Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
File:                     a05c180d-6db0-4307-bc39-264e11bb765c.cer (raw, json)
Hash identifier:          pYhk0Zi1ViETF70oW38/sE/fXEEHV70fXy9AA2UUxy0=
Subject key identifier:   FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858490449B23366CB475560AD05E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Feb 2025 01:45:32 +0000
Certificate not after:    Wed 02 Jun 2027 00:45:32 +0000
Subordinate resources:    IP: 66.119.64.0/19
                          IP: 66.201.160.0/19
                          IP: 66.249.192.0/19
                          IP: 198.52.248.0/21
                          IP: 216.184.96.0/19
                          IP: 2001:1820::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:04:49:b2:33:66:cb:47:55:60:ad:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 27 01:45:32 2025 GMT
            Not After : Jun  2 00:45:32 2027 GMT
        Subject: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:c0:77:2c:9c:6c:43:ef:9e:65:a3:ee:3b:
                    5c:85:b2:9f:47:74:3f:98:dd:fe:5b:fc:29:04:82:
                    bb:ea:39:5e:64:e2:82:5c:3e:75:52:e1:2c:6f:5c:
                    f8:34:32:09:a5:8b:3d:03:26:ed:17:35:a8:c2:a5:
                    07:7c:4d:5d:91:a7:e8:b9:b2:82:78:ab:8d:49:16:
                    08:5a:fd:18:0b:e7:d2:90:6a:d6:17:3d:de:6c:c0:
                    4b:5e:fa:27:55:3b:7d:f5:58:0a:a4:a6:79:af:dd:
                    74:d6:d6:07:b5:8e:10:42:94:03:61:59:be:de:63:
                    28:3c:81:5a:5d:59:c0:36:a4:5b:45:9d:0c:a5:0b:
                    4c:35:e0:43:28:65:1c:f1:86:f5:05:63:24:a1:f0:
                    fa:b1:df:70:ef:95:25:6f:f2:79:32:6d:4f:82:dd:
                    40:6e:ad:78:58:7c:55:6a:23:8c:c3:2a:cb:05:7f:
                    62:75:77:e0:fb:5a:9e:b0:c6:19:ad:bc:00:cd:d2:
                    b4:ee:bf:28:d2:ed:7b:8e:1f:4c:01:a5:9c:b5:29:
                    e7:98:74:1f:9b:c3:5f:2a:e6:99:ae:f7:bb:89:be:
                    56:6e:4b:d0:eb:a1:8e:9a:f0:43:ba:23:9f:cf:b6:
                    49:cc:f9:d3:11:f7:b9:f8:73:6f:17:2f:a6:78:3e:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.64.0/19
                  66.201.160.0/19
                  66.249.192.0/19
                  198.52.248.0/21
                  216.184.96.0/19
                IPv6:
                  2001:1820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:8b:9e:e7:55:cf:59:39:20:36:b4:7e:25:88:b7:b9:2e:
         e5:00:3c:fb:20:10:f0:0b:77:be:f7:2a:b8:07:82:dd:8b:02:
         d0:47:de:ca:70:ee:76:64:42:d1:33:43:b7:7a:89:de:25:8f:
         79:43:72:0d:d8:13:a7:24:e5:b3:d3:98:bb:6d:04:10:e6:f2:
         88:51:02:0b:f0:3a:ae:14:c7:a2:a3:94:7f:6d:ce:4a:9d:d6:
         6a:5d:92:ce:18:59:34:99:7d:04:4c:79:bd:4f:b0:29:da:65:
         f2:28:ca:aa:10:79:07:3f:7c:ef:6f:9a:b2:ca:de:9b:f7:44:
         43:68:ae:49:83:bc:c9:71:2d:77:10:09:77:86:2e:cc:a6:bd:
         19:32:c8:8a:56:1f:5a:aa:94:da:15:a6:66:01:b1:d8:21:36:
         a4:ef:ea:97:d2:98:a0:68:27:69:02:87:a6:5f:39:b5:08:c9:
         5a:25:c9:57:71:d0:25:c5:cf:45:01:50:3a:eb:82:98:f7:95:
         07:5e:de:93:ea:ee:5e:dc:1f:c3:00:c6:6e:84:7f:28:3a:6b:
         e0:b0:cc:41:1b:a4:d8:73:c1:8f:3d:81:7a:dd:74:19:fa:e5:
         2c:32:2e:fa:cd:3b:ae:bf:48:39:fb:fe:31:08:d3:17:95:85:
         c1:1d:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:35 2025 by rpki-client