Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4601ede3a76862bb3ed987003367690e3a4425d559.cer
File:                     7fd6a57f4601ede3a76862bb3ed987003367690e3a4425d559.cer (raw, json)
Hash identifier:          WgjViQ3yWJeAuWL3ruE/e2bH0texpG+D+5i2fN0unRA=
Subject key identifier:   02:D1:AC:D6:AB:34:0F:23:00:97:07:1A:C7:09:05:95:CE:C7:2F:AC
Authority key identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1
Certificate issuer:       /CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
Certificate serial:       010D0C9F4328583E1AE2FCC60C10854037A1F0F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/02D1ACD6AB340F230097071AC7090595CEC72FAC.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 02 Jun 2022 11:25:53 +0000
Certificate not after:    Wed 04 Sep 2024 11:25:53 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 2602:ff62::/36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1a:e2:fc:c6:0c:10:85:40:37:a1:f0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
        Validity
            Not Before: Jun  2 11:25:53 2022 GMT
            Not After : Sep  4 11:25:53 2024 GMT
        Subject: CN=7fd6a57f4601ede3a76862bb3ed987003367690e3a4425d559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:9b:fc:0c:9e:1b:b3:55:4a:87:d3:93:c6:
                    ba:d0:10:d4:17:5c:22:81:f5:97:c0:62:44:b9:cf:
                    36:e4:ed:52:46:11:dc:63:48:cf:fc:c1:e5:c7:6f:
                    2e:cb:d2:12:b4:4d:cc:00:79:4b:68:d7:7c:b8:b8:
                    cc:72:dd:72:15:dd:7e:8d:87:29:7b:68:12:90:a3:
                    2b:2a:a3:8b:71:43:b3:1c:7d:85:91:00:65:98:f8:
                    5b:aa:5b:67:3a:0d:db:79:12:88:45:19:ea:1e:9c:
                    03:b7:d4:ec:b0:33:62:16:b8:cd:df:f7:76:7b:20:
                    5e:b6:07:15:ce:ae:56:e4:9f:3e:bd:61:5a:79:24:
                    6f:01:f3:17:2b:90:40:7a:c9:26:20:3f:de:86:c5:
                    88:6f:8b:cb:a0:64:b6:ad:73:d2:40:db:a5:a7:27:
                    42:d6:5f:50:68:21:23:c3:47:15:e6:f3:43:34:25:
                    f4:bd:b5:05:c8:63:11:e7:db:95:d8:e3:f7:85:cb:
                    89:7d:03:4d:01:d2:bd:5f:c4:b0:47:9b:4b:e2:ee:
                    46:28:45:66:45:d7:3c:a1:08:5c:5d:09:ca:1b:24:
                    0c:e4:60:b2:1a:51:fc:b6:f5:08:77:14:52:67:ac:
                    b1:ec:70:c7:06:10:56:23:e1:85:f1:94:76:9e:c4:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D1:AC:D6:AB:34:0F:23:00:97:07:1A:C7:09:05:95:CE:C7:2F:AC
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/02D1ACD6AB340F230097071AC7090595CEC72FAC.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:6f:0f:ba:c2:28:ac:48:3c:ee:43:ac:43:92:8f:0a:f9:
         0f:a0:fb:11:e8:77:5a:43:e3:64:ec:81:bd:67:1c:29:09:2c:
         99:31:35:af:d8:9a:9d:22:4c:f6:b5:f7:cd:73:3c:38:ed:a5:
         80:f7:5a:dd:65:5c:0e:0b:af:43:02:dd:85:75:95:af:71:f3:
         49:cc:25:f7:11:3e:08:e6:ed:b0:c1:7c:5e:f4:13:09:6d:2b:
         00:ae:74:43:f1:e7:ae:64:55:8b:cf:bd:d9:55:3f:68:90:a1:
         2c:8b:00:a5:09:82:f9:29:69:82:51:43:99:80:6a:d3:ce:f1:
         44:91:f9:53:2e:9f:fe:62:ff:71:7b:94:23:9e:e2:fa:6e:68:
         dd:da:88:76:9c:c7:31:bf:09:6f:51:c6:46:74:83:17:9a:f7:
         3b:2e:ad:76:d2:1c:34:4f:ef:83:29:32:6f:cb:d1:6e:8e:8a:
         5f:c6:23:84:ff:ea:2c:9a:13:af:ec:0b:95:4c:5c:4c:28:f9:
         9b:3b:fe:31:b2:ea:e9:35:d1:71:b9:a0:43:45:6b:98:64:b1:
         e4:09:54:a1:eb:af:2a:aa:2d:4c:fd:ab:e1:37:0e:fd:29:51:
         43:43:b3:7a:82:b6:91:9b:02:1b:b0:63:10:92:77:5d:aa:26:
         fe:fc:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:14 2023 by rpki-client on console-fra.rpki-client.org