Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer
File:                     0d32fa67-7158-4437-9e64-f0926c4e4d26.cer (raw, json)
Hash identifier:          7uBDjnq37iZhxCYtL311+dkTGboviKphaOVLis1IzLE=
Subject key identifier:   04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858495D81D263E6D9D9C18FE56B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 31 Mar 2025 00:45:35 +0000
Certificate not after:    Sun 04 Jul 2027 00:45:35 +0000
Subordinate resources:    AS: 399134
                          IP: 52.124.25.0/24
                          IP: 2602:2cf::/36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:81:d2:63:e6:d9:d9:c1:8f:e5:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 31 00:45:35 2025 GMT
            Not After : Jul  4 00:45:35 2027 GMT
        Subject: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c1:fc:96:94:ee:74:45:7b:7a:18:57:34:72:
                    02:29:df:7a:26:a8:cd:89:e4:c5:1e:1a:98:fd:f9:
                    20:3e:c1:51:53:9a:19:89:84:f5:6e:5d:d2:01:66:
                    6e:d6:8d:47:3c:f5:06:ae:fe:0c:63:8d:4e:7d:23:
                    61:0f:3e:a5:47:80:c1:8c:7e:47:8a:ce:3e:b8:98:
                    88:45:d7:ef:a8:8d:fd:01:39:8e:e7:5e:23:6c:d5:
                    7a:b0:ae:c6:69:87:37:ad:b4:16:ce:23:94:82:0e:
                    26:0c:ab:3c:be:97:bb:22:70:42:b6:bf:ab:ab:6d:
                    e4:83:44:25:17:5f:2b:e2:e3:ca:2f:8a:be:50:f0:
                    aa:e4:5a:91:f7:c1:1f:d9:a2:32:ce:fd:4b:f3:35:
                    39:ea:40:d6:de:d5:d2:6d:d6:4e:c0:93:48:f9:42:
                    c8:a4:52:9e:38:3e:b7:ac:2b:69:0e:97:02:78:75:
                    ea:4e:49:82:b8:9e:1e:fa:35:57:f9:a2:1f:54:6a:
                    b9:7f:b4:f3:f3:48:d6:bb:64:f6:2d:3d:8b:d3:1f:
                    dc:fd:e0:0e:e1:18:39:05:c4:1d:5a:11:42:82:be:
                    a2:50:d9:2b:a6:66:13:c6:66:0a:8e:9a:ee:02:86:
                    9c:34:95:8f:93:dc:14:26:f0:79:a0:73:a7:50:32:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.25.0/24
                IPv6:
                  2602:2cf::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399134

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:08:0f:67:18:1d:e0:ab:cf:84:6e:74:02:ca:8a:3a:80:60:
         bc:6d:ad:ef:dc:02:95:04:d6:7f:fa:34:10:6c:b3:f8:3c:ab:
         ae:8a:1b:86:63:7d:7a:bc:a4:c7:88:c6:76:d4:d6:f8:f9:37:
         23:fa:4c:e2:a3:57:8a:c9:af:49:80:07:b2:05:14:c3:f8:0c:
         b2:73:51:a2:f1:bf:9f:1a:e4:96:7f:bd:62:d6:07:3b:77:c2:
         88:df:1d:de:1e:b5:0b:5c:03:10:f2:4c:e6:d7:ea:f0:10:9a:
         4e:74:66:36:be:de:6e:41:d0:db:5e:86:76:df:d6:4d:d7:2f:
         55:42:bb:07:ec:8b:7b:fd:5e:15:a9:5f:19:ba:9e:65:e1:9b:
         13:08:c4:8a:f1:73:fe:8c:9c:17:07:32:22:96:7a:f8:c5:d5:
         10:52:4f:c1:66:f8:dc:fc:ed:56:b6:f1:6c:61:56:6d:68:0c:
         a1:c5:4a:53:48:db:cf:c0:54:b0:71:ad:f1:3a:0d:3b:a4:48:
         0d:58:2b:8f:71:b3:02:38:40:79:7c:4e:fa:b5:66:cb:52:d3:
         de:95:fe:cc:cc:99:ce:24:fe:c3:31:42:5c:a4:b5:f8:30:06:
         50:f8:08:72:c4:ce:77:b6:a7:4f:d7:18:6a:1f:46:71:99:cc:
         94:3f:0a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:51 2025 by rpki-client on console.sobornost.net