Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
File:                     907e0105-3516-47a0-a9c2-5f0b77661cb1.cer (raw, json)
Hash identifier:          Jk+vvpEhtvAd7f7w+53RdFPHMo3DB2dclwF+q/VAdyM=
Subject key identifier:   38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848F389999900C302F5C7947180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 27 May 2027 00:45:33 +0000
Subordinate resources:    IP: 74.120.120.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:89:99:99:00:c3:02:f5:c7:94:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 21 01:45:33 2025 GMT
            Not After : May 27 00:45:33 2027 GMT
        Subject: CN=907e0105-3516-47a0-a9c2-5f0b77661cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:4f:3c:fd:c1:d0:ed:f8:32:80:40:35:73:
                    d3:44:50:39:b4:5d:66:4c:17:bd:73:54:c9:c3:4c:
                    ef:83:f6:3e:9d:ba:bf:43:0e:0e:66:72:85:cc:96:
                    64:f4:b2:0b:33:ac:d2:a0:8c:6c:a9:5d:48:3b:d5:
                    0b:aa:74:7d:f6:24:b3:62:b1:14:30:56:4f:1c:b2:
                    b0:d8:72:55:bf:63:a3:c8:9e:4c:64:74:89:a1:25:
                    17:e5:86:9b:eb:2b:a5:df:c7:b9:0b:fc:c3:6c:3d:
                    78:c8:e1:26:9b:64:21:4c:37:c9:22:8b:3a:66:d5:
                    bf:78:7e:b3:01:4e:ed:d0:99:45:24:c5:69:7a:f4:
                    ac:82:da:71:34:28:4f:64:ba:02:75:7f:8b:27:29:
                    25:dd:df:4e:a9:13:10:4e:f6:e3:34:be:aa:6c:5a:
                    38:53:80:fa:63:d8:db:c3:39:fb:8c:d1:55:1d:1b:
                    7b:f8:54:9e:87:ad:87:6c:6a:cb:7c:ca:46:b8:7b:
                    e5:cd:84:56:fd:9b:57:4b:84:5e:80:6a:92:89:e8:
                    e0:18:17:89:28:7c:a7:1a:f5:37:50:c3:c5:0b:aa:
                    9c:b2:ec:91:4b:7d:40:f5:cf:2c:03:79:7d:18:49:
                    a2:7f:69:ec:9a:a2:aa:54:99:d8:4b:fb:d4:51:95:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:d7:8b:57:10:95:56:72:6e:1a:d4:97:12:68:fe:a6:46:
         4d:8a:15:ae:88:3b:7a:fe:e3:65:65:af:64:34:0c:c1:d4:f8:
         d4:41:d7:92:06:5e:f6:be:fb:55:62:04:42:d7:6e:28:80:16:
         2f:eb:bf:07:b4:03:19:2b:e1:85:5e:00:58:81:b5:2f:5b:88:
         e3:e2:a4:a5:12:89:12:29:db:45:db:2e:76:8e:b7:a0:24:de:
         a7:e4:83:59:e0:29:31:91:a3:ce:dd:31:ce:dc:66:fd:13:1b:
         09:4e:a0:b4:a4:34:47:8d:a6:de:ab:d4:8b:1f:74:e4:40:a0:
         f3:0d:b3:12:d8:e8:4d:44:29:62:cf:f7:7f:20:3c:27:91:62:
         6e:36:29:bf:b7:60:ed:07:17:54:2c:01:0c:6c:9b:cb:f9:f8:
         3a:a9:4a:c7:c6:e7:01:02:01:ff:f0:e4:06:a0:bd:39:51:a7:
         e8:1b:72:87:f6:ca:55:00:3d:fe:da:b7:48:00:28:0e:78:94:
         aa:28:7e:62:7b:85:c8:bf:be:15:37:58:3d:c8:8e:5d:27:d3:
         c8:61:8c:24:9b:ef:d2:06:83:d7:9c:e0:44:16:fa:e9:b9:35:
         fc:c1:2b:75:6f:cf:b4:f7:fa:6c:75:14:28:14:ab:08:f2:90:
         17:69:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:40 2025 by rpki-client