Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer
File:                     52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer (raw, json)
Hash identifier:          1RzR4h8Fzt+6aSTzD3iaRbCHijDdTVREDM6Ri1w/suY=
Subject key identifier:   52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       099B336C2DEB637B332C920BC8038C5C1CAFF0A4
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 08:07:52 +0000
Certificate not after:    Thu 19 Jun 2025 08:12:52 +0000
Subordinate resources:    IP: 2602:fc23:120::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9b:33:6c:2d:eb:63:7b:33:2c:92:0b:c8:03:8c:5c:1c:af:f0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 20 08:07:52 2024 GMT
            Not After : Jun 19 08:12:52 2025 GMT
        Subject: CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:1b:c7:d2:c0:e0:12:17:5e:c9:f7:c8:60:
                    ab:f8:0a:71:51:d4:7c:de:55:98:e7:31:85:f5:36:
                    73:68:d7:d8:fd:bc:36:9f:a5:cb:97:45:10:9f:96:
                    8f:32:0e:ba:d4:50:2b:df:39:73:cb:6b:7a:b6:ef:
                    51:77:1b:d0:f7:95:f8:ef:dd:98:b6:76:d8:78:c3:
                    8c:d1:8a:d2:80:da:3e:12:54:8f:1b:f7:94:8b:55:
                    af:7b:59:04:da:0e:74:f9:35:d7:2c:9e:37:0c:49:
                    1c:a5:fd:0f:6c:ef:25:9f:6f:47:f3:69:de:e5:af:
                    8f:62:0f:79:48:05:6e:f0:49:dc:67:ec:11:b2:0e:
                    fe:81:c2:d9:25:f9:46:6d:f2:f0:f2:3a:21:0c:60:
                    7d:c0:43:18:2f:0c:38:52:d0:5b:ae:1f:41:7b:d7:
                    fb:f5:6e:74:0e:e0:2d:59:a4:7e:fc:53:90:42:d8:
                    a6:99:3b:56:7b:be:3c:5c:65:51:c0:8d:00:dd:cd:
                    22:15:fe:03:7d:dd:82:d0:74:98:19:2e:83:f1:83:
                    72:6f:ac:33:24:54:67:8b:59:36:6c:18:1f:86:5b:
                    7d:92:71:ba:98:c7:0e:fc:b9:b1:4e:76:79:40:0f:
                    90:b3:c3:fa:4c:13:0e:f9:c5:7d:36:8d:f0:b0:4a:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:07:9d:fa:c9:f5:09:80:78:c4:29:b1:d5:5a:f6:42:46:
         49:68:31:78:27:03:9d:bf:0a:be:c2:d7:08:67:71:1e:d4:32:
         eb:21:70:b4:7e:f1:f4:31:10:21:51:35:77:f1:33:10:0e:ed:
         21:5f:c3:45:c6:4b:d8:c8:66:2d:c8:46:af:09:f2:97:15:4b:
         0d:15:a5:6d:ad:54:8c:d6:c6:f4:c1:f4:39:91:09:f0:fc:61:
         42:d4:51:69:20:ec:5b:a0:32:f5:48:4f:c2:69:c5:71:a9:d7:
         02:6e:9e:2c:95:a9:d1:56:30:e0:63:1a:fb:4e:f4:5d:74:c9:
         83:5a:8c:14:c6:31:34:ee:3b:91:38:66:ba:da:f5:a3:b8:fc:
         63:3f:2b:50:84:a7:48:0f:47:ac:69:c4:68:34:2d:fc:48:bf:
         a5:33:81:46:c6:ef:71:16:a8:99:41:bb:9c:01:2f:9d:f9:72:
         f4:2b:8a:5e:5d:0d:0e:0b:4c:57:d2:5e:fe:22:2c:0e:87:40:
         58:1e:8f:e3:17:da:67:9f:d5:68:6a:f5:cd:30:50:41:2d:0a:
         bf:b0:48:69:dd:a7:92:27:97:bb:c4:e6:3a:58:9f:a9:3d:66:
         f0:f7:16:50:0b:0b:04:d6:2e:f7:70:3d:4a:cb:01:e0:d8:08:
         f0:32:7a:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----