Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
File:                     02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer (raw, json)
Hash identifier:          Bq2SsKTV1IUWfZgCXZpAGi8ZdR/wYAvEHL82qp73VZw=
Subject key identifier:   4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority key identifier: 4F:9C:B0:64:48:90:B8:98:95:7E:EF:1C:79:5E:02:9B:DB:6F:A1:D2
Certificate issuer:       /CN=5a6cd4e3-401f-4f1d-b675-b0d995844039
Certificate serial:       010D0C9F432858400E678B59C487698FCA26CC30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 28 Nov 2022 09:41:20 +0000
Certificate not after:    Sun 02 Mar 2025 09:41:20 +0000
Subordinate resources:    IP: 206.206.64.0/18
                          IP: 216.122.160.0/19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:67:8b:59:c4:87:69:8f:ca:26:cc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6cd4e3-401f-4f1d-b675-b0d995844039
        Validity
            Not Before: Nov 28 09:41:20 2022 GMT
            Not After : Mar  2 09:41:20 2025 GMT
        Subject: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:67:df:c3:cc:ad:9d:ea:50:45:21:8d:c4:
                    3f:d6:cd:b8:62:e9:f6:cb:e5:bf:5d:e8:53:34:0e:
                    9b:78:85:65:a5:07:42:93:fc:0a:af:06:58:50:dc:
                    82:65:30:fb:44:83:66:67:c2:64:28:63:10:71:b3:
                    f9:45:a1:b4:ac:b0:21:b8:99:08:8d:8a:66:30:bd:
                    cd:d0:c0:f8:ea:2d:b8:d2:4f:be:02:75:63:9d:54:
                    d1:51:af:be:db:76:c2:8d:ef:e1:1d:2e:f3:e3:50:
                    59:84:53:f5:13:c0:41:c9:05:16:8d:f8:7c:40:40:
                    ec:c7:ea:d2:d4:5c:e6:ff:89:fc:50:f4:4f:69:e5:
                    a6:c1:c3:88:26:fb:64:29:72:3f:95:d7:e9:bc:03:
                    05:9b:d2:27:b1:86:e1:43:2c:27:af:29:85:65:9b:
                    a4:75:c1:31:e1:bf:da:63:b9:3c:21:f1:57:a2:1f:
                    0d:64:10:ed:6f:a8:e0:90:9f:9b:27:38:74:db:af:
                    78:38:b5:90:75:a0:a7:71:e8:a1:8b:36:be:b7:93:
                    59:ad:f6:f8:2b:66:ea:45:1c:40:3d:a3:d3:6d:90:
                    3b:03:05:ba:2e:36:95:80:c4:c3:ce:e0:45:a9:86:
                    79:f9:c9:db:20:43:3f:68:1e:e9:a1:73:3f:9f:49:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/5a6cd4e3-401f-4f1d-b675-b0d995844039.crl

            X509v3 Authority Key Identifier:
                keyid:4F:9C:B0:64:48:90:B8:98:95:7E:EF:1C:79:5E:02:9B:DB:6F:A1:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.64.0/18
                  216.122.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:ad:9b:d1:6f:28:fe:a2:c4:ab:4c:bf:51:1e:a3:35:f9:
         2f:f8:92:32:83:7b:bc:4a:28:be:60:dc:24:46:c2:e0:97:de:
         e4:d5:26:55:a9:50:85:a9:71:54:30:74:87:83:ec:80:fb:d9:
         5d:a3:24:82:ea:b8:bc:7c:e4:b7:85:7e:37:e1:0f:d3:a4:62:
         73:bc:67:73:4f:b2:6b:04:f8:6d:8c:1e:f0:af:53:0f:68:62:
         df:7f:db:09:4a:ef:8d:eb:f6:b1:6a:30:ce:a0:5e:8c:20:fd:
         00:61:6d:35:f2:c8:8b:f7:91:dd:41:10:ef:8a:20:25:19:80:
         f7:7e:a0:84:4b:60:cc:c3:fd:d5:c6:20:a2:34:c0:4d:ea:f6:
         ba:92:09:97:26:ca:84:a3:88:f9:82:9a:c1:bd:05:ef:a4:ea:
         c4:24:85:af:a8:70:e4:7d:96:ce:bb:87:58:1d:75:4e:dc:dd:
         96:34:50:f5:79:5c:b9:93:33:e1:80:f0:66:f8:38:fb:90:30:
         30:07:8e:60:e1:a5:48:a1:71:02:8a:f4:9f:37:fd:da:46:d8:
         78:1c:1f:36:b4:81:b2:e0:67:08:f7:96:ca:4d:29:64:72:75:
         80:23:f9:54:b0:a0:42:cc:2d:d8:75:9c:27:f9:5f:b3:9d:7c:
         79:97:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:29 2023 by rpki-client on console-ams.rpki-client.org