Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/379d7d2e-97df-4b6d-bd09-486d03760fec.cer
File:                     379d7d2e-97df-4b6d-bd09-486d03760fec.cer (raw, json)
Hash identifier:          B6SYAMQzUPFUCAJa4InjIFv8kTrHNmwBqUAC/6g0K1c=
Subject key identifier:   74:F6:4A:70:79:19:10:27:25:A3:76:27:CA:90:DA:DA:1E:42:49:B0
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858496B773AFA135E458133EABAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/379d7d2e-97df-4b6d-bd09-486d03760fec/379d7d2e-97df-4b6d-bd09-486d03760fec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/379d7d2e-97df-4b6d-bd09-486d03760fec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 05 Apr 2025 00:45:33 +0000
Certificate not after:    Fri 09 Jul 2027 00:45:33 +0000
Subordinate resources:    AS: 29727
                          IP: 23.156.208.0/24
                          IP: 2604:c5c0::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:77:3a:fa:13:5e:45:81:33:ea:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  5 00:45:33 2025 GMT
            Not After : Jul  9 00:45:33 2027 GMT
        Subject: CN=379d7d2e-97df-4b6d-bd09-486d03760fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:fa:7a:11:98:85:6b:1b:f6:3c:0f:4d:e9:
                    b2:c2:d8:f2:ca:6d:22:d1:37:b3:ae:e2:e8:a5:c7:
                    4d:34:25:1a:bc:77:6a:80:e7:15:18:39:85:d6:1b:
                    af:b1:1f:c4:c6:31:0e:dc:26:cb:c9:cf:d9:e8:1f:
                    ed:12:d0:38:bc:3b:64:2b:d2:f6:06:8f:6d:ab:d5:
                    99:19:75:b7:7b:86:d3:79:57:a7:61:6b:35:17:bc:
                    74:ea:5a:c9:9e:66:fc:c5:22:2c:ab:d3:87:06:90:
                    d7:25:02:3f:dc:d7:ed:6e:d9:73:da:dc:60:76:4c:
                    26:29:93:d0:a5:23:f4:9f:05:39:fa:ac:7c:19:a9:
                    1f:57:bb:5e:ff:85:d1:93:2a:23:ec:f5:cf:4b:ee:
                    4e:a7:9a:57:6a:3f:5b:42:9e:99:99:5d:94:ce:9d:
                    63:f8:4d:b4:5d:44:c6:51:a6:ef:7c:7e:26:e4:27:
                    10:fd:af:6e:5d:53:8d:49:04:fe:8e:23:81:57:ff:
                    b5:9f:57:e1:e4:02:ab:94:c8:85:27:c5:45:02:f4:
                    86:8d:98:20:b8:a9:a7:e1:b3:dc:8f:2d:b9:36:00:
                    b4:46:76:30:34:82:f2:ce:3f:50:71:de:fd:5d:52:
                    bf:d8:92:64:f6:a2:09:a2:58:08:56:c4:d7:d9:d2:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:4A:70:79:19:10:27:25:A3:76:27:CA:90:DA:DA:1E:42:49:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/379d7d2e-97df-4b6d-bd09-486d03760fec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/379d7d2e-97df-4b6d-bd09-486d03760fec/379d7d2e-97df-4b6d-bd09-486d03760fec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.208.0/24
                IPv6:
                  2604:c5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:8c:5b:47:e0:86:14:75:18:c4:3f:e8:0a:5c:9d:74:fd:
         04:48:09:da:37:c0:bf:45:d3:14:1c:24:6c:73:bb:5e:e3:3e:
         a7:b3:fa:5f:dc:54:c9:f8:99:a2:20:8d:24:eb:24:ea:94:47:
         a6:65:cb:d8:7e:2f:62:46:8d:f5:c1:cf:97:a4:7a:54:bf:2b:
         5c:9e:e0:35:82:ce:38:fb:c1:3f:c0:9d:3d:d8:18:1c:03:56:
         51:07:fd:8c:1c:69:9e:3c:c6:cd:79:76:f0:d3:bc:9e:ab:b7:
         e6:5d:68:51:b1:75:a5:c9:ae:e0:99:d0:fa:1e:e9:e3:7d:1a:
         f2:e3:88:23:af:5e:eb:02:ec:0e:16:a5:5c:b5:3b:e2:26:e3:
         75:62:17:79:76:27:8b:1f:63:83:db:36:40:5c:bf:57:d7:03:
         0d:cd:15:41:b6:14:ba:8e:58:bc:3e:ee:8d:c9:e3:f6:00:e6:
         9e:ae:70:90:4b:20:6e:9f:91:c5:c6:f7:d9:e8:7d:f6:0d:ce:
         49:f9:45:1e:b2:d0:b9:6a:5e:4f:76:47:36:c5:06:1f:b8:5a:
         9c:57:5b:41:1c:05:ef:77:e9:bf:17:da:58:d4:45:23:4c:99:
         6e:77:0a:f1:e5:a0:96:ee:e9:a6:79:37:d2:b9:4a:33:93:f4:
         db:da:2d:11
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWElrdzr6E15FgTPqusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI1MDQwNTAwNDUzM1oXDTI3MDcwOTAwNDUzM1owLzEtMCsGA1UEAxMk
Mzc5ZDdkMmUtOTdkZi00YjZkLWJkMDktNDg2ZDAzNzYwZmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xb6ehGYhWsb9jwPTemywtjyym0i0TezruLo
pcdNNCUavHdqgOcVGDmF1huvsR/ExjEO3CbLyc/Z6B/tEtA4vDtkK9L2Bo9tq9WZ
GXW3e4bTeVenYWs1F7x06lrJnmb8xSIsq9OHBpDXJQI/3Nftbtlz2txgdkwmKZPQ
pSP0nwU5+qx8GakfV7te/4XRkyoj7PXPS+5Op5pXaj9bQp6ZmV2Uzp1j+E20XUTG
UabvfH4m5CcQ/a9uXVONSQT+jiOBV/+1n1fh5AKrlMiFJ8VFAvSGjZgguKmn4bPc
jy25NgC0RnYwNILyzj9Qcd79XVK/2JJk9qIJolgIVsTX2dL/FwIDAQABo4IEKTCC
BCUwHQYDVR0OBBYEFHT2SnB5GRAnJaN2J8qQ2toeQkmwMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
NzlkN2QyZS05N2RmLTRiNmQtYmQwOS00ODZkMDM3NjBmZWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM3OWQ3ZDJlLTk3ZGYtNGI2ZC1i
ZDA5LTQ4NmQwMzc2MGZlYy8zNzlkN2QyZS05N2RmLTRiNmQtYmQwOS00ODZkMDM3
NjBmZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAAXnNAwDQQCAAIwBwMFACYExcAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICdB8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfqqMW0fghhR1GMQ/6ApcnXT9BEgJ
2jfAv0XTFBwkbHO7XuM+p7P6X9xUyfiZoiCNJOsk6pRHpmXL2H4vYkaN9cHPl6R6
VL8rXJ7gNYLOOPvBP8CdPdgYHANWUQf9jBxpnjzGzXl28NO8nqu35l1oUbF1pcmu
4JnQ+h7p430a8uOII69e6wLsDhalXLU74ibjdWIXeXYnix9jg9s2QFy/V9cDDc0V
QbYUuo5YvD7ujcnj9gDmnq5wkEsgbp+Rxcb32eh99g3OSflFHrLQuWpeT3ZHNsUG
H7hanFdbQRwF73fpvxfaWNRFI0yZbncK8eWglu7ppnk30rlKM5P029otEQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:44 2025 by rpki-client on console.sobornost.net