Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer
File:                     26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer (raw, json)
Hash identifier:          Gu/tfrQFN7hl/xnnqkvVZnf6cXK2oS0YSRnWHDTLRi4=
Subject key identifier:   26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       471F01B0638E8E55F2D9AAA740F084DD7475106F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 02 Jul 2025 19:28:15 +0000
Certificate not after:    Wed 01 Jul 2026 19:33:15 +0000
Subordinate resources:    IP: 2a0a:6044:ba00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1f:01:b0:63:8e:8e:55:f2:d9:aa:a7:40:f0:84:dd:74:75:10:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:15 2025 GMT
            Not After : Jul  1 19:33:15 2026 GMT
        Subject: CN=26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:f7:e2:c8:45:f0:dd:8b:41:97:51:54:6c:
                    e5:de:4d:ae:89:6c:3c:6a:6f:63:2a:c4:8d:25:05:
                    a1:70:c9:91:f1:04:c6:53:ba:4a:22:4c:84:6a:6a:
                    68:08:62:57:fa:2c:99:31:7f:16:64:28:86:b5:a4:
                    b7:b6:8d:8a:6b:6c:e9:4d:15:9c:10:81:df:41:de:
                    87:eb:bf:af:40:86:e4:db:d2:92:d6:6c:fd:0e:2b:
                    8d:cb:26:21:b7:b0:de:01:9e:62:84:65:3c:9f:87:
                    75:5f:f8:86:e0:96:1d:c2:de:bc:5c:4d:a0:b5:7e:
                    05:60:78:27:df:b8:52:7b:94:07:95:0e:2e:65:22:
                    2a:d8:a8:8f:0e:3d:fe:8a:64:3b:39:f5:85:bf:5a:
                    0b:81:1f:07:75:57:37:35:b2:14:d4:dd:ec:15:3d:
                    cc:07:47:b1:3c:05:d3:12:cf:34:ab:c1:55:68:d8:
                    f9:e1:58:3a:21:a0:92:c9:db:a3:70:56:ba:ac:0e:
                    c0:59:c2:76:15:30:36:28:ab:a6:0d:14:68:80:ae:
                    2d:e1:8f:69:15:c9:69:a1:db:3c:14:87:ec:89:51:
                    ad:12:49:d6:17:07:38:d8:05:96:b8:b8:69:ab:b6:
                    ee:92:db:f1:49:6d:00:5d:e3:bf:5c:7b:0b:ef:1c:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:98:3b:ad:92:bc:8d:77:cd:d5:3e:ac:1e:ed:98:0d:33:78:
         ae:d9:ac:13:77:63:b2:b1:55:33:f9:83:a8:12:c1:31:1b:ae:
         bd:35:5c:3d:ff:b9:9c:19:bf:a1:04:98:48:8b:ab:44:87:45:
         85:4a:91:4c:7c:2a:a9:a1:83:47:40:fd:32:cc:f1:ee:30:7a:
         ce:ce:d0:b9:12:ae:02:f8:c3:fc:02:bb:b0:33:27:72:4a:7f:
         34:3a:7e:b7:51:5a:03:56:33:f6:f0:12:2a:cf:09:fc:04:f4:
         0f:e2:ea:a2:38:74:a7:01:ad:bc:c2:ea:5f:32:ea:4a:ff:ed:
         4f:7a:2a:a2:03:04:13:2e:79:1d:1e:f2:f9:b1:e6:44:6a:49:
         69:29:df:93:21:b0:57:9f:08:bf:e7:f0:49:93:6a:f0:9d:48:
         d2:fd:d9:14:61:cb:b2:47:41:b9:8f:0f:dd:c8:da:ba:74:3c:
         56:b9:9a:53:3d:b5:ac:f4:41:bd:0f:3f:01:a5:22:0c:8e:89:
         60:f3:d8:21:4f:70:94:f8:c0:f1:5d:52:fe:58:a6:49:c7:e5:
         6c:1d:eb:ae:f1:b2:8a:a6:c3:bf:39:e3:a9:7c:60:6a:ba:7c:
         76:f3:ff:19:55:01:a6:42:b3:5b:55:3e:4f:2f:3e:0e:3f:43:
         d5:50:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----