Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
File:                     20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer (raw, json)
Hash identifier:          xL1XS3a5KhytoV1FOR/tczzUxlVbFOPAy5e/SDOAybM=
Subject key identifier:   54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858497C375772E898846DCC22FAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 00:45:34 +0000
Certificate not after:    Thu 15 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 14004
                          AS: 33387
                          IP: 63.141.224.0/19
                          IP: 74.91.16.0/20
                          IP: 107.150.32.0/19
                          IP: 142.54.160.0/19
                          IP: 192.151.144.0/20
                          IP: 192.187.96.0/19
                          IP: 198.204.224.0/19
                          IP: 199.168.96.0/21
                          IP: 2604:4300::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:37:57:72:e8:98:84:6d:cc:22:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 11 00:45:34 2025 GMT
            Not After : Jul 15 00:45:34 2027 GMT
        Subject: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:3c:42:46:4a:f8:8a:fe:39:12:c8:18:3b:
                    6e:b0:8c:e6:12:46:7b:37:6b:c4:a4:86:35:7c:66:
                    b7:f5:9b:a1:4c:df:b7:f0:39:62:01:8d:e0:fe:b7:
                    e8:39:5a:c0:fd:23:2d:bf:7d:0e:8a:bc:87:05:9d:
                    ff:63:32:35:c7:2f:69:77:0a:ed:be:42:2d:05:68:
                    8f:9c:cc:e2:a4:59:a6:13:3a:00:86:ab:37:ea:46:
                    59:dd:88:92:db:d1:ec:37:7e:e4:de:c1:91:4f:8d:
                    ec:33:e6:7e:5b:82:60:b2:70:a1:2c:41:54:30:89:
                    92:26:ce:6e:c0:18:c6:50:24:c9:ba:4f:b3:e6:17:
                    65:0a:c6:0a:ca:2b:06:a4:db:2a:92:60:4f:8d:af:
                    3c:a2:a9:d6:31:38:ac:ec:c8:71:fe:ee:9a:53:d1:
                    60:fa:4d:59:98:7c:a8:8d:8d:d1:96:55:33:3a:eb:
                    2e:89:1f:58:28:b3:a7:25:06:09:11:5a:8b:a1:1e:
                    c4:81:8f:45:b3:dc:49:3f:61:39:d6:a1:da:5c:74:
                    4e:f8:93:0a:0d:dc:f9:c5:65:e5:87:75:26:a4:27:
                    67:0a:13:d2:c5:39:65:12:e0:a0:c7:8d:fe:31:3d:
                    bb:4b:f6:5d:40:b0:2b:86:28:75:f7:11:6c:39:d0:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.224.0/19
                  74.91.16.0/20
                  107.150.32.0/19
                  142.54.160.0/19
                  192.151.144.0/20
                  192.187.96.0/19
                  198.204.224.0/19
                  199.168.96.0/21
                IPv6:
                  2604:4300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14004
                  33387

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:3d:07:89:eb:2b:75:09:30:5e:d4:df:f9:46:31:f2:c1:
         39:52:24:95:c9:03:cc:b5:5e:4c:3b:82:9d:0b:66:44:5f:5f:
         cc:06:26:3f:f2:66:d7:66:77:37:1b:3e:f8:0f:3c:56:e5:41:
         89:43:bc:8f:80:78:d6:59:c4:a6:6b:df:5f:c4:a4:8f:c9:56:
         9e:1f:cd:31:e6:fd:2f:72:c8:50:98:c3:5a:6a:59:f6:a2:52:
         ad:55:94:e2:2a:b8:b1:53:da:86:c9:10:ce:7f:04:6f:37:01:
         bc:fa:8d:99:6b:00:9c:2f:04:16:c3:0e:ce:dc:64:6d:5c:40:
         04:f4:51:54:88:b2:24:e8:62:2e:90:cd:61:ce:19:12:b6:b8:
         58:21:01:61:0c:89:21:e7:fb:8a:7a:7d:3d:28:e8:62:32:e6:
         87:81:20:a6:4d:58:2c:65:bf:59:be:96:e8:07:92:16:6b:9f:
         b3:2c:fb:d8:9b:60:c2:a2:4e:96:7a:37:76:9a:9b:f8:f0:f5:
         58:c0:e3:d0:93:10:79:88:86:94:5c:d9:05:b1:99:48:64:74:
         c8:c0:ac:ee:26:45:7e:86:84:7c:72:0b:23:b0:8a:25:bc:4d:
         6c:74:28:77:3d:57:dc:66:b9:fc:59:77:89:99:5a:17:68:2f:
         66:e1:28:01
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEl8N1dy6JiEbcwi+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI1MDQxMTAwNDUzNFoXDTI3MDcxNTAwNDUzNFowLzEtMCsGA1UEAxMk
MjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhjYzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+c8QkZK+Ir+ORLIGDtusIzmEkZ7N2vEpIY1
fGa39ZuhTN+38DliAY3g/rfoOVrA/SMtv30OiryHBZ3/YzI1xy9pdwrtvkItBWiP
nMzipFmmEzoAhqs36kZZ3YiS29HsN37k3sGRT43sM+Z+W4JgsnChLEFUMImSJs5u
wBjGUCTJuk+z5hdlCsYKyisGpNsqkmBPja88oqnWMTis7Mhx/u6aU9Fg+k1ZmHyo
jY3RllUzOusuiR9YKLOnJQYJEVqLoR7EgY9Fs9xJP2E51qHaXHRO+JMKDdz5xWXl
h3UmpCdnChPSxTllEuCgx43+MT27S/ZdQLArhih19xFsOdBZ6wIDAQABo4IEWDCC
BFQwHQYDVR0OBBYEFFSbIRdyuS3sPV1igQpsz/enYkNNMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y
MGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwYzRhZjc5LWNkY2YtNDY0MC1h
YjRlLWYwZjMzNjQ4Y2M1NS8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0
OGNjNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwWAYIKwYBBQUH
AQcBAf8ESTBHMDYEAgABMDADBAU/jeADBARKWxADBAVrliADBAWONqADBATAl5AD
BAXAu2ADBAXGzOADBAPHqGAwDQQCAAIwBwMFACYEQwAwHgYIKwYBBQUHAQgBAf8E
DzANoAswCQICNrQCAwCCazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkwD0HiesrdQkwXtTf+UYx8sE5UiSV
yQPMtV5MO4KdC2ZEX1/MBiY/8mbXZnc3Gz74DzxW5UGJQ7yPgHjWWcSma99fxKSP
yVaeH80x5v0vcshQmMNaaln2olKtVZTiKrixU9qGyRDOfwRvNwG8+o2ZawCcLwQW
ww7O3GRtXEAE9FFUiLIk6GIukM1hzhkStrhYIQFhDIkh5/uKen09KOhiMuaHgSCm
TVgsZb9ZvpboB5IWa5+zLPvYm2DCok6Wejd2mpv48PVYwOPQkxB5iIaUXNkFsZlI
ZHTIwKzuJkV+hoR8cgsjsIolvE1sdCh3PVfcZrn8WXeJmVoXaC9m4SgB
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:42 2025 by rpki-client on console.sobornost.net