Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
File:                     65a28276-f493-4a9f-9824-c9717c1cf6fd.cer (raw, json)
Hash identifier:          fumhCVxFP1dBvBCAsmx9ntcQDi0fFvD94Slu+BKgllM=
Subject key identifier:   0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848A293C5556BF1ADC3B9C9FF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Jan 2025 01:45:34 +0000
Certificate not after:    Wed 28 Apr 2027 00:45:34 +0000
Subordinate resources:    AS: 33359
                          IP: 67.43.80.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:93:c5:55:6b:f1:ad:c3:b9:c9:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 23 01:45:34 2025 GMT
            Not After : Apr 28 00:45:34 2027 GMT
        Subject: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:23:2e:37:4d:f5:1f:5c:27:0a:39:20:48:
                    6b:57:96:ac:61:78:37:24:7d:8e:24:6c:b5:08:f9:
                    e0:f6:58:0f:b6:8f:2a:94:53:16:99:d8:ef:e6:87:
                    83:df:9a:93:08:95:25:7e:a4:68:34:e5:15:8a:fd:
                    3f:b0:0e:89:65:58:9e:81:2f:25:47:a3:a8:3f:7c:
                    48:b8:a0:ab:0b:eb:dc:44:b0:7a:5a:a2:db:81:78:
                    ed:98:46:c7:5f:2c:ba:47:44:78:63:2c:e4:4b:e7:
                    12:42:89:2b:92:59:7a:80:ab:2c:57:0a:23:3d:23:
                    f1:e8:3a:f4:c8:15:22:5a:3a:5a:c7:c9:f9:75:55:
                    f9:2a:57:16:67:58:78:cb:30:a4:9e:c1:4b:8c:73:
                    57:a9:74:f1:af:cd:30:80:6b:3f:8f:bc:2c:a1:f1:
                    ac:eb:de:63:16:fa:46:bf:98:c0:7b:21:c5:4a:ee:
                    81:94:a6:e0:54:03:93:95:ef:04:7e:04:eb:32:1a:
                    a4:a0:ca:bc:f3:88:df:67:79:eb:7a:44:0c:1f:e2:
                    97:98:57:bf:de:4b:cc:94:1a:43:32:5f:30:ec:a1:
                    8b:6e:64:96:cd:25:da:1d:c9:62:8f:f7:b4:29:9f:
                    c9:fd:6a:0b:9b:43:2f:e1:6f:83:2b:ee:1b:d7:ec:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33359

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:7c:4f:75:fd:3b:9b:cb:e7:d8:96:eb:99:0f:0a:98:3f:
         ef:82:5f:42:fc:a5:8f:7a:b2:c9:c2:53:b8:ee:48:ca:00:67:
         66:78:ab:49:48:06:b0:f3:72:28:5a:a3:0a:7c:0f:a5:ca:f0:
         46:51:99:e8:80:ce:ba:1e:49:81:87:94:b5:08:19:26:e0:99:
         f9:8d:bf:9f:53:18:1f:87:09:e8:f2:6d:aa:db:73:63:7c:ae:
         0a:36:1b:5e:b0:4a:6e:18:be:49:6e:cf:e0:ef:ea:d9:b6:a0:
         cd:0e:a6:ba:72:a4:79:6a:23:99:d3:69:c4:68:ee:b0:fa:ab:
         11:9d:9a:82:4f:07:15:5e:7e:1d:4f:f1:84:09:04:45:7b:90:
         e3:c2:21:ff:87:3b:bd:27:99:96:be:2e:07:26:36:f4:91:d4:
         10:2b:aa:4e:02:4c:2a:d3:06:10:80:a6:25:3b:9d:5a:8c:bb:
         0f:fb:14:28:47:65:54:de:aa:41:f0:68:53:c9:e9:35:58:73:
         8d:1e:af:27:8a:42:fc:e4:b5:84:67:35:f5:96:7b:24:79:ea:
         a1:3a:0f:24:fa:77:e1:4f:b0:fe:cc:17:50:44:ca:c8:c9:42:
         ab:70:10:38:86:63:3d:b9:36:4f:e8:93:c2:db:3c:7e:83:5e:
         0f:f5:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:13 2025 by rpki-client