Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
File:                     551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer (raw, json)
Hash identifier:          VAPbMe7dYULEV/sSdBHE0+AobkB1+nG8ksCAf3ZhOTc=
Subject key identifier:   E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority key identifier: 27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5
Certificate issuer:       /CN=99f8fed2-292b-4722-b928-fee7bf0a5910
Certificate serial:       010D0C9F432858497D8562BD3140812DC234F100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml
Certificate not before:   Fri 11 Apr 2025 11:58:37 +0000
Certificate not after:    Thu 15 Jul 2027 11:58:37 +0000
Subordinate resources:    AS: 7224
                          AS: 10291
                          AS: 16509
                          AS: 19047
                          AS: 63088
                          AS: 401654
                          IP: 72.21.192.0/19
                          IP: 204.246.160.0/19
                          IP: 205.251.192.0/18
                          IP: 207.171.160.0/19
                          IP: 216.137.32.0/19
                          IP: 2600:9000::/28
                          IP: 2605:b940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:85:62:bd:31:40:81:2d:c2:34:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f8fed2-292b-4722-b928-fee7bf0a5910
        Validity
            Not Before: Apr 11 11:58:37 2025 GMT
            Not After : Jul 15 11:58:37 2027 GMT
        Subject: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:7d:88:97:9a:55:9b:78:09:20:d8:2e:46:
                    14:2b:de:1e:7d:99:47:85:19:9f:0e:07:12:80:98:
                    7e:cc:6f:8a:70:ac:4e:af:f6:92:39:5a:24:cd:48:
                    af:98:1d:7b:a8:9e:cb:a8:c5:a6:17:e2:4e:01:12:
                    55:19:0c:26:dc:e4:0d:51:a8:bc:3f:43:03:bb:3a:
                    99:f8:77:d8:c7:d0:dd:06:de:f3:bd:48:98:85:a7:
                    10:e1:65:29:4f:c8:da:17:bc:9d:3c:b6:10:dd:f0:
                    ec:c8:e7:5f:08:76:54:a5:41:8d:c8:f3:21:e6:8a:
                    3e:39:2f:ee:e4:4f:84:5d:ca:64:71:10:45:3d:83:
                    e8:d4:db:94:40:82:b8:c3:85:fd:01:20:95:b9:68:
                    b1:18:f0:9b:c7:7a:0f:5c:5e:a5:9f:43:39:e4:46:
                    b0:f9:f8:7e:60:b3:a8:c6:e1:8c:21:37:72:0f:40:
                    f1:f6:a7:78:27:4b:b1:99:e1:fa:ee:b1:09:05:56:
                    1e:1c:fa:9f:f5:34:d9:58:76:60:62:a2:c7:8a:43:
                    73:f4:bc:af:f5:41:2b:3e:34:ec:4c:c8:45:ff:0b:
                    26:6c:9e:d9:1d:83:0f:be:85:5d:c1:83:33:eb:a2:
                    a7:aa:f3:f6:be:6f:87:c2:12:ee:87:3f:d0:1e:28:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl

            X509v3 Authority Key Identifier:
                keyid:27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19
                  204.246.160.0/19
                  205.251.192.0/18
                  207.171.160.0/19
                  216.137.32.0/19
                IPv6:
                  2600:9000::/28
                  2605:b940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7224
                  10291
                  16509
                  19047
                  63088
                  401654

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:50:cb:f1:38:46:df:1c:c5:72:f6:3e:e6:99:02:31:a0:
         ce:87:3a:fa:62:9e:e8:4f:f9:bd:06:2b:e6:23:8a:4a:f0:b3:
         d4:6e:e8:e9:b2:a7:c2:43:cf:01:55:cf:0a:cc:1c:72:8f:38:
         7c:e1:4e:8e:d7:c3:79:2f:5c:46:22:09:45:fc:55:f9:34:55:
         e3:8e:d4:e7:bb:2c:b4:eb:48:7b:65:98:79:82:c8:f7:eb:ca:
         60:69:1b:d6:33:94:cf:9e:f6:c4:e8:75:f7:78:ac:2c:84:19:
         57:f2:fa:9e:33:32:aa:f9:c4:fc:a2:08:7a:9c:1a:7f:b1:1b:
         d1:e1:f3:de:3a:ec:31:f9:e6:3e:77:91:c8:64:73:4c:87:ff:
         4b:7b:02:ea:9b:bf:1a:ed:80:75:7d:e6:7a:1c:6b:51:e9:69:
         87:1d:99:ad:63:02:80:9c:59:cd:2a:93:8b:41:c9:3c:20:36:
         1c:93:70:af:eb:ee:23:8b:4a:40:0f:d4:cc:c2:c5:f0:38:5b:
         56:79:aa:20:11:b9:c2:95:64:0c:9d:87:2f:5a:4d:51:af:a1:
         02:70:d8:5c:e1:e3:7a:9f:7e:02:77:af:5a:de:ed:fb:87:10:
         6e:33:66:91:b0:75:0c:b3:ee:18:0b:f5:c7:10:c0:07:b3:1d:
         f8:2e:7e:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:12 2025 by rpki-client on console.sobornost.net