Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
File:                     cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer (raw, json)
Hash identifier:          wSjlqVIZz+zvMamaipHplcQU87nnyKRJyddElBKBQ0k=
Subject key identifier:   FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584967B3D2ED1262C329463CEBA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Apr 2025 16:24:24 +0000
Certificate not after:    Mon 18 Jan 2027 15:17:29 +0000
Subordinate resources:    AS: 396050
                          AS: 401386
                          IP: 23.135.220.0/24
                          IP: 2602:f7dc::/36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:b3:d2:ed:12:62:c3:29:46:3c:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Apr  3 16:24:24 2025 GMT
            Not After : Jan 18 15:17:29 2027 GMT
        Subject: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:58:77:fc:a6:2a:f0:72:15:0a:78:8d:91:
                    4b:fa:97:0b:8e:4b:66:97:96:58:ed:a3:83:87:c6:
                    0b:26:a3:af:bd:82:bc:0b:12:ee:3f:21:e6:ea:a6:
                    fe:5a:99:d6:0e:fb:c8:27:dd:20:a4:c7:35:ca:b2:
                    8a:80:25:e6:72:1c:5c:7c:e2:c2:3e:00:74:67:02:
                    b6:dc:ee:a0:c2:98:26:7b:2f:0e:72:81:7e:7e:2f:
                    c0:e3:f4:ec:31:28:7d:2f:07:59:3a:70:6f:e1:be:
                    29:c7:c3:f3:e5:de:e4:33:53:75:7a:5c:2a:e1:70:
                    20:ed:84:a9:3c:4d:cf:6f:2e:2f:a2:5f:00:71:18:
                    e8:cb:59:b1:c3:5a:f1:1f:18:fb:6a:54:62:ea:8f:
                    cf:35:34:ac:a8:ef:8c:41:77:63:a3:8e:0d:a5:fa:
                    01:89:e5:ca:9e:cd:08:21:9e:d4:84:06:14:a4:ff:
                    b5:04:6a:93:39:06:de:be:46:17:fd:ee:ea:42:cc:
                    3e:ff:ab:d1:70:4e:3c:5c:48:66:3c:f2:9d:6c:f5:
                    79:45:39:a5:d1:f5:4d:c1:b0:5b:81:57:be:4d:fb:
                    df:54:a2:a4:e1:51:4e:76:38:88:4f:92:61:b2:8d:
                    ae:fe:a5:e9:b1:a8:21:e7:51:ae:4c:0e:26:af:80:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.220.0/24
                IPv6:
                  2602:f7dc::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396050
                  401386

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ed:4f:8d:4b:78:f3:ef:eb:e1:46:be:7c:cd:d7:b3:48:47:
         5d:5f:85:be:df:20:ba:19:37:74:61:ca:05:cd:a6:d0:d9:e0:
         cf:9a:d8:83:54:fd:3d:3b:cf:5e:8b:44:e2:ca:ee:05:36:79:
         2f:06:78:41:60:ac:2f:b4:67:e2:85:df:1f:dd:cb:09:53:7b:
         37:6c:23:14:4f:0c:f6:ca:b9:61:5f:86:d8:5d:88:1e:00:51:
         0e:63:c7:0c:6c:86:e1:22:b7:db:5f:6a:12:21:cd:42:5d:5f:
         7c:96:ee:0b:df:57:d0:7c:d4:1c:09:a2:0c:ca:7d:a6:fa:06:
         50:18:a7:ee:8e:af:e2:ad:b1:32:6c:1e:0b:4e:a2:ac:8d:39:
         0b:a0:af:cd:ea:06:02:2d:60:61:91:40:8b:19:16:26:0b:3c:
         6d:f5:6f:96:e0:2d:31:10:f8:ca:46:e8:5b:3b:a1:be:af:5d:
         91:cc:86:52:cc:05:bc:16:de:fe:95:d5:ae:e8:2f:01:fe:c6:
         a1:9e:10:16:2f:9c:89:71:80:96:64:ef:4c:53:fa:18:e3:35:
         46:6b:00:d4:af:60:7c:1d:14:29:65:81:07:3f:4c:17:24:f7:
         1f:a5:0c:cb:e3:43:49:37:2a:26:10:45:90:19:8b:1f:ab:e0:
         f4:f3:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net