Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
File:                     61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer (raw, json)
Hash identifier:          L/7tC4rRqcjFyeyxftKuQZzXFpDPRfnF55I/HGwObGI=
Subject key identifier:   BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848AFB3517FB5893A1BB553BCC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Jan 2025 18:34:39 +0000
Certificate not after:    Sun 02 May 2027 17:34:39 +0000
Subordinate resources:    IP: 142.94.0.0/16
                          IP: 142.149.0.0/16
                          IP: 142.229.0.0/16
                          IP: 155.15.0.0/16
                          IP: 198.161.6.0/24
                          IP: 199.213.0.0 -- 199.216.255.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:b3:51:7f:b5:89:3a:1b:b5:53:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 27 18:34:39 2025 GMT
            Not After : May  2 17:34:39 2027 GMT
        Subject: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:87:6b:05:96:f5:7a:68:d7:da:8d:d9:49:
                    3c:0b:a5:12:11:88:17:39:f1:77:c3:03:f0:dd:30:
                    2f:fc:8f:8a:be:d6:8b:9c:09:af:b6:e3:84:49:be:
                    3c:03:e1:a8:10:72:1f:0c:89:23:2a:09:5f:8b:9a:
                    7e:65:44:a4:f3:38:89:e8:3d:4c:dc:ec:85:6f:19:
                    35:8c:22:19:a0:21:dd:2e:66:b6:fb:b6:53:27:0c:
                    3b:a0:dc:bb:63:b7:dd:6d:b4:90:13:4c:92:d5:01:
                    e2:98:d5:5a:39:7b:28:db:79:b7:96:aa:28:45:6e:
                    a3:38:ce:f3:91:5f:03:93:59:59:ce:aa:7a:34:1b:
                    bc:3f:83:d4:ca:ba:c1:67:74:bb:84:d6:8d:89:f3:
                    e6:a2:5b:6e:04:4e:54:55:12:86:04:a4:97:99:e0:
                    59:dc:bc:2e:fe:c4:4c:69:7b:bd:22:05:db:5f:1b:
                    a1:d0:7d:2f:b5:8a:41:7f:be:db:0b:07:9b:0f:ef:
                    e5:8a:21:01:e7:55:2b:ec:7d:96:4f:9b:41:fd:95:
                    7e:d1:6b:76:4b:43:e7:78:a3:92:85:a0:10:5e:d2:
                    ed:71:97:79:aa:e6:73:38:39:b7:36:49:54:65:70:
                    28:fb:fd:34:57:eb:5f:84:00:e7:d6:08:1f:4b:d0:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.94.0.0/16
                  142.149.0.0/16
                  142.229.0.0/16
                  155.15.0.0/16
                  198.161.6.0/24
                  199.213.0.0-199.216.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:0f:e7:12:49:f1:0a:30:12:7c:df:43:81:cc:4b:84:19:
         c9:64:b3:fa:c0:eb:93:99:bb:01:cc:78:27:a4:7e:63:1d:71:
         d6:ee:43:e9:33:67:c3:2b:a3:23:b3:08:34:ee:66:5c:39:42:
         c8:94:76:8a:00:7a:18:47:d9:4a:e8:47:5c:1b:29:4a:d3:d1:
         30:9a:f2:c5:c3:6c:06:95:33:d0:2b:c5:4b:74:4e:e5:e8:72:
         84:f7:38:83:df:19:ed:90:8f:e8:cd:07:71:b1:6f:34:52:fa:
         9c:cc:a3:e4:fd:04:09:92:5f:2a:6b:ac:ba:54:d7:e1:f4:2b:
         32:1b:52:3e:30:a0:30:f2:fa:b1:d9:b3:5b:a7:30:14:3f:40:
         ff:7f:06:10:7a:4b:03:3e:a3:4e:d2:b5:e6:8e:91:63:6b:ce:
         17:9c:d9:33:23:76:2a:a8:20:be:fc:c3:d9:63:8c:75:40:c1:
         9e:40:54:05:d5:c7:36:6b:65:27:71:ef:dc:24:01:9a:70:25:
         23:04:72:d0:d9:da:5c:50:5a:6a:c8:f6:93:2c:0d:fd:05:64:
         20:4f:0f:28:f3:99:d2:6f:a7:ed:79:6a:df:9d:de:da:63:9a:
         d6:86:32:a1:bf:28:51:a8:9f:77:f0:12:3f:5f:7d:eb:fb:ad:
         af:3c:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:35 2025 by rpki-client