Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
File:                     4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer (raw, json)
Hash identifier:          7gFtxBFNbhZqZNFYrQqbGk/Z4MdXG7Dt2IBKJncUjLM=
Subject key identifier:   42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       5C1B92EB460E135FBB2435FE944842634656D323
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 02 Jul 2025 19:28:15 +0000
Certificate not after:    Wed 01 Jul 2026 19:33:15 +0000
Subordinate resources:    IP: 2a0f:6287:e000::/35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1b:92:eb:46:0e:13:5f:bb:24:35:fe:94:48:42:63:46:56:d3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:15 2025 GMT
            Not After : Jul  1 19:33:15 2026 GMT
        Subject: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:63:03:59:93:5d:99:8b:6a:d1:ae:29:fd:
                    e9:c4:7d:12:11:d4:2f:6e:d4:27:53:ea:ae:85:bb:
                    6b:25:2f:8f:ac:61:58:d3:19:ef:f8:b5:66:4c:58:
                    44:fa:9e:ad:a3:93:18:94:25:10:1d:bd:d3:35:4c:
                    74:d5:12:5c:33:c8:d3:3b:16:be:13:ae:38:5d:98:
                    3e:51:ed:b0:14:ef:76:56:4c:a6:0a:60:f4:ce:fc:
                    8f:09:71:49:eb:7d:ca:61:83:27:e5:87:54:b6:d8:
                    40:36:63:2f:60:a7:be:01:41:80:91:70:b3:84:2a:
                    a6:93:a9:45:a3:7f:94:c6:38:51:5f:7b:5b:50:38:
                    87:95:4b:5a:9f:82:3c:b0:09:ed:0b:8e:c8:ba:3e:
                    1c:ba:d5:67:17:83:22:aa:43:7a:38:40:ae:7d:cc:
                    b8:91:b7:32:51:e8:50:b1:34:e7:04:89:bb:fc:79:
                    e2:1b:e3:79:86:5a:f4:e2:f4:97:07:f8:28:bf:7f:
                    30:66:e8:21:35:68:88:4b:2a:bd:73:ff:4a:44:71:
                    b9:c5:d9:af:ec:c7:f2:e3:24:5a:32:d7:12:5c:dd:
                    bb:63:f0:dd:34:d4:10:5e:2a:be:25:74:f0:8c:74:
                    38:d3:b8:e1:c3:9f:97:0e:be:44:1b:43:5e:a1:d9:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         df:65:ac:6e:e1:78:b3:27:19:d1:2b:9a:26:5f:27:32:ba:c5:
         55:7d:4e:c1:e8:1c:b8:91:bb:31:38:d7:0e:c1:10:ce:f9:75:
         c6:b9:cf:89:c1:c6:59:1f:c5:52:75:dd:46:e6:31:67:ad:c2:
         4b:56:3a:ba:20:4d:af:3b:34:5a:45:6b:9e:96:25:df:86:2f:
         b9:56:1f:2a:37:20:6e:a4:03:35:12:36:fb:04:40:1b:f6:1b:
         bb:9c:1c:04:41:50:a4:04:c2:2a:cc:c8:7c:e1:d4:86:05:c6:
         4c:60:04:4a:ce:f0:82:2c:d0:09:71:2d:2f:43:e2:9b:fb:00:
         9b:a2:2d:a0:a7:67:29:2d:c2:db:5b:79:26:a4:7f:15:7c:52:
         06:de:d0:9a:0b:7e:1d:5e:e7:60:81:8a:b8:28:3e:9b:19:13:
         26:8d:fc:07:4f:fc:e6:9f:34:22:03:62:02:a2:88:3c:0d:b2:
         e0:f8:05:ab:1c:6d:71:5e:98:11:b2:ac:69:1c:ee:05:1f:64:
         93:87:e2:59:fb:2f:2e:8c:e3:84:04:fa:ef:00:60:40:ee:68:
         17:87:2e:e1:e4:f4:bf:41:fe:9e:5c:37:b3:14:43:f5:1e:ee:
         e6:5f:1f:36:75:80:78:92:1d:cf:c1:b4:9f:36:28:71:e2:36:
         3f:fa:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:45:31 2025 by rpki-client