Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
File:                     6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer (raw, json)
Hash identifier:          pLMCR7x00lpUwg65B22qnpl3pkuSGfJzAmyFYfNbWWQ=
Subject key identifier:   7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority key identifier: E9:63:D1:A6:96:D6:6D:DE:9E:7A:BB:1E:77:9D:47:BE:38:69:3A:12
Certificate issuer:       /CN=b685cc2d-e74d-4908-8af0-8f3ee48d8d20
Certificate serial:       010D0C9F43285842B0459C43FB9FA26350FAA4A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 18:47:47 +0000
Certificate not after:    Wed 29 Oct 2025 18:47:47 +0000
Subordinate resources:    AS: 398861
                          IP: 199.48.176.0/21
                          IP: 208.52.128.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:45:9c:43:fb:9f:a2:63:50:fa:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b685cc2d-e74d-4908-8af0-8f3ee48d8d20
        Validity
            Not Before: Jul 27 18:47:47 2023 GMT
            Not After : Oct 29 18:47:47 2025 GMT
        Subject: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:85:9f:57:be:9e:3b:bb:c4:d5:06:e5:5f:
                    26:7e:53:4d:06:8b:8b:47:22:8a:6e:9d:c7:f2:65:
                    86:74:64:09:85:64:96:16:60:43:4c:a2:be:05:6c:
                    fc:ed:85:25:93:d4:2a:10:f7:14:13:68:41:3a:1c:
                    34:70:93:4a:6b:06:59:7e:5b:32:c6:9d:d5:9d:f0:
                    c6:3a:89:2a:5c:6c:0d:33:86:08:a6:c6:68:b7:24:
                    7d:1c:99:1f:56:47:2d:d1:ba:c5:da:f7:5c:fa:14:
                    e1:de:bd:07:af:e8:46:a0:6c:6c:b1:2d:03:6b:ba:
                    2a:4f:4e:ac:a9:17:66:a8:1d:10:4f:e7:c4:83:88:
                    7f:97:e5:76:bf:97:ac:4a:11:4e:75:54:3d:af:d9:
                    86:68:05:a5:08:99:57:b1:0e:56:4f:08:1a:09:5b:
                    9f:af:ac:90:73:bc:4a:df:25:a8:3b:e6:13:3f:75:
                    bc:e9:ab:b3:31:2f:63:7b:df:32:ed:98:4a:c6:f6:
                    c3:35:16:c5:df:85:1d:42:0b:66:3d:9c:fc:6e:a5:
                    51:ec:aa:cb:fe:93:27:cb:36:15:fe:b7:f1:ee:60:
                    1d:09:03:03:fb:6e:68:b2:31:0a:4d:a4:bb:89:dd:
                    ac:56:68:27:a7:8e:bf:c3:0d:cd:06:b2:08:d2:d9:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/b685cc2d-e74d-4908-8af0-8f3ee48d8d20.crl

            X509v3 Authority Key Identifier:
                keyid:E9:63:D1:A6:96:D6:6D:DE:9E:7A:BB:1E:77:9D:47:BE:38:69:3A:12

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.176.0/21
                  208.52.128.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398861

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1f:d5:ab:ba:ed:dd:1e:1d:e3:dc:18:c6:bc:e7:49:55:46:
         ef:64:ab:12:c0:46:f2:58:6f:47:17:47:76:1a:e7:70:a1:64:
         25:4c:97:3f:9e:81:ba:96:ce:be:c7:2e:0f:b8:21:29:d2:92:
         f5:cc:96:87:69:03:fd:df:14:a0:9a:0a:74:b8:67:80:59:7c:
         00:2a:38:20:45:57:32:1c:aa:20:b4:b4:8a:1c:e0:34:40:40:
         fe:98:4d:98:b8:c7:31:b2:dc:1e:7b:cd:1b:bf:f6:67:c7:76:
         f5:46:d2:91:f7:e3:fe:a5:b8:a5:98:79:3a:c0:49:33:9a:8a:
         9e:1c:42:43:8c:f6:de:73:f3:75:83:b8:20:5d:ef:15:dc:04:
         a5:23:e3:89:72:a8:06:41:4e:7c:3d:6a:23:1c:8e:7d:a0:a3:
         4f:e9:8b:8f:cd:0e:1a:9b:da:bb:4d:28:15:8a:df:9c:32:4f:
         6b:a4:f4:ed:f7:97:75:b3:a3:ca:e4:3e:b9:10:ef:ee:a8:f7:
         17:fd:cd:d3:5b:2a:50:33:04:3b:d7:d8:81:47:ad:4a:a5:be:
         9a:f9:bf:f5:f5:66:2a:b6:5d:47:2d:f3:b3:5b:15:7a:75:79:
         7e:2f:88:b5:53:2e:25:eb:82:72:e4:c7:11:26:7a:55:82:c9:
         f6:e0:94:01
-----BEGIN CERTIFICATE-----
MIIGwzCCBaugAwIBAgIUAQ0Mn0MoWEKwRZxD+5+iY1D6pKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjY4NWNjMmQtZTc0ZC00OTA4LThhZjAtOGYzZWU0OGQ4
ZDIwMB4XDTIzMDcyNzE4NDc0N1oXDTI1MTAyOTE4NDc0N1owPTE7MDkGA1UEAxMy
NmRhYmQ1MWE0YjlmOWU4ZDA2ZjNkN2RlZGQ2M2M1ZjQ5YzkyMGM4NDNiMmEzNzlk
MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YoWfV76eO7vE1Qbl
XyZ+U00Gi4tHIopuncfyZYZ0ZAmFZJYWYENMor4FbPzthSWT1CoQ9xQTaEE6HDRw
k0prBll+WzLGndWd8MY6iSpcbA0zhgimxmi3JH0cmR9WRy3RusXa91z6FOHevQev
6EagbGyxLQNruipPTqypF2aoHRBP58SDiH+X5Xa/l6xKEU51VD2v2YZoBaUImVex
DlZPCBoJW5+vrJBzvErfJag75hM/dbzpq7MxL2N73zLtmErG9sM1FsXfhR1CC2Y9
nPxupVHsqsv+kyfLNhX+t/HuYB0JAwP7bmiyMQpNpLuJ3axWaCenjr/DDc0GsgjS
2dYJAgMBAAGjggPHMIIDwzAdBgNVHQ4EFgQUfMiv7cE+16Lg+xC7MuDZ/GFsarEw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4OGU4YjkwNzAxODk5OGFk
OGRjMjMwMDUvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4OGU4YjkwNzAxODk5OGFkOGRjMjMwMDUv
MC83Q0M4QUZFREMxM0VEN0EyRTBGQjEwQkIzMkUwRDlGQzYxNkM2QUIxLm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I2ODVjYzJkLWU3NGQtNDkwOC04YWYw
LThmM2VlNDhkOGQyMC9iNjg1Y2MyZC1lNzRkLTQ5MDgtOGFmMC04ZjNlZTQ4ZDhk
MjAuY3JsMB8GA1UdIwQYMBaAFOlj0aaW1m3ennq7HnedR744aToSMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvYjY4NWNjMmQtZTc0ZC00OTA4LThhZjAtOGYzZWU0
OGQ4ZDIwLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA8cwsAMEAdA0
gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGFg0wVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABR/Vq7rt3R4d
49wYxrznSVVG72SrEsBG8lhvRxdHdhrncKFkJUyXP56BupbOvscuD7ghKdKS9cyW
h2kD/d8UoJoKdLhngFl8ACo4IEVXMhyqILS0ihzgNEBA/phNmLjHMbLcHnvNG7/2
Z8d29UbSkffj/qW4pZh5OsBJM5qKnhxCQ4z23nPzdYO4IF3vFdwEpSPjiXKoBkFO
fD1qIxyOfaCjT+mLj80OGpvau00oFYrfnDJPa6T07feXdbOjyuQ+uRDv7qj3F/3N
01sqUDMEO9fYgUetSqW+mvm/9fVmKrZdRy3zs1sVenV5fi+ItVMuJeuCcuTHESZ6
VYLJ9uCUAQ==
-----END CERTIFICATE-----
Generated at Tue Oct 31 14:51:53 2023 by rpki-client on console-fra.rpki-client.org