Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
File:                     8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer (raw, json)
Hash identifier:          W7cxHmsIsB1LIE9U5aKhP6YvfTI3uT1yvCU1tYCtqX0=
Subject key identifier:   DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285849622469424BAF2364377B05D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Apr 2025 16:36:24 +0000
Certificate not after:    Wed 22 Apr 2026 16:15:45 +0000
Subordinate resources:    AS: 20259
                          IP: 169.224.232.0/21
                          IP: 199.5.137.0/24
                          IP: 208.82.68.0/22
                          IP: 209.71.48.0/20
                          IP: 2604:440::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:62:24:69:42:4b:af:23:64:37:7b:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  1 16:36:24 2025 GMT
            Not After : Apr 22 16:15:45 2026 GMT
        Subject: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:9d:68:38:04:32:6f:02:55:4b:af:3b:be:
                    24:3d:d9:64:d4:11:7f:a9:23:71:9a:43:d3:8f:64:
                    4f:1c:1a:81:37:16:a2:82:47:8e:78:c3:a8:ef:af:
                    48:30:a4:f6:1d:28:7d:e6:0b:98:6d:5b:75:34:4c:
                    4f:de:d8:8c:f0:aa:64:1e:4d:8a:d0:2d:84:77:ca:
                    47:28:fd:82:4b:71:ae:01:d2:af:3a:52:a7:ac:67:
                    9f:2e:ee:30:12:e9:a2:74:4c:5e:d5:6a:d7:e4:e7:
                    c7:52:fb:82:65:29:2a:ce:2f:44:07:ef:10:03:ae:
                    68:7d:db:3b:c7:5c:a3:18:17:f2:c1:cf:37:fa:70:
                    0c:6b:0f:bf:23:49:8e:2b:27:14:3b:34:79:3f:7c:
                    0d:8a:90:77:9e:07:85:39:6e:3b:04:50:74:d6:db:
                    db:66:42:33:d1:cc:c2:38:e3:28:5e:a8:97:43:29:
                    8c:9d:53:f2:39:ca:e4:ed:fd:06:2b:70:78:6f:34:
                    e4:3f:0b:dd:c0:8e:9e:09:a4:07:60:c3:4d:a7:d2:
                    63:3a:16:d7:3e:57:f6:43:13:e2:45:ff:74:a3:3f:
                    ca:18:31:22:13:f9:63:c4:8d:a4:f9:b1:b0:6d:44:
                    e4:ac:48:58:f9:e0:bb:d6:f3:eb:4e:28:df:f4:a5:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.232.0/21
                  199.5.137.0/24
                  208.82.68.0/22
                  209.71.48.0/20
                IPv6:
                  2604:440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20259

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:b9:cb:b3:76:88:3e:f2:f5:c2:1e:02:0f:2d:d4:65:7f:
         6a:37:14:6b:90:fc:2b:e5:cd:6c:69:fa:b2:44:6d:d6:cf:e2:
         82:cc:48:d3:1e:33:65:a2:6d:ba:5c:ef:80:1e:92:a7:5d:40:
         6c:0d:dc:01:89:e5:4c:01:08:b8:36:ce:6d:aa:f2:0a:ce:6c:
         ff:5c:4c:f4:3b:08:ba:eb:c9:e8:ee:dc:d3:5e:7a:5e:20:a8:
         fe:c6:c6:b1:5e:2a:11:b0:32:eb:47:aa:2e:e1:6a:c8:3d:ee:
         81:43:ec:5a:14:2c:8d:8b:02:54:12:a2:78:e4:b0:8c:b0:53:
         5e:57:98:ff:c2:50:13:58:2c:8d:1b:8c:82:6d:6f:75:13:4e:
         d7:e5:96:fb:39:7d:6f:1f:60:3e:7d:a5:7e:7f:c4:55:bc:c3:
         cb:86:03:e3:c5:b8:ea:76:8e:a5:5e:e3:93:26:58:39:cf:c7:
         fa:94:d2:be:89:30:d9:7f:8a:f3:53:6c:82:c4:70:fd:d5:e1:
         1f:54:02:d2:8a:32:7c:2a:c0:9b:a5:f2:83:36:4c:52:ef:70:
         e9:df:4c:56:a0:05:6b:2c:c3:af:1c:97:33:ce:cb:b0:7f:0f:
         c4:92:1e:06:f4:a3:16:7a:ad:45:f3:68:bd:57:fe:c1:eb:8a:
         d0:81:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:08 2025 by rpki-client on console.sobornost.net