Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
File:                     d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer (raw, json)
Hash identifier:          3VDtKunHJBrZgmlNycvRzpDQb0rwzoopc59RJQyfkFI=
Subject key identifier:   2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285849604C816C9C339587D1CE1100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Apr 2025 00:45:34 +0000
Certificate not after:    Mon 05 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 393669
                          IP: 192.67.188.0/24
                          IP: 192.234.129.0 -- 192.234.134.255
                          IP: 208.83.39.0/24
                          IP: 2620:127:6000::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:4c:81:6c:9c:33:95:87:d1:ce:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  1 00:45:34 2025 GMT
            Not After : Jul  5 00:45:34 2027 GMT
        Subject: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:8a:6a:d9:66:fd:dc:10:84:ab:79:79:df:
                    2b:40:2a:ee:44:d5:b4:79:f1:bb:c8:46:ce:70:8c:
                    a4:59:8b:24:5b:39:4a:f5:dd:4d:42:d6:6d:ee:d5:
                    ed:6f:3e:0a:83:ed:af:f2:1b:21:58:5d:a3:ac:d1:
                    34:29:d6:99:0b:9a:c2:02:f8:7a:be:51:d4:da:ae:
                    0f:38:23:2f:1b:52:30:62:7a:9d:24:00:17:37:15:
                    26:e1:24:4b:3c:63:c5:68:16:d5:27:62:a5:b7:39:
                    be:92:a3:f1:ab:75:25:6c:b0:e6:1b:99:d8:61:4d:
                    13:74:1d:de:49:7c:d1:2a:14:67:ea:e5:e2:3d:b7:
                    41:37:9c:ac:ce:e6:69:89:4d:0b:f3:f0:6d:97:e6:
                    1f:59:7e:5b:4d:b5:3f:55:89:de:9a:84:6c:9f:8b:
                    08:1c:c9:cb:ae:54:0d:df:cb:c9:a0:e3:1b:c5:9a:
                    aa:57:b1:e7:a8:3f:08:3f:48:fc:e1:9a:4f:4f:3d:
                    96:ed:e9:40:cb:fa:ae:d0:25:ed:14:cc:f9:fd:9d:
                    e1:7e:18:01:05:e4:94:ac:6b:0f:a5:d4:06:dd:0e:
                    a4:55:18:c9:c2:4d:fe:77:b7:c6:04:f7:5b:5b:24:
                    50:ad:1b:cb:4b:71:99:39:a0:06:9e:fb:e0:4d:26:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.188.0/24
                  192.234.129.0-192.234.134.255
                  208.83.39.0/24
                IPv6:
                  2620:127:6000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393669

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:60:c2:fd:91:49:87:1d:70:10:44:65:c3:68:65:0f:bc:60:
         79:d0:fe:99:3f:80:bb:4d:37:25:af:d0:0c:71:3a:ab:8a:4e:
         4a:ab:a5:59:da:f5:02:39:41:4e:3f:8b:03:20:67:57:23:51:
         b8:b0:55:54:78:5e:f1:a6:af:85:d2:31:cc:0e:70:cf:ae:d9:
         ff:f8:3f:76:11:0b:91:db:f9:68:3c:03:e3:d0:89:9a:19:2b:
         72:d8:60:57:e5:07:e2:39:fd:8e:08:65:aa:a2:c5:8d:13:21:
         f6:d1:2d:72:21:f2:c7:69:8b:b6:2f:c0:80:df:c1:f8:11:f5:
         50:97:1e:34:9a:57:b8:df:87:08:ab:3b:43:ef:26:83:b6:66:
         b2:7e:39:78:9a:da:48:10:94:e8:34:97:7e:e4:84:04:e7:ba:
         6a:88:3f:5f:db:ff:7d:2f:69:2d:0c:09:b7:d3:50:ea:65:fe:
         03:79:aa:7f:83:0d:3b:a5:d5:cb:ad:26:b2:4a:59:c3:66:43:
         b1:66:4d:fc:07:d9:ab:1c:78:9b:ad:9b:39:a9:c7:a2:dc:44:
         f4:88:0d:d1:83:9b:f8:04:52:3c:01:75:5d:7b:43:97:61:ef:
         ec:24:c3:82:e0:ac:a5:9c:e2:08:5b:e5:9f:1b:57:78:01:71:
         5c:1f:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:12 2025 by rpki-client on console.sobornost.net