Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
File:                     77b56428-9b52-416f-b279-bbae14422de2.cer (raw, json)
Hash identifier:          1xXzWD1R/NIzKv6tjBtIf9GbpTqHarHnGp16z7EAKFE=
Subject key identifier:   0D:A4:EB:AC:C3:42:B9:9B:12:D5:DA:6A:55:68:C3:4F:BA:DA:2A:BF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584891D3A5FC5E62531B43767740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Jan 2025 01:45:32 +0000
Certificate not after:    Thu 22 Apr 2027 00:45:32 +0000
Subordinate resources:    IP: 96.127.0.0/17
                          IP: 2620:108:d000::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:d3:a5:fc:5e:62:53:1b:43:76:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 17 01:45:32 2025 GMT
            Not After : Apr 22 00:45:32 2027 GMT
        Subject: CN=77b56428-9b52-416f-b279-bbae14422de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:c5:25:11:e9:8e:fd:95:b6:e4:42:77:37:
                    22:5c:fe:81:76:05:e9:45:2f:10:df:d9:84:91:f0:
                    91:6a:8a:84:ce:21:24:34:12:2e:a1:e7:7d:d3:e9:
                    c8:95:9f:f8:7b:39:81:1e:f4:14:bf:64:ee:ec:e6:
                    02:3f:1a:8a:3f:7c:d9:e8:3e:5b:66:3d:15:ca:72:
                    35:9e:f0:a7:0c:4a:30:59:ef:7d:4d:32:3f:3d:6e:
                    f9:dd:c3:5a:c8:15:1a:96:ad:51:08:a0:d4:46:98:
                    74:10:88:f8:a0:07:69:e2:35:e4:51:90:55:15:50:
                    68:4d:99:61:05:e5:d4:0a:d3:2d:e3:26:04:89:b6:
                    5a:27:32:d0:f2:af:8b:df:35:5f:8e:4e:f2:ed:68:
                    d5:1b:af:3e:4b:80:40:2b:4a:34:26:75:e8:f1:89:
                    ea:fa:71:00:e7:f6:b5:c0:45:b4:49:7d:20:7f:45:
                    73:6e:0a:0f:77:7c:63:41:dd:5d:3a:7d:5c:06:52:
                    f7:6d:7f:d1:08:fd:ab:7d:29:82:c3:4e:48:26:fb:
                    fd:38:91:76:d7:6e:c8:57:b4:45:e0:cc:59:5e:4a:
                    fb:17:ee:87:c4:4c:a6:01:07:65:be:28:0a:6c:9d:
                    f4:5c:f5:47:c5:d1:42:d9:be:c7:33:75:22:11:75:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A4:EB:AC:C3:42:B9:9B:12:D5:DA:6A:55:68:C3:4F:BA:DA:2A:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:3e:a2:8e:0e:81:1c:0b:72:62:be:e9:e7:ab:ae:8a:a8:
         9a:1c:d2:91:f0:c4:3f:46:e8:e2:af:d5:78:57:3f:35:4b:62:
         19:c5:d3:bd:58:8f:c5:f1:c9:83:07:1c:d2:e4:fc:c2:e2:ab:
         a2:28:3c:0f:20:a7:e2:57:cb:aa:3b:d3:66:7e:ae:85:0c:4f:
         8c:55:4d:9b:6d:44:84:53:2b:17:53:27:7a:dd:68:e1:d0:61:
         10:ad:04:4b:8d:c3:88:64:8a:e6:83:3c:02:97:ee:9e:14:2c:
         bb:94:d9:9f:4c:59:47:6c:d5:bb:c2:08:28:ce:04:bc:a3:53:
         7a:70:da:39:6b:ec:a4:04:89:2c:d7:71:11:55:7c:1f:c3:12:
         f6:61:98:0d:a2:2a:ee:ed:4f:b0:a8:61:5e:87:33:49:5e:6e:
         d6:b7:99:7a:ef:57:47:41:2f:49:7c:62:36:07:bc:bf:06:0e:
         46:ec:9d:5a:71:2d:26:41:d1:61:aa:83:53:c4:02:82:27:b7:
         95:39:ca:2b:67:bc:99:eb:b6:e3:7e:34:a0:54:12:f4:62:3a:
         bc:57:f8:56:78:74:70:23:41:c3:42:54:6b:86:f7:33:5a:bc:
         f6:20:44:51:e7:75:c8:d5:40:61:ce:94:65:cd:9e:14:8c:85:
         ca:85:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:22 2025 by rpki-client