Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
File:                     42c9e997-747a-4107-89fb-7cab8903a586.cer (raw, json)
Hash identifier:          BLcKOp5PsEYZEo3kF1Xvo0vYJaQ67zYvtP5V5almbRs=
Subject key identifier:   C6:F6:67:19:C9:7D:8F:D4:2A:51:A4:A1:94:B5:D7:15:6A:FC:1E:F8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848C1494676D43CCF0EFACD9680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 01:45:32 +0000
Certificate not after:    Sun 09 May 2027 00:45:32 +0000
Subordinate resources:    AS: 62805
                          IP: 23.142.224.0/24
                          IP: 2604:e8c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:49:46:76:d4:3c:cf:0e:fa:cd:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb  3 01:45:32 2025 GMT
            Not After : May  9 00:45:32 2027 GMT
        Subject: CN=42c9e997-747a-4107-89fb-7cab8903a586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:ea:90:55:30:b7:45:ea:0a:ef:e6:5d:fe:
                    6e:8a:67:e3:19:3d:57:e8:95:00:5c:78:56:ea:98:
                    7e:06:6e:ea:18:20:94:73:9b:21:91:e9:d9:ff:46:
                    eb:59:5e:a9:6d:b2:6d:cf:c0:19:eb:0d:12:2d:e0:
                    d2:55:90:d4:23:bd:f8:b0:bc:5e:5b:f2:0b:38:69:
                    5e:5d:17:7e:0e:e9:90:82:2d:a2:7c:8f:6d:02:8f:
                    3f:fd:61:5f:02:66:20:6d:5f:dd:4c:d9:a4:21:32:
                    40:9d:1e:70:b0:66:e7:ab:22:40:66:2a:79:58:71:
                    f0:87:ff:2b:73:85:ed:e7:32:5e:23:82:be:36:1b:
                    37:31:fc:71:02:8d:76:04:55:24:04:ae:17:59:9a:
                    26:78:65:4d:cf:c8:34:53:bb:27:88:0e:5c:ad:dc:
                    71:ad:29:db:fe:6e:9b:88:14:a0:a0:ee:87:8f:08:
                    f2:d0:ab:b0:d2:4c:77:3e:d1:5e:36:0c:5d:17:f3:
                    04:91:be:91:40:08:bb:fc:29:ea:e0:c2:b9:82:aa:
                    ba:eb:76:e0:c4:8b:ed:6d:b9:55:f4:ff:4a:40:1c:
                    d0:0a:a9:25:ff:5d:9f:c1:22:ce:22:f2:5e:9e:5b:
                    30:8b:80:80:8f:88:da:8d:a8:c9:4e:d1:77:ee:a0:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F6:67:19:C9:7D:8F:D4:2A:51:A4:A1:94:B5:D7:15:6A:FC:1E:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.224.0/24
                IPv6:
                  2604:e8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62805

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:13:88:22:ca:33:d6:c3:d9:28:b0:78:76:bb:6b:15:ff:c7:
         6d:e2:00:20:12:26:2d:8b:34:7a:50:18:8b:77:f0:eb:b3:19:
         e5:85:ea:a2:f9:88:0f:df:ec:b9:f0:68:5a:2d:8d:ca:49:6b:
         5d:6b:27:fb:0c:61:e5:12:0e:35:cd:53:0e:e1:5b:ce:7e:fa:
         35:ea:ed:a1:41:7f:1e:df:54:b3:28:7b:37:57:43:9c:8f:a9:
         18:c7:4e:0f:73:12:28:7e:fc:b2:c2:8b:a2:b5:04:4f:aa:08:
         a7:06:b1:11:7e:02:f5:3a:90:dd:6f:f7:1e:75:37:44:60:cb:
         1a:53:d3:3a:5e:27:d2:77:92:07:05:ac:c2:14:f4:ec:5b:1f:
         94:58:45:92:fa:6c:bb:78:9e:37:ba:6b:0f:13:79:5f:43:12:
         09:8c:a2:d4:3a:a4:68:f2:33:44:54:94:01:4a:df:75:37:90:
         50:1a:30:97:f4:4d:01:51:e9:04:7b:7d:4b:71:ad:54:2b:a7:
         44:9a:0e:4a:0e:59:bf:82:2f:41:4d:e7:71:85:b2:92:30:9a:
         f2:5a:1d:27:cb:86:92:82:f3:a7:44:6e:19:6b:e3:80:3d:ff:
         f4:57:b8:5f:17:47:86:96:3f:b0:d8:1d:21:b3:9b:34:ad:2e:
         36:f6:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:56 2025 by rpki-client