Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer
File:                     207c40f4-33c4-478b-ae61-d3f51358881b.cer (raw, json)
Hash identifier:          wahgtcl84kLQDVNtuT1k+UNSxUwJ95BCl5DjRdcBPQA=
Subject key identifier:   52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285849604C81A6119CC821B3206E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Apr 2025 00:45:34 +0000
Certificate not after:    Mon 05 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 40091
                          IP: 76.9.224.0/20
                          IP: 216.115.192.0/20
                          IP: 2607:2580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:4c:81:a6:11:9c:c8:21:b3:20:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr  1 00:45:34 2025 GMT
            Not After : Jul  5 00:45:34 2027 GMT
        Subject: CN=207c40f4-33c4-478b-ae61-d3f51358881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:e3:64:d7:4f:f1:3f:0d:41:10:87:55:02:
                    01:bb:c0:44:33:9b:35:ea:ba:90:dd:1a:0b:15:d6:
                    5a:24:d0:ee:86:9f:d1:1d:c7:36:eb:f8:6c:78:f4:
                    d0:18:e7:66:e6:c5:33:0d:aa:2f:0d:29:03:67:79:
                    a5:5f:22:ec:8e:9c:9e:60:08:85:c1:ae:0c:56:f0:
                    3d:01:e5:df:55:b3:ce:52:6c:7c:b6:b1:ff:39:c5:
                    52:19:7c:e9:41:b9:cc:ae:ca:71:ef:75:27:ed:33:
                    bb:1b:1d:35:77:a3:a8:94:9e:0d:cc:3c:0c:9a:a7:
                    3f:05:cf:4a:99:57:32:d1:4b:ae:64:1c:de:59:e9:
                    8a:a0:87:73:35:df:ec:a7:57:70:c6:c7:20:c7:74:
                    f2:f7:86:f7:df:06:e0:02:73:98:7c:ad:56:4e:c3:
                    43:db:b6:5a:3b:6b:db:d2:8a:b2:91:f8:6b:33:d1:
                    57:e6:5b:58:5f:46:6d:0c:1a:fd:de:4e:99:0a:19:
                    25:f0:5f:c8:9d:eb:4f:dd:8d:27:c5:0a:9e:80:1d:
                    d6:aa:d5:0a:db:62:2e:9c:20:70:89:b3:e6:54:f2:
                    10:e3:46:ae:8d:3e:d7:65:cf:18:9e:ab:c9:a1:b9:
                    86:3b:d8:57:93:c0:5b:45:5b:db:1d:71:7f:f8:cc:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.224.0/20
                  216.115.192.0/20
                IPv6:
                  2607:2580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40091

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:62:84:b9:58:5a:79:3f:64:45:ff:5b:b1:75:11:2b:3c:
         59:97:5f:ca:b1:70:b2:41:59:45:c3:1e:a0:aa:28:cb:64:8a:
         2e:b4:3f:c5:7a:f6:49:3f:9a:e2:e1:53:eb:45:78:a8:81:1e:
         af:11:47:0d:d7:e1:85:62:25:b1:d2:f5:c5:87:cf:4c:22:9d:
         6c:84:f3:92:2e:51:c3:ed:fb:cb:06:cb:a7:bc:fd:a7:d4:32:
         f6:37:0f:b3:19:83:0e:6d:c0:ab:67:ef:7a:c9:ac:21:b5:02:
         de:ee:94:35:7e:b9:14:50:dc:ff:9e:72:c7:19:9a:a6:e8:68:
         55:d1:f0:24:f0:57:2c:23:46:28:a7:0b:d8:2d:6a:f5:89:21:
         ca:e9:4d:90:19:2f:9e:18:0f:b7:e8:21:7b:6b:32:87:82:2d:
         ff:c9:c7:90:19:c8:24:4c:21:75:70:fb:07:b6:d9:af:0a:b4:
         fe:86:49:58:18:0e:00:d4:f2:64:a6:df:50:45:0c:38:d5:5d:
         41:00:0f:50:76:27:a2:70:34:eb:f3:01:39:d1:55:7f:db:ec:
         17:0b:44:9c:57:56:4a:40:59:b0:44:9c:18:29:d0:71:27:78:
         2d:d1:b9:12:4b:e9:89:f1:95:04:0b:27:2d:b9:69:40:68:ab:
         64:4d:34:aa
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWElgTIGmEZzIIbMgbkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk
MjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4ODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvjZNdP8T8NQRCHVQIBu8BEM5s16rqQ3RoL
FdZaJNDuhp/RHcc26/hsePTQGOdm5sUzDaovDSkDZ3mlXyLsjpyeYAiFwa4MVvA9
AeXfVbPOUmx8trH/OcVSGXzpQbnMrspx73Un7TO7Gx01d6OolJ4NzDwMmqc/Bc9K
mVcy0UuuZBzeWemKoIdzNd/sp1dwxscgx3Ty94b33wbgAnOYfK1WTsND27ZaO2vb
0oqykfhrM9FX5ltYX0ZtDBr93k6ZChkl8F/InetP3Y0nxQqegB3WqtUK22IunCBw
ibPmVPIQ40aujT7XZc8YnqvJobmGO9hXk8BbRVvbHXF/+My4FwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFFICzsDtpDHXU0jMdtiIPHYc0e3sMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y
MDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzIwN2M0MGY0LTMzYzQtNDc4Yi1h
ZTYxLWQzZjUxMzU4ODgxYi8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1
ODg4MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBARMCeADBATYc8AwDQQCAAIwBwMFACYHJYAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAJybMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhMYoS5WFp5P2RF/1ux
dRErPFmXX8qxcLJBWUXDHqCqKMtkii60P8V69kk/muLhU+tFeKiBHq8RRw3X4YVi
JbHS9cWHz0winWyE85IuUcPt+8sGy6e8/afUMvY3D7MZgw5twKtn73rJrCG1At7u
lDV+uRRQ3P+ecscZmqboaFXR8CTwVywjRiinC9gtavWJIcrpTZAZL54YD7foIXtr
MoeCLf/Jx5AZyCRMIXVw+we22a8KtP6GSVgYDgDU8mSm31BFDDjVXUEAD1B2J6Jw
NOvzATnRVX/b7BcLRJxXVkpAWbBEnBgp0HEneC3RuRJL6YnxlQQLJy25aUBoq2RN
NKo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net