Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer
File:                     8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer (raw, json)
Hash identifier:          jIC8/awzYA54Ogv/x5t+VfGmTrSJ+g5Pk/uOX2SHOpY=
Subject key identifier:   8F:3A:34:CE:33:4D:F5:49:54:C1:61:0D:F5:F5:B8:33:C6:7E:ED:C5
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584973D74B0A128F4059885F4580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 00:45:34 +0000
Certificate not after:    Mon 12 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 400363
                          IP: 207.167.122.0/24
                          IP: 2606:a1c0::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:d7:4b:0a:12:8f:40:59:88:5f:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr  8 00:45:34 2025 GMT
            Not After : Jul 12 00:45:34 2027 GMT
        Subject: CN=8312a3ad-6ed7-4c70-90af-bc1b5471ce70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e2:af:ec:b9:b7:59:18:67:ef:d3:35:64:1a:
                    da:11:0e:9d:7c:11:4a:26:a4:d1:dc:25:aa:60:74:
                    71:a2:89:9b:1f:bb:bd:06:49:a6:66:7a:87:f1:25:
                    20:74:1e:7f:88:f8:c2:3b:3c:10:da:d8:39:2d:92:
                    fd:a7:a9:cb:65:be:5c:ae:2f:a0:f1:1e:66:c2:27:
                    f2:1b:6a:c1:78:4a:45:52:94:1a:29:8c:cd:87:ee:
                    69:68:2b:57:c0:dd:83:a7:bb:80:cd:7e:fb:80:4c:
                    60:97:cc:d3:53:ee:0a:b8:ed:52:c4:4f:d1:a4:df:
                    92:6b:80:87:26:87:a3:e6:8d:2b:7e:cc:d3:00:af:
                    b4:ae:7c:f8:c8:c2:27:67:e6:f4:58:70:c2:e2:bf:
                    a6:3c:db:4e:91:35:f4:fa:99:e8:31:38:ff:3b:8b:
                    54:76:a4:9d:1c:d5:c3:3d:25:8d:f7:61:23:16:12:
                    7a:9a:6e:cc:5b:18:16:79:ee:23:e5:ef:34:ab:ca:
                    aa:b8:c1:64:5c:36:33:33:60:5c:e2:59:0c:e2:7d:
                    0a:ab:98:34:36:4b:2e:c7:db:f2:5f:bf:3f:21:5b:
                    87:b3:13:60:41:36:12:49:73:f4:79:91:37:8f:99:
                    a8:e4:28:b9:5b:f3:e7:52:3a:1a:32:08:95:18:71:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:34:CE:33:4D:F5:49:54:C1:61:0D:F5:F5:B8:33:C6:7E:ED:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.122.0/24
                IPv6:
                  2606:a1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:1b:fa:b9:4b:a1:69:dd:d0:99:d1:a8:4a:d3:60:a5:fe:
         82:bc:ef:8e:d9:c6:d7:c1:56:09:e1:3b:34:06:1c:96:12:fd:
         01:44:65:95:f4:2d:2e:e9:5e:15:3f:78:ad:14:07:1c:82:c9:
         a6:97:c7:3b:c5:0a:bb:f4:5e:37:0b:8e:ce:c8:77:27:a4:72:
         c5:e4:4b:2b:1f:97:9b:8c:59:78:d6:e3:be:75:fe:a3:76:57:
         3a:a4:19:f7:73:96:ec:96:53:9b:3f:dc:5e:22:c1:1e:d9:44:
         18:c9:f9:dc:ec:ac:36:dd:c6:fb:ca:60:c2:f4:9e:15:81:1d:
         84:1b:4c:19:f9:b6:8d:61:97:44:f8:c2:6f:1a:2b:58:2f:7f:
         fc:31:18:fe:20:63:58:38:5d:7b:0a:4b:5c:68:ca:22:14:f9:
         9b:2b:07:e3:e9:8d:2e:80:37:39:d6:cb:2a:1c:4a:16:95:2d:
         ef:fa:db:d0:5c:b3:9d:ab:54:4c:91:79:7b:28:7d:54:47:0e:
         09:37:d8:c9:13:5e:4f:2b:7e:4c:a8:6a:87:2b:bb:21:05:18:
         64:01:76:45:45:7b:ec:a8:4d:65:bf:42:dc:b2:4c:9e:aa:b2:
         b9:6b:73:11:4b:c3:91:88:7e:bd:e6:d8:4e:fc:9b:92:ed:57:
         bc:41:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:32 2025 by rpki-client on console.sobornost.net