Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
File:                     e102a5ad-786a-444b-bd0b-6bd116f20466.cer (raw, json)
Hash identifier:          r3zDARJLbWHxVLgsCRo27wWZv8zfFnvFnGlm7EXIObo=
Subject key identifier:   98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858496E41EAA22477C206213380B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 06 Apr 2025 00:45:33 +0000
Certificate not after:    Sat 10 Jul 2027 00:45:33 +0000
Subordinate resources:    AS: 393290
                          IP: 162.223.108.0/22
                          IP: 2604:9d40::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:41:ea:a2:24:77:c2:06:21:33:80:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  6 00:45:33 2025 GMT
            Not After : Jul 10 00:45:33 2027 GMT
        Subject: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:4d:d5:d2:4e:09:e6:08:1b:7d:82:c2:96:
                    17:a3:31:f5:0e:75:4f:71:a2:4a:22:4e:2d:00:8f:
                    2b:95:fb:ba:7c:30:57:58:b8:51:57:fa:fc:fa:c2:
                    1e:d8:53:7d:76:3e:92:1f:89:1e:dd:3e:78:40:20:
                    39:de:ef:6d:27:b7:4f:20:fc:bb:4a:38:dd:18:98:
                    82:50:b3:ac:82:3e:2c:b8:6e:11:9f:19:db:da:9f:
                    1a:91:0e:a7:76:57:6f:de:5c:5b:04:30:f0:10:e3:
                    79:19:f5:cb:ce:bb:de:68:9f:8b:76:29:04:2b:cd:
                    b8:9e:7c:d2:0c:a9:50:6c:aa:f1:90:0c:0e:b7:c4:
                    ac:e5:30:c3:03:65:00:1f:e1:08:a3:d9:81:2c:5c:
                    58:bf:06:a6:a8:12:72:95:91:41:bb:51:5c:ef:a1:
                    0f:56:7c:f1:a6:22:76:ed:d7:77:3c:d9:ff:d4:cd:
                    73:cf:3f:e8:c0:28:6a:46:b3:ed:dd:fe:ab:64:1a:
                    41:d4:b2:2f:5a:88:95:33:c2:6f:24:fc:6b:2f:8a:
                    c0:1a:66:1a:9e:5f:c6:ae:6a:62:80:23:63:9c:2b:
                    70:ae:9c:5a:9b:32:15:ce:6f:be:81:fe:a5:86:ba:
                    f7:bf:a1:a9:da:69:79:54:07:fd:99:01:b7:b1:36:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.108.0/22
                IPv6:
                  2604:9d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393290

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:59:eb:05:f4:c0:0f:f4:5f:11:ea:14:fa:9d:e7:08:e6:7b:
         91:d2:14:8f:f8:b3:62:78:29:06:f0:ee:66:59:41:90:46:bb:
         ad:2d:10:b1:83:ee:48:92:c5:74:d2:26:c5:d2:a0:9c:4d:cf:
         9b:8f:26:76:cf:1f:96:af:5d:6f:a1:dc:5b:70:17:0f:40:1d:
         aa:09:43:e4:f2:b2:67:fe:27:6c:1c:6f:e4:db:4c:89:06:9b:
         11:fb:90:8e:c3:ca:53:9a:93:8c:71:bc:52:68:27:4c:fd:2d:
         8c:12:18:69:f2:cf:3a:ec:92:01:ab:be:01:7b:89:4e:51:99:
         1c:cf:22:52:7b:29:d6:1f:ba:97:6b:e3:4c:ea:df:29:80:61:
         71:83:d2:3b:05:ab:08:ff:97:1a:cb:22:40:20:d1:05:84:2d:
         44:98:be:49:63:53:7d:33:f5:fa:10:9f:f7:2b:0a:ad:ce:da:
         6e:90:e8:dc:03:59:a2:c3:b3:32:09:c8:ab:f8:af:da:df:b5:
         f8:7c:93:14:67:3b:c4:72:0f:db:ec:c1:64:8f:00:d6:de:bd:
         99:91:17:ad:9a:b4:de:b3:ee:17:94:f3:0f:02:df:bb:30:bb:
         b3:7c:77:49:58:c1:2b:35:81:f0:0a:9f:d9:bf:3b:b3:77:ee:
         b3:8d:cb:7d
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEluQeqiJHfCBiEzgLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI1MDQwNjAwNDUzM1oXDTI3MDcxMDAwNDUzM1owLzEtMCsGA1UEAxMk
ZTEwMmE1YWQtNzg2YS00NDRiLWJkMGItNmJkMTE2ZjIwNDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+BN1dJOCeYIG32CwpYXozH1DnVPcaJKIk4t
AI8rlfu6fDBXWLhRV/r8+sIe2FN9dj6SH4ke3T54QCA53u9tJ7dPIPy7SjjdGJiC
ULOsgj4suG4Rnxnb2p8akQ6ndldv3lxbBDDwEON5GfXLzrveaJ+LdikEK824nnzS
DKlQbKrxkAwOt8Ss5TDDA2UAH+EIo9mBLFxYvwamqBJylZFBu1Fc76EPVnzxpiJ2
7dd3PNn/1M1zzz/owChqRrPt3f6rZBpB1LIvWoiVM8JvJPxrL4rAGmYanl/Grmpi
gCNjnCtwrpxamzIVzm++gf6lhrr3v6Gp2ml5VAf9mQG3sTb4NQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFJjrrpiGlPmdurUke0x2md1LorfvMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l
MTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZmMjA0NjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UxMDJhNWFkLTc4NmEtNDQ0Yi1i
ZDBiLTZiZDExNmYyMDQ2Ni9lMTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZm
MjA0NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAKi32wwDQQCAAIwBwMFACYEnUAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBgBKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABdZ6wX0wA/0XxHqFPqd5wjme5HS
FI/4s2J4KQbw7mZZQZBGu60tELGD7kiSxXTSJsXSoJxNz5uPJnbPH5avXW+h3Ftw
Fw9AHaoJQ+Tysmf+J2wcb+TbTIkGmxH7kI7DylOak4xxvFJoJ0z9LYwSGGnyzzrs
kgGrvgF7iU5RmRzPIlJ7KdYfupdr40zq3ymAYXGD0jsFqwj/lxrLIkAg0QWELUSY
vkljU30z9foQn/crCq3O2m6Q6NwDWaLDszIJyKv4r9rftfh8kxRnO8RyD9vswWSP
ANbevZmRF62atN6z7heU8w8C37swu7N8d0lYwSs1gfAKn9m/O7N37rONy30=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:17 2025 by rpki-client on console.sobornost.net