Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755.cer
File:                     7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755.cer (raw, json)
Hash identifier:          D7UO6kKhPHRUadA1tpif2Ei+fXV6oU0q98QRyo/rJqs=
Subject key identifier:   D5:7E:CC:23:46:8E:33:DB:20:35:32:B7:A6:3F:C9:71:F2:DF:52:14
Authority key identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1
Certificate issuer:       /CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
Certificate serial:       010D0C9F4328583E25F67F4A8B8D69924B1312C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1/D57ECC23468E33DB203532B7A63FC971F2DF5214.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 06 Jun 2022 10:39:05 +0000
Certificate not after:    Sun 08 Sep 2024 10:39:05 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 2602:ff62::/36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:25:f6:7f:4a:8b:8d:69:92:4b:13:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
        Validity
            Not Before: Jun  6 10:39:05 2022 GMT
            Not After : Sep  8 10:39:05 2024 GMT
        Subject: CN=7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:28:26:b5:de:10:f0:3c:b4:df:47:88:df:
                    e4:86:e4:a4:16:5e:26:4f:95:c3:8c:89:9f:49:87:
                    04:92:0f:60:08:13:ed:6a:5b:2c:76:61:4e:4a:32:
                    3b:d6:35:6f:8a:62:5f:1c:3b:ce:cd:53:f3:e5:11:
                    d8:b8:52:bc:fb:d4:76:0d:d7:2d:d5:fd:81:57:b2:
                    a5:b4:32:03:2f:13:3c:6c:4e:c5:fc:ab:47:4b:5c:
                    ba:20:4d:c4:6a:7e:33:92:0f:5f:ce:78:0b:c6:95:
                    6b:09:9e:28:9a:0e:eb:e3:57:71:c5:b8:e5:c4:e8:
                    a5:b9:79:45:29:49:c9:19:7a:c4:b3:b0:82:b8:63:
                    d3:a4:75:24:35:3d:3d:3a:df:00:02:c9:ca:fb:af:
                    3e:db:c7:e1:d2:b1:97:ed:63:33:ce:03:89:d6:a7:
                    21:70:cd:20:a4:83:94:13:af:86:a5:fb:e7:d1:fb:
                    3d:ed:5a:c5:10:53:1c:4d:b5:19:ae:4e:30:d0:41:
                    0a:6b:3e:59:a2:f0:2f:86:6d:c8:d9:b6:cb:68:e5:
                    cb:17:14:24:c6:a6:9d:1f:f8:a1:87:42:90:b6:0d:
                    df:11:a0:5b:c5:e6:41:11:e7:6a:4c:67:65:6b:b6:
                    16:e6:ed:92:39:b7:39:a5:70:0c:7d:ce:27:2e:28:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:CC:23:46:8E:33:DB:20:35:32:B7:A6:3F:C9:71:F2:DF:52:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1/D57ECC23468E33DB203532B7A63FC971F2DF5214.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:a9:cb:ae:31:8b:da:bc:82:a9:78:4d:14:78:23:60:03:
         9e:4b:82:87:de:7f:33:01:37:38:01:bf:2d:c6:52:03:5d:2d:
         e9:c5:70:b9:e9:84:b2:ad:0a:96:ad:f0:da:06:fb:d2:cb:7b:
         e4:a8:c9:ec:a8:40:f4:e6:16:20:75:33:4a:b1:2a:57:8b:fa:
         d8:43:4d:b5:8b:7b:fb:ea:db:e2:ab:de:a8:28:ed:24:91:e1:
         17:f8:46:f5:c7:c5:86:9f:1e:ae:5a:47:1a:1c:0a:37:38:27:
         7a:58:db:6a:86:b0:5d:01:fc:f5:ab:63:56:5f:79:a8:b2:87:
         00:1d:d5:bf:22:f8:b9:07:80:a0:f8:bb:0e:e3:68:d4:fc:33:
         c3:59:02:df:99:d6:40:b5:a6:68:c3:dd:7a:c6:d0:7e:b5:65:
         39:9e:42:3a:08:47:fc:42:85:cc:cb:85:8a:e5:89:66:fd:46:
         c6:67:5e:ab:6e:cf:c4:fb:ef:0c:cd:53:33:ef:ce:b3:04:02:
         4c:0a:0c:26:55:d0:b5:2b:aa:3c:4d:ce:5c:12:e5:8c:53:de:
         71:f0:32:24:46:3b:49:a4:00:b0:a3:fe:ea:be:cc:95:50:a2:
         b3:9f:3c:96:8e:e4:19:c5:dd:15:62:27:24:67:48:81:81:49:
         da:4e:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-ams.rpki-client.org