Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
File:                     e3bd303b-738d-4c77-9c55-320fcfa93f75.cer (raw, json)
Hash identifier:          1PlXtcnXgLgI1DrAIkRCVdhw7mFQ02CttChggTAQCOo=
Subject key identifier:   0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858494F8C65AB810668D4684F64FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Mar 2025 00:45:34 +0000
Certificate not after:    Tue 29 Jun 2027 00:45:34 +0000
Subordinate resources:    IP: 104.166.32.0/20
                          IP: 108.60.224.0/19
                          IP: 204.236.64.0/18
                          IP: 216.137.0.0/20
                          IP: 2610:180::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:8c:65:ab:81:06:68:d4:68:4f:64:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar 26 00:45:34 2025 GMT
            Not After : Jun 29 00:45:34 2027 GMT
        Subject: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:d0:05:ad:61:fb:88:89:e4:aa:d0:0d:09:
                    28:e3:72:c8:96:8b:48:77:d3:57:45:bf:de:36:72:
                    0c:6b:85:b3:bf:93:b0:c8:01:97:c3:5b:0e:03:c2:
                    70:9b:e8:cb:1c:cc:82:02:01:23:06:15:dc:a3:1a:
                    2d:e3:97:b8:68:5c:9f:c0:06:81:05:93:ec:6c:c1:
                    2c:cf:f8:50:50:f8:ee:0a:c0:e9:03:5d:9d:5b:10:
                    e0:85:d0:8b:e7:17:a5:98:9d:76:da:0d:f1:00:f8:
                    75:02:03:e0:44:fd:29:03:ac:f5:d5:5e:cf:7c:dc:
                    8d:d4:c8:0e:b6:6a:14:6a:e2:f8:d3:f0:6d:56:2a:
                    68:23:18:c1:99:5a:7d:be:81:e2:ca:d1:93:58:9a:
                    24:ae:03:c0:60:0a:ea:ef:c3:a3:50:32:17:2f:99:
                    04:ae:2c:12:98:e0:31:d1:56:50:1b:23:57:c8:36:
                    93:62:3a:64:a5:b2:6e:48:19:d3:55:af:f7:0c:4e:
                    a5:2f:b2:43:63:8b:e5:35:17:07:69:22:c2:e6:6d:
                    f4:f4:03:48:c2:ec:eb:16:eb:da:35:ab:d2:d2:fc:
                    36:26:86:04:7c:c5:58:43:ab:f4:32:53:c8:94:03:
                    0b:cc:85:bb:f6:57:a0:d2:dc:e7:fd:00:dc:d4:22:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.32.0/20
                  108.60.224.0/19
                  204.236.64.0/18
                  216.137.0.0/20
                IPv6:
                  2610:180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:7f:e0:d9:13:3d:9b:cf:11:0b:56:bc:6f:74:8e:b2:8b:
         71:a6:27:c0:33:43:e4:f0:e0:27:3b:5d:b6:29:67:5b:78:d0:
         c4:76:95:7d:18:03:ce:79:a5:46:c1:be:eb:cc:28:2b:df:e2:
         2f:6f:ed:c2:78:79:9e:2e:6d:e4:59:c4:14:87:a6:a3:6a:c5:
         2b:27:e9:b5:a8:cd:a8:92:67:53:8f:e7:1b:96:c6:11:69:cb:
         33:26:46:6e:a6:0a:89:46:1e:49:8f:ec:97:01:55:b3:00:34:
         82:89:1e:bd:4c:d9:56:25:ec:99:97:a9:63:44:88:86:47:b7:
         e3:75:7f:48:70:19:cd:63:1b:22:8d:28:16:b0:1b:a9:06:9e:
         b7:7d:de:4e:6b:5f:9c:06:d1:42:d3:62:ac:85:fa:25:c5:04:
         d8:23:28:bc:c2:40:0a:64:53:8e:9e:b7:f1:d5:b7:ad:38:ec:
         26:f5:c5:31:bb:ef:86:16:89:10:07:cb:04:f0:ee:61:e5:49:
         02:d6:3f:4f:95:77:87:6e:52:0d:27:93:15:cd:92:97:4e:4a:
         47:77:54:38:65:9a:02:65:f7:3d:63:2a:65:60:9e:75:9e:77:
         6d:27:53:f9:c7:0a:35:8b:6f:54:18:64:07:aa:0e:2b:98:0d:
         ed:e0:78:a0
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWElPjGWrgQZo1GhPZPwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MDMyNjAwNDUzNFoXDTI3MDYyOTAwNDUzNFowLzEtMCsGA1UEAxMk
ZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkzZjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyDQBa1h+4iJ5KrQDQko43LIlotId9NXRb/e
NnIMa4Wzv5OwyAGXw1sOA8Jwm+jLHMyCAgEjBhXcoxot45e4aFyfwAaBBZPsbMEs
z/hQUPjuCsDpA12dWxDghdCL5xelmJ122g3xAPh1AgPgRP0pA6z11V7PfNyN1MgO
tmoUauL40/BtVipoIxjBmVp9voHiytGTWJokrgPAYArq78OjUDIXL5kEriwSmOAx
0VZQGyNXyDaTYjpkpbJuSBnTVa/3DE6lL7JDY4vlNRcHaSLC5m309ANIwuzrFuva
NavS0vw2JoYEfMVYQ6v0MlPIlAMLzIW79leg0tzn/QDc1CIuewIDAQABo4IEIDCC
BBwwHQYDVR0OBBYEFA73EwaR1r0crUjHyS2JHZbcU01aMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l
M2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2UzYmQzMDNiLTczOGQtNGM3Ny05
YzU1LTMyMGZjZmE5M2Y3NS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2Zh
OTNmNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBARopiADBAVsPOADBAbM7EADBATYiQAwDQQCAAIw
BwMFACYQAYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAVsd/4NkTPZvPEQtWvG90jrKLcaYnwDND5PDgJztd
tilnW3jQxHaVfRgDznmlRsG+68woK9/iL2/twnh5ni5t5FnEFIemo2rFKyfptajN
qJJnU4/nG5bGEWnLMyZGbqYKiUYeSY/slwFVswA0gokevUzZViXsmZepY0SIhke3
43V/SHAZzWMbIo0oFrAbqQaet33eTmtfnAbRQtNirIX6JcUE2CMovMJACmRTjp63
8dW3rTjsJvXFMbvvhhaJEAfLBPDuYeVJAtY/T5V3h25SDSeTFc2Sl05KR3dUOGWa
AmX3PWMqZWCedZ53bSdT+ccKNYtvVBhkB6oOK5gN7eB4oA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:53 2025 by rpki-client