Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9.cer
File:                     eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9.cer (raw, json)
Hash identifier:          uQVs6wI3IDYGZxKSqwRRaNEqAOdSNR3H3mjFVZJv69k=
Subject key identifier:   F1:BE:EF:BC:B2:D2:57:EE:45:C5:9C:C2:43:2F:52:8E:29:C0:2A:E8
Authority key identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
Certificate issuer:       /CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Certificate serial:       010D0C9F432858402B8AEF36D0DCE44AF85534C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/F1BEEFBCB2D257EE45C59CC2432F528E29C02AE8.mft
caRepository:             rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Thu 08 Dec 2022 20:11:05 +0000
Certificate not after:    Wed 12 Mar 2025 19:11:05 +0000
Subordinate resources:    AS: 926
                          AS: 1018
                          IP: 23.132.184.0/23
                          IP: 128.254.204.0/22
                          IP: 192.138.210.0/23
                          IP: 192.209.62.0/23
                          IP: 216.73.156.0/22
                          IP: 2606:b940::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2b:8a:ef:36:d0:dc:e4:4a:f8:55:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
        Validity
            Not Before: Dec  8 20:11:05 2022 GMT
            Not After : Mar 12 19:11:05 2025 GMT
        Subject: CN=eecf847d7a0b968769985612456c69a89c52a4d0f1d05fd4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:7b:06:75:a8:c2:74:42:1d:e6:82:35:ef:
                    76:29:d7:be:cf:d6:f9:64:6c:f2:ca:31:ed:59:ad:
                    55:d9:51:f8:dd:eb:e2:cb:14:5b:3c:00:f8:97:2f:
                    6c:17:aa:5f:23:59:31:b5:c4:39:b5:0d:64:a6:df:
                    fb:78:4a:1b:1c:9c:0d:27:9b:f2:26:a9:bd:a9:47:
                    ef:70:8d:b2:f8:15:d3:85:1f:28:68:7a:73:ff:dc:
                    7b:9e:a9:ff:4c:41:a2:e6:b5:0b:2d:9c:31:20:bc:
                    21:ba:39:44:3f:f4:f7:22:d1:df:93:a4:a1:ee:68:
                    ab:d1:55:cb:d5:78:12:f4:6a:1f:ec:99:82:6e:17:
                    0e:01:d1:b4:c9:60:b6:76:9c:35:a2:fe:25:d7:3d:
                    cb:9d:f8:90:02:b2:34:12:8a:8e:c4:74:5d:96:dd:
                    b8:91:87:90:a7:b7:db:87:89:e1:61:aa:b6:fd:b8:
                    06:5b:fd:47:b7:2f:b2:90:f4:8f:dc:c9:f6:f6:46:
                    7b:82:1b:ea:87:33:64:76:02:e9:5f:4f:f7:f6:24:
                    2c:aa:de:d5:7c:68:2d:52:9c:f3:61:d4:43:65:2f:
                    35:aa:f4:c0:2a:73:c8:00:81:5c:23:09:e1:9b:7a:
                    39:9e:39:82:74:ff:dc:5f:e6:d5:5e:85:b5:18:f0:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:EF:BC:B2:D2:57:EE:45:C5:9C:C2:43:2F:52:8E:29:C0:2A:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/F1BEEFBCB2D257EE45C59CC2432F528E29C02AE8.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/23
                  128.254.204.0/22
                  192.138.210.0/23
                  192.209.62.0/23
                  216.73.156.0/22
                IPv6:
                  2606:b940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  926
                  1018

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:92:a6:b4:ba:2a:b8:01:9a:e1:f1:7e:64:c6:33:8e:22:81:
         31:cc:67:59:f4:e0:ea:c8:36:60:1f:54:a7:79:59:0a:8d:67:
         21:4c:76:1e:47:89:31:60:89:02:1b:3e:f8:3b:89:e5:6b:4f:
         e9:4b:23:1c:0b:77:12:e1:6b:43:ee:25:2f:ed:9a:ee:c3:69:
         31:22:d8:aa:57:65:7a:f9:c1:a1:d9:62:1b:98:d0:f2:12:1d:
         4a:88:72:2c:8c:bc:3f:03:f2:be:31:60:ee:69:03:e5:c0:0c:
         10:1d:ab:4d:1c:09:db:8f:41:58:bd:57:05:44:25:b9:27:44:
         8b:58:53:55:b8:b5:f2:9f:34:c0:e4:4b:68:35:bf:11:d3:f8:
         61:50:b9:31:84:bf:49:c5:bc:e3:59:d8:fe:3e:4c:a2:5f:58:
         d1:e5:29:c7:f4:1a:ee:7d:00:39:6f:3e:87:5f:17:54:3a:9e:
         c8:61:b9:b7:13:e6:90:51:a3:f9:c8:ea:8c:73:50:36:46:39:
         88:89:33:37:0d:0f:55:cb:75:53:24:5c:87:37:16:c7:48:9d:
         dd:3c:f3:e9:ea:91:bc:98:89:a3:94:72:1a:32:7d:c0:07:56:
         9a:16:c0:9b:2c:8c:0a:33:ac:c7:47:7d:0d:78:27:12:24:8d:
         76:3f:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org