Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer
File:                     fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7.cer (raw, json)
Hash identifier:          9eoQ3kAZKC8usJyIomY06aro8CppDVuL/VmGl77Xmqs=
Subject key identifier:   EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
Authority key identifier: ED:75:0F:DC:68:8E:37:2F:66:2B:F1:56:4C:28:C4:DC:77:45:05:92
Certificate issuer:       /CN=807e83b1-c82e-4b8d-9e2e-a3dc419fa965
Certificate serial:       010D0C9F432858430F589A4A04201A513C05C340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/EF13C213784664D4684119614B2AF58530A084C5.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 20:07:51 +0000
Certificate not after:    Tue 02 Dec 2025 21:07:51 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:58:9a:4a:04:20:1a:51:3c:05:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807e83b1-c82e-4b8d-9e2e-a3dc419fa965
        Validity
            Not Before: Aug 30 20:07:51 2023 GMT
            Not After : Dec  2 21:07:51 2025 GMT
        Subject: CN=fcb20f59666cc3d2eb2f09b42d44560f962f804d0032c486b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:40:c9:42:bd:d4:da:9f:c8:d9:61:c6:21:
                    6d:f2:09:c3:8a:2b:99:4a:14:1d:16:57:b3:6c:a2:
                    08:95:86:01:4d:1c:8e:87:d4:4a:9f:87:ff:f2:17:
                    d1:d5:f1:c1:f2:67:c2:e9:27:b8:25:73:07:24:fd:
                    55:fd:ab:7e:5c:89:17:8c:e2:74:3e:9f:c0:22:5c:
                    42:0c:6f:c2:24:20:bb:72:fc:0f:d8:2b:a8:59:45:
                    5e:56:c8:bd:0e:3b:14:1c:e3:51:76:07:5a:4a:3f:
                    e9:14:2b:90:0f:df:04:a2:b2:8c:67:ee:cc:05:e5:
                    8a:09:eb:fd:81:08:4b:9b:3e:6c:67:c7:d1:e7:19:
                    2d:74:19:f1:56:09:56:a5:08:e5:a3:eb:c5:fe:77:
                    d3:fc:d5:0e:96:4d:74:85:fa:38:bb:de:b1:48:cf:
                    cc:0a:84:69:21:75:00:0a:a6:40:cf:0c:1e:2a:ad:
                    1e:0c:37:c0:23:b2:df:4d:65:9e:64:3f:24:e0:dd:
                    14:2e:82:41:c3:49:07:54:e5:66:e7:4a:3d:e6:e1:
                    43:92:68:9c:6a:43:12:40:f9:44:6f:8f:c6:2f:b2:
                    b9:05:e3:77:86:c9:f7:cb:d3:4b:46:f8:79:1a:7b:
                    1d:35:0a:df:b9:4c:24:83:b2:0a:b9:fd:bf:d7:7a:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:C2:13:78:46:64:D4:68:41:19:61:4B:2A:F5:85:30:A0:84:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a480ec715799a/0/EF13C213784664D4684119614B2AF58530A084C5.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965/807e83b1-c82e-4b8d-9e2e-a3dc419fa965.crl

            X509v3 Authority Key Identifier:
                keyid:ED:75:0F:DC:68:8E:37:2F:66:2B:F1:56:4C:28:C4:DC:77:45:05:92

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/807e83b1-c82e-4b8d-9e2e-a3dc419fa965.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:75:bd:1f:19:57:07:5c:9f:e6:f4:23:9c:68:26:74:36:35:
         28:db:7b:f8:3a:6c:32:23:70:32:ed:8e:2a:51:1f:34:70:35:
         7a:0e:bb:56:fd:57:0b:c7:8a:ea:1f:2c:b7:5c:d1:d2:21:8c:
         4a:24:a8:36:d2:29:d7:65:ef:fa:b5:c8:4d:30:b5:0f:88:f0:
         8a:fa:23:32:19:d7:8f:71:4a:60:af:69:c4:04:e6:d7:4f:b7:
         09:60:09:60:b0:d0:50:fe:b9:b4:a3:f0:d3:0a:3c:5b:35:2f:
         4b:44:a2:40:36:da:a6:73:0c:ab:3a:56:55:ba:47:82:c4:eb:
         09:60:66:59:58:12:b9:7b:e4:fe:09:23:4b:66:89:f4:ef:28:
         90:0f:6d:3e:3a:76:3b:18:50:c4:b7:96:d4:40:ff:6f:d4:f8:
         3f:29:27:af:92:d3:ae:e6:dd:e5:7d:d1:e5:f3:64:9d:c6:34:
         e5:ad:5a:b4:72:07:1b:93:87:94:af:82:16:ec:76:d7:e7:37:
         9e:37:c6:4a:a2:c8:5f:cf:03:d6:0f:78:b4:80:5b:04:f1:83:
         07:76:42:53:14:79:de:47:b2:ea:7a:09:70:32:36:66:f8:ac:
         43:7e:f0:17:74:e3:b2:eb:c1:74:70:bb:58:87:fe:37:fd:d2:
         dc:db:45:ff
-----BEGIN CERTIFICATE-----
MIIGxjCCBa6gAwIBAgIUAQ0Mn0MoWEMPWJpKBCAaUTwFw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA3ZTgzYjEtYzgyZS00YjhkLTllMmUtYTNkYzQxOWZh
OTY1MB4XDTIzMDgzMDIwMDc1MVoXDTI1MTIwMjIxMDc1MVowPTE7MDkGA1UEAxMy
ZmNiMjBmNTk2NjZjYzNkMmViMmYwOWI0MmQ0NDU2MGY5NjJmODA0ZDAwMzJjNDg2
YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pEDJQr3U2p/I2WHG
IW3yCcOKK5lKFB0WV7NsogiVhgFNHI6H1Eqfh//yF9HV8cHyZ8LpJ7glcwck/VX9
q35ciReM4nQ+n8AiXEIMb8IkILty/A/YK6hZRV5WyL0OOxQc41F2B1pKP+kUK5AP
3wSisoxn7swF5YoJ6/2BCEubPmxnx9HnGS10GfFWCValCOWj68X+d9P81Q6WTXSF
+ji73rFIz8wKhGkhdQAKpkDPDB4qrR4MN8Ajst9NZZ5kPyTg3RQugkHDSQdU5Wbn
Sj3m4UOSaJxqQxJA+URvj8YvsrkF43eGyffL00tG+Hkaex01Ct+5TCSDsgq5/b/X
egffAgMBAAGjggPKMIIDxjAdBgNVHQ4EFgQU7xPCE3hGZNRoQRlhSyr1hTCghMUw
ggEiBggrBgEFBQcBCwSCARQwggEQMFMGCCsGAQUFBzAFhkdyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4OWUwMmU4YjAxOGE0ODBl
YzcxNTc5OWEvMDCBgAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u
ZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg5ZTAyZThiMDE4YTQ4MGVjNzE1Nzk5YS8w
L0VGMTNDMjEzNzg0NjY0RDQ2ODQxMTk2MTRCMkFGNTg1MzBBMDg0QzUubWZ0MDYG
CCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlv
bi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1kZmRm
LTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA3ZTgzYjEtYzgyZS00YjhkLTllMmUt
YTNkYzQxOWZhOTY1LzgwN2U4M2IxLWM4MmUtNGI4ZC05ZTJlLWEzZGM0MTlmYTk2
NS5jcmwwHwYDVR0jBBgwFoAU7XUP3GiONy9mK/FWTCjE3HdFBZIwDgYDVR0PAQH/
BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1i
OTBkLTNiYzdhNWZlYjgyYi84MDdlODNiMS1jODJlLTRiOGQtOWUyZS1hM2RjNDE5
ZmE5NjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClXCYAwQAzcRi
MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmbkAgMGGmIwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA6XW9HxlX
B1yf5vQjnGgmdDY1KNt7+DpsMiNwMu2OKlEfNHA1eg67Vv1XC8eK6h8st1zR0iGM
SiSoNtIp12Xv+rXITTC1D4jwivojMhnXj3FKYK9pxATm10+3CWAJYLDQUP65tKPw
0wo8WzUvS0SiQDbapnMMqzpWVbpHgsTrCWBmWVgSuXvk/gkjS2aJ9O8okA9tPjp2
OxhQxLeW1ED/b9T4Pyknr5LTrubd5X3R5fNkncY05a1atHIHG5OHlK+CFux21+c3
njfGSqLIX88D1g94tIBbBPGDB3ZCUxR53key6noJcDI2ZvisQ37wF3TjsuvBdHC7
WIf+N/3S3NtF/w==
-----END CERTIFICATE-----
Generated at Wed Aug 30 21:29:18 2023 by rpki-client on console-ams.rpki-client.org