Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
File:                     fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer (raw, json)
Hash identifier:          yd3EbWydqwI0GK3OvMNJBw5NIqL654tpTDcY5t4hFns=
Subject key identifier:   5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848063D74B47EFC537AA784F600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 Nov 2024 01:45:33 +0000
Certificate not after:    Wed 03 Mar 2027 01:45:33 +0000
Subordinate resources:    AS: 30698
                          AS: 396111
                          AS: 396353
                          IP: 209.221.240.0/20
                          IP: 216.213.48.0/20
                          IP: 2606:e740::/32
                          IP: 2620:11c:4000::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:3d:74:b4:7e:fc:53:7a:a7:84:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 28 01:45:33 2024 GMT
            Not After : Mar  3 01:45:33 2027 GMT
        Subject: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:e3:88:a5:f8:ba:ac:b1:5e:65:9c:4c:68:
                    00:db:87:c0:8b:7b:4a:9b:e9:56:bf:e6:fd:77:f1:
                    38:24:c6:5a:7a:28:e5:f1:09:12:d9:63:45:72:f1:
                    90:67:ea:5c:e4:a4:53:c5:aa:1a:88:a2:b4:e5:28:
                    f1:f3:ae:ca:41:9d:0b:f7:94:fb:4e:79:00:93:be:
                    6f:e6:b1:90:53:08:4b:5f:9e:ea:e6:65:85:ae:43:
                    7c:2c:b0:f1:57:ab:d6:fc:30:10:5f:28:5e:2e:32:
                    ca:b8:cc:f5:1f:30:55:70:60:ab:0b:2b:75:28:eb:
                    32:63:84:86:ae:84:6c:12:72:15:c8:a9:2e:c3:39:
                    ba:7f:51:44:40:4d:ec:d4:79:29:f5:75:43:8a:fc:
                    37:97:46:56:a3:79:39:4d:8f:91:c6:43:d8:44:63:
                    ac:15:80:4e:86:eb:b1:38:82:50:f3:29:53:c3:15:
                    6e:c5:6b:60:ae:89:c6:be:cc:d9:6a:17:da:09:c5:
                    28:34:49:20:ca:17:bf:fc:21:51:2a:6c:0f:72:17:
                    49:da:f4:41:56:21:94:e6:c5:6f:9c:8f:ee:d8:7c:
                    95:92:19:4e:bb:5d:18:1d:7a:39:4a:7f:c0:ae:35:
                    1e:89:9d:05:21:a3:9f:92:bb:fc:28:6f:e5:48:3a:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.240.0/20
                  216.213.48.0/20
                IPv6:
                  2606:e740::/32
                  2620:11c:4000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30698
                  396111
                  396353

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:05:ae:d5:82:c8:cd:f4:73:17:39:a4:e7:cc:3a:05:6e:
         74:92:ae:01:5e:01:87:57:92:bf:49:1b:31:61:a2:d4:14:29:
         d1:03:e2:4e:95:9d:6f:e6:8f:96:83:4c:8f:2d:94:77:2b:e8:
         a9:9e:11:a3:eb:04:7f:98:30:c2:9b:28:26:b7:af:70:fe:06:
         ab:3b:34:9c:ba:c2:6c:1f:93:cb:d7:b5:9d:99:9a:e7:ff:aa:
         8f:81:39:c6:64:01:25:07:42:7e:88:77:8f:57:c0:98:00:25:
         cd:3d:3c:77:10:f2:91:61:04:71:82:58:6d:c4:29:2c:c9:38:
         b1:dd:d0:33:dc:97:6f:b3:93:97:b6:e4:94:2e:45:bc:71:9c:
         03:98:e9:ba:a6:88:19:e0:12:da:63:de:3d:32:5f:33:7c:4b:
         7f:47:dd:c0:99:8a:d6:cb:d8:16:a5:2d:05:14:d2:fc:e8:cd:
         b7:61:a9:5a:24:91:01:ae:44:38:9d:29:0c:e8:ef:ae:6c:94:
         4b:76:7e:6c:df:d1:47:ee:82:9f:95:64:55:15:0a:85:2a:3e:
         25:12:72:7d:78:c1:12:27:44:a8:c1:66:8f:62:01:2e:bf:74:
         9a:31:78:51:88:38:35:d0:38:80:a2:78:c0:84:0d:44:f1:e0:
         78:46:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:42 2025 by rpki-client