Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
File:                     90867e5c-2c8f-4999-a134-dc9418f84496.cer (raw, json)
Hash identifier:          fLQqrUKDLrtVZz0H2K/Uh2UAJfsijr+u3w4cafRhTW0=
Subject key identifier:   7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858484C088CD90974F6F1DE7D9280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Dec 2024 01:45:33 +0000
Certificate not after:    Sun 28 Mar 2027 00:45:33 +0000
Subordinate resources:    IP: 140.208.0.0 -- 140.208.239.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:08:8c:d9:09:74:f6:f1:de:7d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 23 01:45:33 2024 GMT
            Not After : Mar 28 00:45:33 2027 GMT
        Subject: CN=90867e5c-2c8f-4999-a134-dc9418f84496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:12:9b:3a:65:2b:44:92:da:54:0a:ff:82:
                    60:19:0d:9c:ca:ad:7a:39:60:4b:a0:8a:e2:94:e6:
                    e8:df:64:41:ab:b4:2e:4c:b3:f1:72:87:1d:c5:59:
                    ef:35:31:0e:ba:d8:fc:c7:0c:6c:f6:4a:6c:fb:9e:
                    16:be:ca:d8:ad:79:af:4c:68:b2:26:5e:1f:dc:c6:
                    fd:07:7b:72:8b:17:17:25:ed:2a:0d:24:7c:f5:3c:
                    0d:f6:fa:c6:0b:f7:d2:96:aa:b5:02:6e:12:2a:60:
                    ef:e8:c9:e0:54:b6:ce:7b:67:01:46:fa:97:60:63:
                    2e:23:d9:a4:43:d5:46:a9:69:1d:61:cf:48:04:12:
                    b7:06:0d:fa:70:60:ff:40:d0:8a:90:ec:36:0f:94:
                    99:f3:7b:f3:21:98:ac:38:45:20:6a:03:1c:85:6b:
                    14:2a:9b:96:66:2f:d3:81:54:2e:d4:45:33:09:67:
                    00:d9:3d:61:4e:11:bc:25:6e:30:4d:95:fa:22:45:
                    54:58:ec:85:a1:38:79:c8:fe:85:ba:ea:ee:be:54:
                    32:e0:2c:e2:e6:a5:a5:a9:51:0f:f6:5e:93:b1:e4:
                    52:8a:42:7b:c3:e3:d9:59:cd:0f:cf:40:0e:d9:7c:
                    9d:31:88:c9:1d:b8:4e:b0:e3:a3:a2:80:04:86:d7:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.0.0-140.208.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:ec:01:98:bb:29:ac:24:de:65:91:26:f5:3c:7a:a2:40:
         a3:bd:ff:e9:72:97:f5:91:4c:a3:fb:e7:d3:39:c3:05:e5:92:
         1d:c9:87:57:2d:fc:40:7a:d3:7d:dc:7a:52:59:4d:b1:72:4d:
         58:6b:ce:2a:20:6d:1b:88:9f:9a:18:c3:19:86:c5:1d:a3:e0:
         8b:a7:8e:36:52:16:6f:40:16:6f:68:ed:8b:63:0a:e6:cc:ae:
         63:73:b3:25:ec:38:e8:cf:f5:71:45:3f:9b:14:2e:83:4e:3f:
         93:6b:e2:62:fd:69:9d:db:31:dd:df:36:0f:9e:b7:80:30:18:
         a7:0c:f3:4e:89:7c:21:4b:bc:eb:5e:f7:79:a3:79:0b:26:e2:
         e9:9e:47:47:6f:d3:0d:5d:e6:26:b3:83:af:86:8c:65:42:91:
         1c:07:ab:a4:22:55:8f:79:a4:19:0b:91:1f:77:c1:e9:f3:44:
         36:00:c2:9f:29:d1:bc:b2:26:e2:71:19:cc:00:5f:de:38:27:
         10:5b:88:5b:68:2b:30:f5:06:4d:a0:81:a8:39:85:d9:e9:fb:
         e5:33:34:0c:81:78:44:99:79:dd:2f:bf:b0:bb:9a:80:3d:f1:
         cd:43:8c:bb:96:4d:f5:0d:32:4c:64:08:97:d4:d4:83:56:f6:
         90:19:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:37 2025 by rpki-client