Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer
File:                     d648fae7-947d-4ab0-9d26-c1da38e440ef.cer (raw, json)
Hash identifier:          aC7Si1UYgowiIY09w24o1+ObTBXe1S76SQAFt8ZlCzo=
Subject key identifier:   80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285849304DCBCE3297CE376F8A9DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Mar 2025 20:09:23 +0000
Certificate not after:    Thu 17 Jun 2027 20:09:23 +0000
Subordinate resources:    AS: 400033
                          IP: 172.82.104.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:4d:cb:ce:32:97:ce:37:6f:8a:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 14 20:09:23 2025 GMT
            Not After : Jun 17 20:09:23 2027 GMT
        Subject: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:1b:e5:67:ad:36:1d:e2:ef:39:e3:d9:47:
                    97:c9:3d:fe:6c:19:32:27:27:84:82:ac:b4:08:6a:
                    2f:01:bb:ed:40:5d:69:22:95:87:75:09:48:9d:7b:
                    c7:0c:ec:c7:62:72:69:4c:86:57:f2:12:25:45:67:
                    05:cf:65:e7:67:84:92:b0:88:b1:3b:5a:d0:bf:37:
                    e2:0b:f1:01:5e:43:9d:55:5b:00:5c:6a:33:f3:ad:
                    41:a0:44:5c:dc:c0:3b:d7:48:ee:e5:5e:c2:76:57:
                    fa:44:50:d7:39:f9:ad:93:fe:74:ec:2d:63:01:fb:
                    78:a9:38:0f:55:9e:75:0e:84:e3:fd:a8:47:28:eb:
                    81:99:e4:bd:48:de:f8:30:fc:2d:43:b1:1c:0a:bf:
                    0e:dd:d0:d2:af:f2:9c:1a:48:69:b6:96:26:05:cc:
                    23:68:fb:55:32:98:07:af:07:62:01:31:e0:e5:59:
                    16:7d:e8:43:d0:af:89:7c:85:38:3c:a4:84:dd:1e:
                    82:6d:d1:2c:76:7c:c7:d3:64:4f:08:27:b7:b2:9a:
                    3b:88:1e:6f:17:3b:41:c7:41:df:86:ef:5e:fc:39:
                    1b:c8:94:c3:29:28:69:38:52:f5:02:4d:a1:37:4f:
                    2c:ca:de:dc:f5:c4:38:a6:b0:4c:0e:9b:e2:11:21:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.104.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400033

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:19:1c:dc:83:b8:6a:9f:02:0d:2f:67:7a:2c:c4:ee:48:d3:
         43:1f:c6:37:88:3b:d5:f0:66:bc:c4:f5:92:c2:48:a8:bf:1d:
         2c:7f:d2:b1:9a:80:b0:c8:f9:1b:5b:18:64:63:cd:1b:60:6f:
         4d:8b:78:a5:60:07:3e:70:ae:1e:9d:e3:15:5c:29:c3:8d:b1:
         64:0c:3d:f3:d0:b4:91:d6:3e:27:82:57:41:81:70:37:42:01:
         aa:0e:df:ad:96:9f:9b:af:62:7e:d8:39:d9:26:c7:b9:47:a6:
         48:2f:f6:0d:28:4e:46:e0:62:e6:b7:8f:9f:84:f8:d6:de:2f:
         2b:c9:8b:40:5d:34:32:00:cd:56:16:80:af:d1:18:c2:69:d5:
         7c:14:99:2d:37:d7:6a:11:19:9d:37:f0:9c:c2:fa:c2:4d:af:
         b9:a2:cf:62:a4:23:13:1a:89:1d:b8:64:04:d1:66:b4:0f:dd:
         84:c3:af:2c:88:d8:04:68:48:6b:0f:b6:3f:58:5e:ca:60:5a:
         8f:46:5c:4f:75:38:29:05:f7:ac:73:a3:24:9b:9d:f7:c5:4f:
         fc:ff:f2:92:85:4b:7a:d9:3a:ee:3b:e2:12:67:8c:e1:a4:37:
         45:da:fc:45:6f:ad:96:89:85:05:75:3f:fc:4a:8c:fb:dd:10:
         6f:3b:38:0a
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkwTcvOMpfON2+KncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDMxNDIwMDkyM1oXDTI3MDYxNzIwMDkyM1owLzEtMCsGA1UEAxMk
ZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0MGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk4b5WetNh3i7znj2UeXyT3+bBkyJyeEgqy0
CGovAbvtQF1pIpWHdQlInXvHDOzHYnJpTIZX8hIlRWcFz2XnZ4SSsIixO1rQvzfi
C/EBXkOdVVsAXGoz861BoERc3MA710ju5V7Cdlf6RFDXOfmtk/507C1jAft4qTgP
VZ51DoTj/ahHKOuBmeS9SN74MPwtQ7EcCr8O3dDSr/KcGkhptpYmBcwjaPtVMpgH
rwdiATHg5VkWfehD0K+JfIU4PKSE3R6CbdEsdnzH02RPCCe3spo7iB5vFztBx0Hf
hu9e/DkbyJTDKShpOFL1Ak2hN08syt7c9cQ4prBMDpviESGvRQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFIDzoMqdoOL7qdqPATvO3ON/wMbiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k
NjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2NDhmYWU3LTk0N2QtNGFiMC05
ZDI2LWMxZGEzOGU0NDBlZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhl
NDQwZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACsUmgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BhqhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADEZHNyDuGqfAg0vZ3osxO5I00MfxjeIO9XwZrzE9ZLCSKi/
HSx/0rGagLDI+RtbGGRjzRtgb02LeKVgBz5wrh6d4xVcKcONsWQMPfPQtJHWPieC
V0GBcDdCAaoO362Wn5uvYn7YOdkmx7lHpkgv9g0oTkbgYua3j5+E+NbeLyvJi0Bd
NDIAzVYWgK/RGMJp1XwUmS0312oRGZ038JzC+sJNr7miz2KkIxMaiR24ZATRZrQP
3YTDryyI2ARoSGsPtj9YXspgWo9GXE91OCkF96xzoySbnffFT/z/8pKFS3rZOu47
4hJnjOGkN0Xa/EVvrZaJhQV1P/xKjPvdEG87OAo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:51 2025 by rpki-client