e5:d4:6f:54:0b:b2:74:66:e2:99:a2:69:6b:
         4f:31:44:c1:87:65:f4:b0:e6:68:82:34:28:2f:43:e8:98:9e:
         99:ce:ff:cc
-----BEGIN CERTIFICATE-----
MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEk4elkIS5QSmkTnfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDMxNzE4MjUzNloXDTI3MDYyMDE4MjUzNlowLzEtMCsGA1UEAxMk
Y2Y0MzhlNGItMzUxNS00MGMzLWI1MTQtMzZiMWIxNTU5M2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEsbxt6E3sJ+BiUhI0L7GN+wyDgZOQ12GKPt
RMXi+nKSjAryJyTPeEn9nD2hhCAfbSJ1HR3Y6H8p61MJNwXldhpBH23PBfBt6Lmg
C4ywUad/Cxnmnn9E6Hbdak954Ec5UIvKYYc5PHxxhzhTx41FnaVPoNTvOs7DjSXh
ZquVl4jSO23+DXNMmMAXldlPPBK6m7e0vBu8reGSLy3xsGUhWXSSJ8pumGwUochF
BY3dIa4vi3ji12KM3jcytO2LM21LVuzTzqcSGYCkm7eBqyd62ZqNuJjD4M/v/fpU
oKtM2++FTrie/1eYTZ4E3X8ZkG17HrrHcK17pbVoK5eQJPdZGQIDAQABo4IEFzCC
BBMwHQYDVR0OBBYEFL6ScGX15g20EQas1hqsIiY9jE3dMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j
ZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1NTkzZDgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NmNDM4ZTRiLTM1MTUtNDBjMy1i
NTE0LTM2YjFiMTU1OTNkOC9jZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1
NTkzZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNwYIKwYBBQUH
AQcBAf8EKDAmMBQEAgABMA4wDAMEAReOUgMEABeOVDAOBAIAAjAIAwYEJgL6/gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeMk/BOVGDDZ7movYeSWUZqVLeQRxTtPgUNuWmnPm0Ak+bunjG4zy
80+p0KJVQbW1duMUgZjWSA3efa/w+Afb/0ZZoOduDb4Epi3qVnqR2wu513lau8nc
Zqm8ixcLD4q1H95obVuiEri2cKA4KVhJk50/grqt6yhchlEqZIJAjE66RC8Djo20
vX0OZrdoX1VsmMXNqhiF08dlNJbxQrDkReJ8kTseuRLcY9dgTCjPJOKj2ae57TII
kTUWFMUrxNUxse5BpSW6SGVGQ8rmsXDTJy7ZFLe0QipvPLCUB5Dl1G9UC7J0ZuKZ
omlrTzFEwYdl9LDmaII0KC9D6Jiemc7/zA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:49 2025 by rpki-client