Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
File:                     0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer (raw, json)
Hash identifier:          tHJsJVSbtTjAUs53/UWKPBjHh0iiDS3pvxlWshT9Abc=
Subject key identifier:   F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584870537338036757914B721A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 05 Jan 2025 01:45:33 +0000
Certificate not after:    Sat 10 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 6315
                          AS: 40519
                          IP: 68.69.160.0/20
                          IP: 166.70.0.0/16
                          IP: 198.60.22.0/24
                          IP: 198.60.80.0 -- 198.60.84.255
                          IP: 198.60.104.0 -- 198.60.110.255
                          IP: 198.60.113.0 -- 198.60.114.255
                          IP: 198.207.196.0/24
                          IP: 199.104.120.0/21
                          IP: 204.107.178.0/24
                          IP: 204.228.128.0/19
                          IP: 207.135.128.0/19
                          IP: 2607:24c0::/32
                          IP: 2607:fa18::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:53:73:38:03:67:57:91:4b:72:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  5 01:45:33 2025 GMT
            Not After : Apr 10 00:45:33 2027 GMT
        Subject: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:88:d1:8d:73:c2:7b:04:81:8f:10:fe:56:
                    76:5e:e0:09:63:43:1a:b9:29:0b:78:f2:ad:94:21:
                    4a:b4:1d:e1:b4:6d:16:06:67:2c:ae:77:94:b1:a2:
                    ba:22:f5:76:59:fc:35:65:81:67:cc:25:8a:c0:68:
                    09:46:19:e5:fc:7f:53:e3:e2:46:53:dc:88:25:ef:
                    d1:43:ed:17:01:08:1c:90:8e:e0:ab:06:5a:c9:e3:
                    6e:be:20:71:33:b8:5c:b0:6a:1c:d6:28:5a:f6:88:
                    a1:cc:fe:1f:97:38:24:14:a4:6c:ec:47:6b:25:09:
                    0c:21:9e:ed:47:84:65:c7:25:91:5f:7a:fd:f1:60:
                    b6:fc:72:b7:e9:18:e4:dc:5a:9a:c3:76:14:7f:63:
                    1a:88:bf:e9:b8:72:75:9e:69:c5:9d:d4:7e:22:91:
                    e6:1d:0c:59:96:a4:a2:bb:93:19:c0:6e:0c:7e:72:
                    29:1e:2b:db:3d:b4:cf:b8:48:2f:0a:af:73:76:2e:
                    6e:02:1b:5e:81:dd:41:94:d0:62:82:8e:5e:13:3f:
                    bf:c2:43:2c:21:89:52:f5:1a:85:72:37:aa:42:f0:
                    8f:09:53:3b:cf:d8:a0:e9:c4:0e:76:73:c5:25:2f:
                    8d:25:04:3b:d7:d4:be:10:19:fd:92:8f:c7:af:c7:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.160.0/20
                  166.70.0.0/16
                  198.60.22.0/24
                  198.60.80.0-198.60.84.255
                  198.60.104.0-198.60.110.255
                  198.60.113.0-198.60.114.255
                  198.207.196.0/24
                  199.104.120.0/21
                  204.107.178.0/24
                  204.228.128.0/19
                  207.135.128.0/19
                IPv6:
                  2607:24c0::/32
                  2607:fa18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6315
                  40519

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:e6:10:03:58:19:eb:0a:2a:ae:f3:36:b9:7f:90:d0:66:
         ef:c5:09:99:50:fc:63:96:c6:3a:d1:50:68:8c:ea:f3:a6:68:
         4d:d9:b7:12:c5:4e:8a:92:68:1a:2a:e9:fa:6d:88:56:63:c3:
         47:2c:08:b1:c3:cb:d3:22:72:c5:dc:49:ad:d0:15:d3:0f:e3:
         ba:80:b9:5a:3f:cc:0e:22:31:dc:e3:9e:30:55:1b:01:1e:bc:
         88:df:ac:6b:dd:4a:1e:31:f2:b8:22:32:ee:d3:1e:03:c7:20:
         c7:00:a8:54:49:33:69:05:56:f6:45:8d:f6:78:f1:72:6b:98:
         95:2f:e1:f9:58:1d:71:b8:ec:f1:00:f8:17:6c:4f:82:17:35:
         d1:81:23:3f:05:33:87:6e:dc:23:d2:aa:04:d6:70:90:e8:bb:
         95:78:2f:57:37:73:5a:6e:76:dc:15:e8:ac:95:1d:3c:d9:fd:
         de:cc:9a:33:51:83:56:26:dd:e6:9e:db:af:e0:03:d4:25:7f:
         b6:50:98:2a:99:55:11:32:75:9b:9e:cf:44:6f:d6:ce:66:75:
         0e:40:7e:40:45:75:b5:c2:aa:db:6e:0d:2e:05:b3:a7:2c:e7:
         58:7f:e6:c9:44:c5:0a:d6:af:21:51:fe:36:e5:77:1d:f6:31:
         80:ea:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:19 2025 by rpki-client