Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
File:                     c727dab7-c852-4d24-82ff-cf171b24f2f9.cer (raw, json)
Hash identifier:          pByHY25YxTuYJuky0mNg8NdbIUp8WchU1rAe1FyQYEA=
Subject key identifier:   61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584875E8D0863D838D1A87A22BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Jan 2025 01:45:33 +0000
Certificate not after:    Mon 12 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 394161
                          AS: 394363
                          AS: 394943
                          IP: 66.17.0.0/18
                          IP: 149.106.192.0/19
                          IP: 192.95.64.0/24
                          IP: 199.43.255.0/24
                          IP: 199.66.8.0/22
                          IP: 199.120.32.0 -- 199.120.57.255
                          IP: 2620:137:d000::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:e8:d0:86:3d:83:8d:1a:87:a2:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  7 01:45:33 2025 GMT
            Not After : Apr 12 00:45:33 2027 GMT
        Subject: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:74:51:af:dc:13:3c:ff:d6:6a:fa:f8:d4:
                    9a:d0:cf:8c:26:74:b4:1b:e2:ff:87:ef:48:a5:b7:
                    63:1b:4e:eb:ee:92:0e:07:53:80:b8:f0:34:cb:d0:
                    1c:14:db:5a:5b:81:c6:50:b8:7f:a2:62:39:6a:b4:
                    ab:ef:5e:62:c8:3c:24:49:b9:65:e1:93:5c:92:01:
                    1d:10:0f:70:a5:6c:18:09:32:25:0a:81:3b:a6:a7:
                    db:8c:41:f2:fa:d3:a1:91:a4:dd:63:c2:bc:80:c2:
                    c6:5b:5c:8e:e6:3a:cb:c6:9f:c5:19:c6:11:0d:ac:
                    3f:df:c3:d2:8a:b3:ff:35:69:fc:e9:69:18:c8:64:
                    d5:65:b8:27:71:4e:5d:6c:8a:9f:22:3d:3f:01:18:
                    e2:fd:ef:82:db:a6:2a:2d:91:dd:a1:22:e3:c3:2f:
                    c7:44:2d:68:87:fc:6e:22:1d:d7:62:bd:f1:54:68:
                    e8:d6:32:ba:b9:d1:4e:bf:c5:53:71:6e:2e:dc:f7:
                    d7:13:6f:64:83:1b:2b:40:7c:62:d7:05:0f:26:41:
                    01:de:6f:79:ce:da:4c:15:8a:91:02:62:5c:e9:c1:
                    74:72:31:a2:c0:0d:a1:73:21:f0:37:ec:b6:cf:49:
                    55:ac:75:ee:7e:8f:9d:ad:82:09:ca:d2:83:df:48:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.17.0.0/18
                  149.106.192.0/19
                  192.95.64.0/24
                  199.43.255.0/24
                  199.66.8.0/22
                  199.120.32.0-199.120.57.255
                IPv6:
                  2620:137:d000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394161
                  394363
                  394943

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:e0:3c:f2:0d:53:3d:6b:2e:1a:e5:64:bb:d0:86:b5:e7:
         4f:0b:da:9e:8e:f3:7a:d7:0f:43:fe:15:c3:ef:5e:fe:96:48:
         bc:1c:27:56:fc:f7:81:a9:50:9a:95:65:23:90:e3:68:90:5e:
         a5:02:d2:73:58:b5:dd:20:a5:f5:2a:f4:71:98:b4:67:4e:38:
         17:3a:49:5e:2a:72:2b:57:ca:2a:73:c9:60:fb:77:35:8c:1f:
         f5:6b:46:25:bb:ae:dd:11:35:c9:9c:ca:04:83:66:ca:34:84:
         41:86:b4:5e:c6:8d:c8:10:87:1d:3b:ca:dd:0d:27:d7:70:9a:
         c6:89:88:ec:68:17:8c:b7:f0:d9:40:bd:2f:80:69:52:49:97:
         ba:0f:84:a4:0c:64:b4:b5:4b:73:bc:a2:68:03:dc:41:31:af:
         7e:77:17:6e:22:9e:9a:6b:e0:7f:cd:a8:ae:ca:68:66:e3:08:
         8f:3d:47:a4:10:8b:35:63:d0:a4:b5:1f:6c:ef:4e:60:28:ba:
         d5:94:b9:88:61:b2:de:07:81:c9:fe:80:cb:e9:c8:7e:b7:30:
         64:18:3d:cc:e5:19:83:0f:ce:21:e6:b3:8b:a8:c7:76:3b:de:
         c3:19:bc:58:e8:43:9b:2f:ee:34:08:aa:33:dd:94:7f:7e:27:
         b1:5f:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:11 2025 by rpki-client