Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
File:                     6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer (raw, json)
Hash identifier:          LFJYW5vLQAjzd+ytgcd+B/nhViukA43SmPhgp0VZw98=
Subject key identifier:   1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584957EC6E840DBAC6A81D86F000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 29 Mar 2025 00:45:31 +0000
Certificate not after:    Fri 02 Jul 2027 00:45:31 +0000
Subordinate resources:    AS: 36379
                          AS: 397270
                          AS: 400353
                          IP: 23.160.192.0/22
                          IP: 64.112.32.0/22
                          IP: 128.254.172.0/22
                          IP: 158.51.96.0/22
                          IP: 208.69.100.0/22
                          IP: 2602:fea7::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:ec:6e:84:0d:ba:c6:a8:1d:86:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Mar 29 00:45:31 2025 GMT
            Not After : Jul  2 00:45:31 2027 GMT
        Subject: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:2b:b8:d9:41:f4:2e:9b:b9:a6:e1:ff:67:
                    40:be:8b:cb:a9:ce:37:b5:b5:f6:4b:cc:c2:c5:d3:
                    e2:db:af:81:fb:4c:34:9c:0f:7e:c4:c1:8b:7b:0e:
                    57:db:ee:0a:83:d8:81:33:ed:65:21:d0:c4:65:ed:
                    e6:20:0e:26:a2:16:9c:9e:4a:ca:9f:23:ad:e6:de:
                    46:a8:ac:7e:77:51:ff:ae:ff:71:d5:d7:15:be:f2:
                    b1:3d:fb:20:63:1f:12:ef:20:75:51:66:7e:e1:57:
                    e0:8c:10:b6:c2:90:0d:fa:9e:96:fd:14:5f:de:97:
                    20:08:ec:91:6f:fa:0e:c1:64:91:78:00:64:b7:c1:
                    ab:45:27:92:e6:df:cf:19:c0:e2:28:70:4b:b7:31:
                    0d:da:39:b8:34:03:4d:0c:70:03:06:eb:46:47:cf:
                    26:28:cb:4b:3a:ea:69:29:e9:26:4e:32:e0:d3:2e:
                    d9:38:1c:ff:ce:4f:18:19:f9:8d:76:fd:93:4b:fd:
                    5d:38:8e:ae:44:d2:10:26:be:c2:75:83:46:ee:06:
                    40:7a:60:66:a7:c3:4c:d4:55:5a:70:7c:f2:37:f2:
                    42:e3:7e:9e:2a:ae:80:bb:b1:32:66:0e:3d:32:13:
                    3d:a2:2f:95:6c:5e:f9:8a:2b:71:7e:f9:f4:f8:26:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.192.0/22
                  64.112.32.0/22
                  128.254.172.0/22
                  158.51.96.0/22
                  208.69.100.0/22
                IPv6:
                  2602:fea7::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36379
                  397270
                  400353

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:d2:b8:39:cd:7a:81:84:c6:54:7a:30:68:e2:a8:f6:9c:
         56:dc:cf:62:ec:f1:e5:4a:43:ec:cc:fd:0f:0d:48:5c:ed:64:
         67:84:4d:b5:bd:b6:27:f2:14:55:f3:bc:cd:17:54:af:02:aa:
         f7:62:dd:45:5d:fb:e9:0c:fd:74:e8:c9:8a:29:b7:f4:25:f8:
         9e:af:02:4c:ac:e4:95:9f:1a:22:b8:1f:d2:f0:c5:d7:db:aa:
         e8:a0:9c:e5:99:11:c1:14:32:f9:23:fc:4c:90:de:13:b7:68:
         f5:8e:99:a0:5e:c1:71:ae:1f:44:f2:7b:44:b2:98:08:d3:a1:
         b0:8a:7d:09:fd:e6:f1:f5:9f:cc:5d:10:71:e5:04:9b:b3:0b:
         6d:87:11:47:ae:a0:dd:52:56:b8:68:c2:d0:ca:41:1b:8f:ca:
         b6:6b:58:bd:ab:94:f1:7e:13:1f:46:ba:61:5a:b9:b4:d9:70:
         0d:02:34:9c:9e:f3:e5:fd:43:a3:a8:a3:75:58:d4:df:a1:b1:
         bd:db:84:88:c8:51:92:6b:3f:0a:52:97:62:71:40:a7:da:03:
         13:a5:47:9d:3a:ce:ca:dd:9a:6d:80:c6:7b:da:62:9d:35:15:
         c8:63:45:7a:c3:3e:e5:be:f9:3b:f3:6b:0e:17:fe:4b:31:d7:
         0b:be:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:52 2025 by rpki-client