Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
File:                     F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer (raw, json)
Hash identifier:          IFYYaxSigS8U++khJWoV0Zyo1SisGry0HlXZVwz8qF4=
Subject key identifier:   F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5FA9978C245CB13EF26A828958AB85CA4506D109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 04 Apr 2025 21:13:53 +0000
Certificate not after:    Fri 03 Apr 2026 21:18:53 +0000
Subordinate resources:    IP: 202.50.53.0/24
                          IP: 2a06:9f40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a9:97:8c:24:5c:b1:3e:f2:6a:82:89:58:ab:85:ca:45:06:d1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr  4 21:13:53 2025 GMT
            Not After : Apr  3 21:18:53 2026 GMT
        Subject: CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:46:2c:12:4d:f8:72:99:e1:0c:87:77:18:2d:
                    c6:fa:b6:30:85:72:e3:42:8a:c1:9f:51:b5:36:4a:
                    3d:3d:2b:7f:eb:af:9a:9a:bd:5f:f5:fa:73:a1:6e:
                    a5:b9:ee:9b:9b:bd:28:5d:42:1e:ea:8d:45:9c:a5:
                    cc:eb:94:bc:7b:a6:f1:6e:3c:dc:bc:50:c7:7c:88:
                    55:63:f3:fe:8f:47:72:dc:3d:5a:01:39:ad:71:47:
                    65:ab:c8:d1:d0:f3:50:65:e7:33:00:e6:e9:6d:36:
                    c9:f0:62:ae:77:1f:f0:29:0e:3f:68:48:d8:40:fa:
                    21:f0:5c:8d:ec:59:95:c0:2f:fa:84:51:20:82:15:
                    9f:11:d5:e7:ca:c3:06:a5:5f:a3:1c:aa:ab:a5:c1:
                    94:d1:81:a0:ca:62:bc:fb:37:ed:19:e2:6d:6a:27:
                    f7:fd:3b:c2:97:03:cb:5e:d2:c1:3f:b7:95:88:23:
                    f1:1c:b4:cf:da:5f:d4:3c:12:92:79:f8:cc:b2:ed:
                    90:7e:9a:f4:76:31:a1:47:1a:ba:27:a7:aa:7b:bb:
                    cb:d3:2e:3b:cd:75:a7:14:89:44:d8:c2:db:2f:21:
                    75:a7:8b:f3:e4:93:7e:0a:bb:e5:cc:fa:54:74:31:
                    82:47:2e:15:02:aa:3f:e9:e6:3c:29:89:4c:d7:79:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.53.0/24
                IPv6:
                  2a06:9f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:2d:f7:44:0d:ed:37:3b:7e:04:67:f8:17:b7:52:01:b7:
         a0:c4:d3:2c:a5:f0:06:11:47:ab:97:b4:dd:04:a6:1f:8c:57:
         bf:a8:7e:1b:26:4c:56:09:ad:07:51:9c:96:de:c3:20:34:47:
         e0:69:7f:59:0e:5e:19:6f:0c:e6:80:44:9d:16:20:2d:c0:21:
         68:6f:50:6e:8f:bb:e4:33:74:b7:d6:25:2d:48:43:8a:6b:a7:
         9a:42:e3:6c:4b:3c:10:4b:3b:23:99:48:2f:91:cb:19:59:41:
         15:c2:14:45:f8:76:00:34:7e:1b:4c:ed:8f:e3:ef:8c:dc:6e:
         b3:84:5d:38:b1:be:de:5d:0e:e9:d7:46:dc:e6:7e:d9:d2:9f:
         4a:54:12:89:ce:91:c1:e2:cd:99:95:7e:5e:8e:d4:b4:3e:d9:
         90:77:cd:c7:b8:e9:d6:ef:5a:7a:c6:30:f9:bb:71:1f:61:bc:
         96:74:6b:80:b5:31:68:42:ac:50:3b:a9:0b:03:21:de:a5:db:
         90:2e:73:ec:c1:95:59:63:3d:a1:c3:0c:13:3f:ac:c9:58:35:
         a9:0e:b8:8f:41:8d:85:27:f0:00:f1:55:8b:c1:e1:83:87:24:
         3e:6a:6d:da:37:ff:a1:bd:bd:19:f1:bb:c4:28:29:55:a7:6f:
         ac:96:eb:1d
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUX6mXjCRcsT7yaoKJWKuFykUG0QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA0MDQyMTEzNTNaFw0yNjA0MDMyMTE4NTNaMDMxMTAvBgNV
BAMTKEY2MEJGQzIyQ0U1QTNERjU1MURBQkJDQzRDNDhEMkIzRjhDNTZERjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrRiwSTfhymeEMh3cYLcb6tjCF
cuNCisGfUbU2Sj09K3/rr5qavV/1+nOhbqW57pubvShdQh7qjUWcpczrlLx7pvFu
PNy8UMd8iFVj8/6PR3LcPVoBOa1xR2WryNHQ81Bl5zMA5ultNsnwYq53H/ApDj9o
SNhA+iHwXI3sWZXAL/qEUSCCFZ8R1efKwwalX6McqqulwZTRgaDKYrz7N+0Z4m1q
J/f9O8KXA8te0sE/t5WII/EctM/aX9Q8EpJ5+Myy7ZB+mvR2MaFHGronp6p7u8vT
LjvNdacUiUTYwtsvIXWni/Pkk34Ku+XM+lR0MYJHLhUCqj/p5jwpiUzXecBDAgMB
AAGjggLgMIIC3DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2C/wizlo99VHa
u8xMSNKz+MVt9TAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80ZTY1MGI1
NC1hYmM0LTQ0MTgtYWViNi0wODhhNTBkMWQ1ZjEvMC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzRlNjUw
YjU0LWFiYzQtNDQxOC1hZWI2LTA4OGE1MGQxZDVmMS8wL0Y2MEJGQzIyQ0U1QTNE
RjU1MURBQkJDQzRDNDhEMkIzRjhDNTZERjUubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEAMoyNTANBAIAAjAHAwUAKgafQDANBgkqhkiG9w0BAQsFAAOCAQEALigt90QN
7Tc7fgRn+Be3UgG3oMTTLKXwBhFHq5e03QSmH4xXv6h+GyZMVgmtB1Gclt7DIDRH
4Gl/WQ5eGW8M5oBEnRYgLcAhaG9Qbo+75DN0t9YlLUhDimunmkLjbEs8EEs7I5lI
L5HLGVlBFcIURfh2ADR+G0ztj+PvjNxus4RdOLG+3l0O6ddG3OZ+2dKfSlQSic6R
weLNmZV+Xo7UtD7ZkHfNx7jp1u9aesYw+btxH2G8lnRrgLUxaEKsUDupCwMh3qXb
kC5z7MGVWWM9ocMMEz+syVg1qQ64j0GNhSfwAPFVi8Hhg4ckPmpt2jf/ob29GfG7
xCgpVadvrJbrHQ==
-----END CERTIFICATE-----