Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
File:                     d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer (raw, json)
Hash identifier:          gESZaoP/nJl1ZHFDjnZJb+EMseG5L2RQqlOo3sV27Kc=
Subject key identifier:   1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority key identifier: 47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82
Certificate issuer:       /CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785
Certificate serial:       010D0C9F43285849691AD4EA2372A8BBD82A9C70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 04 Apr 2025 04:27:46 +0000
Certificate not after:    Thu 08 Jul 2027 04:27:46 +0000
Subordinate resources:    IP: 64.52.14.0/24
                          IP: 147.189.152.0/23
                          IP: 173.249.188.0/22
                          IP: 176.103.218.0/24
                          IP: 199.7.252.0/22
                          IP: 216.211.208.0/22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:69:1a:d4:ea:23:72:a8:bb:d8:2a:9c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785
        Validity
            Not Before: Apr  4 04:27:46 2025 GMT
            Not After : Jul  8 04:27:46 2027 GMT
        Subject: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:ae:ee:75:a5:73:ed:71:81:c3:f5:a2:d4:
                    b1:37:ac:92:a2:83:df:a9:5b:09:df:ce:df:46:dd:
                    26:c1:8a:64:d8:a1:0b:13:91:39:05:ca:d1:72:d2:
                    6a:57:7a:e7:e9:9f:59:03:77:97:39:d7:28:b7:32:
                    00:63:c1:1f:82:3c:ba:90:f9:81:ae:7a:0b:d1:a0:
                    89:80:e7:88:6d:0b:77:cf:b9:2b:99:90:52:5a:b3:
                    75:df:bb:37:e1:99:1b:cb:ae:dc:a9:d5:fe:47:3f:
                    26:e9:a8:db:06:d4:bf:26:38:c7:3c:97:b8:87:f6:
                    6b:5a:e5:7a:d2:31:ae:3b:89:f7:31:b2:71:53:71:
                    2e:06:fd:dc:10:3d:dd:3d:80:c7:90:1a:04:16:ac:
                    3c:6d:3c:99:ff:f2:59:8a:d9:d2:5d:c0:1c:f1:ed:
                    82:6e:f2:65:bc:1a:4e:a7:73:a6:ca:84:c4:6b:df:
                    81:3a:36:16:30:ad:22:ba:1a:8f:e4:a4:b5:e2:e5:
                    9a:12:d4:e2:47:d8:4d:65:30:62:70:af:24:6b:bc:
                    83:78:92:23:f0:c2:a0:c6:60:19:3d:99:94:de:b0:
                    da:91:66:33:4a:d2:21:6d:83:6d:88:b4:f9:23:e2:
                    0c:5a:d0:82:df:cf:4a:23:d0:51:e2:62:4e:50:f4:
                    d9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl

            X509v3 Authority Key Identifier:
                keyid:47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.14.0/24
                  147.189.152.0/23
                  173.249.188.0/22
                  176.103.218.0/24
                  199.7.252.0/22
                  216.211.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:aa:ca:9e:54:4a:4f:ac:65:4a:32:8d:25:54:1f:6f:27:
         e5:65:af:a4:4a:ef:35:a7:02:75:f7:03:31:4e:93:d2:33:bc:
         d6:2d:d3:d1:e5:c2:2b:e3:27:b7:bc:00:19:9e:5c:01:47:17:
         f0:14:d4:e0:0e:ea:e4:42:ab:e7:4d:db:d4:7d:e7:cf:67:86:
         df:e5:80:83:99:d6:d0:cf:ab:fa:fa:22:77:a7:38:68:6a:4e:
         71:80:40:8d:87:10:f0:9e:ec:d7:c8:27:74:5a:e1:a9:f4:aa:
         a0:6f:b1:0e:f4:a8:7f:f9:d4:40:3c:8a:75:cd:0f:c3:dd:fe:
         88:96:38:9c:e5:fe:da:4e:42:12:0d:b1:e9:ef:99:32:d9:7f:
         9a:61:36:a8:29:d3:32:78:bc:60:2d:f2:12:a6:2a:59:94:54:
         c2:02:8f:c2:af:2b:21:03:95:23:43:90:ee:87:f9:ed:7b:c9:
         b7:d6:2b:8a:36:b9:df:75:43:21:d9:88:98:49:37:37:82:44:
         b5:1b:6f:b8:80:da:4c:fe:ee:2e:cd:d9:e0:5c:c9:e8:b8:23:
         34:f4:d0:15:d6:04:ab:2c:d0:bc:bd:1e:bd:bf:93:a2:e4:eb:
         c7:08:0d:e8:a5:b6:a7:ca:92:0a:d7:22:73:c9:a6:32:95:8b:
         f9:2c:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net