Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
File:                     2aa438c9-0cbb-4364-946d-9714249a8222.cer (raw, json)
Hash identifier:          cGJYW9ooV4AGcuqVQYuCC9xaAp/m+AWl//T6Q4fuMEw=
Subject key identifier:   05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848F91EF7BC4F3A8299A0AF0500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Feb 2025 01:45:33 +0000
Certificate not after:    Sat 29 May 2027 00:45:33 +0000
Subordinate resources:    AS: 32934
                          AS: 63293
                          IP: 66.220.144.0/20
                          IP: 69.63.176.0/20
                          IP: 69.171.224.0/19
                          IP: 74.119.76.0/22
                          IP: 129.134.0.0/16
                          IP: 157.240.0.0/16
                          IP: 173.252.64.0/18
                          IP: 204.15.20.0/22
                          IP: 2620:0:1c00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:1e:f7:bc:4f:3a:82:99:a0:af:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 23 01:45:33 2025 GMT
            Not After : May 29 00:45:33 2027 GMT
        Subject: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:5a:17:1d:50:ac:ae:47:ae:1a:20:bf:7a:
                    7a:90:d8:26:89:94:a2:ad:6d:15:14:24:33:c5:a8:
                    80:eb:d8:90:f8:4d:95:d9:6e:50:a6:f9:d7:11:fd:
                    08:a1:88:97:0f:f2:9c:ca:56:41:ed:2c:cf:51:e0:
                    92:0f:03:68:49:71:6c:2c:26:9c:62:8e:3f:d0:c1:
                    75:5d:9c:e3:64:8c:e1:7f:cc:59:2a:8d:92:97:4f:
                    38:c4:29:30:cc:1b:e7:e7:9b:9c:11:b4:30:f6:3f:
                    6d:4d:3b:30:1d:7a:c3:82:c1:93:dc:4c:27:ab:e1:
                    f8:4d:72:63:de:4d:f1:91:77:41:84:cc:60:2a:16:
                    7e:d0:52:2f:6b:83:11:ac:bc:64:cf:67:9d:30:c0:
                    e1:c3:d3:06:9d:45:fe:70:28:31:7b:da:71:f1:47:
                    a8:a5:99:26:6d:4f:7f:46:5a:84:77:eb:1b:09:f5:
                    cb:8c:e6:0d:17:b3:eb:dd:22:8c:83:35:c2:9b:75:
                    b1:9e:09:8b:6a:ab:f6:3c:16:71:13:81:0b:8b:6c:
                    38:a0:7f:f2:e0:04:02:78:e4:68:e2:ff:cf:b2:3e:
                    fb:e6:c2:49:2e:53:bc:48:f9:7d:b2:4e:9a:e9:ac:
                    8c:a2:c6:ef:3f:54:12:0d:40:26:4f:58:87:5b:0c:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.144.0/20
                  69.63.176.0/20
                  69.171.224.0/19
                  74.119.76.0/22
                  129.134.0.0/16
                  157.240.0.0/16
                  173.252.64.0/18
                  204.15.20.0/22
                IPv6:
                  2620:0:1c00::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32934
                  63293

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:35:47:07:30:a6:84:52:fb:c0:c4:75:bd:c2:eb:4d:b9:df:
         76:c8:ff:14:48:f1:28:55:9a:5f:96:cd:cf:f0:34:19:c8:38:
         f8:bf:39:75:29:32:4e:f9:c4:71:ce:e8:0c:92:74:bf:da:d8:
         19:e6:97:b2:ed:f8:77:09:d3:de:e2:56:b8:e7:0f:e7:d5:c0:
         0c:03:d1:2d:35:4e:34:df:ba:e6:7f:7e:6b:9d:2a:1a:02:90:
         0e:b4:bc:ff:7a:6b:b7:32:22:bb:96:f6:f5:52:08:0e:94:70:
         b1:fa:83:1d:c8:f7:29:dc:93:7f:53:73:b9:06:ab:9c:f5:ac:
         5e:1b:7f:5b:6b:68:f6:8f:4f:2b:17:23:3e:b8:95:73:c9:b0:
         69:26:eb:de:ae:9e:00:e4:80:29:22:5e:e2:af:e9:ae:4e:5c:
         3d:08:af:8b:fc:a7:fe:4d:96:82:9e:8c:73:91:f4:16:2b:bb:
         92:eb:6a:c0:df:5f:9e:95:7f:ee:a4:4a:d4:22:fb:e8:96:b2:
         63:0c:15:3d:a1:c7:cf:e9:39:4b:e8:02:f8:33:b2:be:52:2d:
         fb:a6:b7:ba:01:0d:6b:8a:99:b1:c4:92:bb:82:e2:1e:a2:f7:
         84:86:ca:36:30:f4:cc:6f:52:9c:42:37:aa:6b:f2:b6:c7:04:
         50:84:5d:c7
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEj5Hve8TzqCmaCvBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MDIyMzAxNDUzM1oXDTI3MDUyOTAwNDUzM1owLzEtMCsGA1UEAxMk
MmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4MjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZBaFx1QrK5Hrhogv3p6kNgmiZSirW0VFCQz
xaiA69iQ+E2V2W5QpvnXEf0IoYiXD/KcylZB7SzPUeCSDwNoSXFsLCacYo4/0MF1
XZzjZIzhf8xZKo2Sl084xCkwzBvn55ucEbQw9j9tTTswHXrDgsGT3Ewnq+H4TXJj
3k3xkXdBhMxgKhZ+0FIva4MRrLxkz2edMMDhw9MGnUX+cCgxe9px8UeopZkmbU9/
RlqEd+sbCfXLjOYNF7Pr3SKMgzXCm3WxngmLaqv2PBZxE4ELi2w4oH/y4AQCeORo
4v/Psj775sJJLlO8SPl9sk6a6ayMosbvP1QSDUAmT1iHWwzCTQIDAQABo4IEWDCC
BFQwHQYDVR0OBBYEFAUj35Mb/zlCnCr+e/96SzNW6F6wMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y
YWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJhYTQzOGM5LTBjYmItNDM2NC05
NDZkLTk3MTQyNDlhODIyMi8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5
YTgyMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwVwYIKwYBBQUH
AQcBAf8ESDBGMDQEAgABMC4DBARC3JADBARFP7ADBAVFq+ADBAJKd0wDAwCBhgMD
AJ3wAwQGrfxAAwQCzA8UMA4EAgACMAgDBgAmIAAAHDAfBggrBgEFBQcBCAEB/wQQ
MA6gDDAKAgMAgKYCAwD3PTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqNUcHMKaEUvvAxHW9wutNud92yP8U
SPEoVZpfls3P8DQZyDj4vzl1KTJO+cRxzugMknS/2tgZ5pey7fh3CdPe4la45w/n
1cAMA9EtNU4037rmf35rnSoaApAOtLz/emu3MiK7lvb1UggOlHCx+oMdyPcp3JN/
U3O5Bquc9axeG39ba2j2j08rFyM+uJVzybBpJuverp4A5IApIl7ir+muTlw9CK+L
/Kf+TZaCnoxzkfQWK7uS62rA31+elX/upErUIvvolrJjDBU9ocfP6TlL6AL4M7K+
Ui37pre6AQ1ripmxxJK7guIeoveEhso2MPTMb1KcQjeqa/K2xwRQhF3H
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:37 2025 by rpki-client