Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a.cer
File:                     d339c056-b26d-4cd7-96f4-34cf48d6627a.cer (raw, json)
Hash identifier:          7FvLx6PPZ0YwLhMEWD/MJWe/+bng3bm8lTcQV6FTWmU=
Subject key identifier:   73:F3:2A:71:25:C5:35:A2:3B:9B:A3:84:6A:D7:04:17:C0:D2:7F:A5
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858497C3757C32D5A29507FE12200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/d339c056-b26d-4cd7-96f4-34cf48d6627a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 00:45:34 +0000
Certificate not after:    Thu 15 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 399481
                          IP: 172.82.60.0/22
                          IP: 2606:3640::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:37:57:c3:2d:5a:29:50:7f:e1:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr 11 00:45:34 2025 GMT
            Not After : Jul 15 00:45:34 2027 GMT
        Subject: CN=d339c056-b26d-4cd7-96f4-34cf48d6627a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:5b:99:58:6a:10:50:da:87:31:06:6f:06:
                    3f:e2:8d:aa:16:b0:b4:c1:5e:3d:de:50:52:06:0c:
                    2f:89:84:76:e8:aa:7d:69:00:97:49:40:6d:6f:72:
                    2f:48:3c:d8:a1:7b:9c:01:14:33:b7:b8:63:2a:47:
                    cb:de:6f:47:da:48:d7:89:76:51:ce:ae:6e:33:a7:
                    88:58:fa:42:d6:77:6b:0f:30:a4:3d:5c:5c:a6:e1:
                    61:db:c4:22:56:e8:18:5f:74:77:70:83:3d:8b:73:
                    61:f9:ba:8e:8a:85:6a:ba:30:7c:63:dc:0a:e2:af:
                    88:c2:6f:0d:1a:6a:05:17:65:d5:95:ba:0e:c3:a1:
                    5d:2b:6b:84:8d:e1:ab:1d:50:fa:f3:6c:c3:25:6a:
                    c1:75:f1:e8:59:53:5c:41:f8:57:0f:96:eb:23:23:
                    e7:c6:71:2f:f1:55:2c:4d:74:12:36:ec:57:8a:71:
                    3c:2d:0f:31:0d:f9:e0:01:ce:e1:8b:2d:e8:ae:08:
                    c9:54:fd:b5:ca:69:10:a9:35:60:70:21:c8:77:37:
                    c5:22:63:e9:e8:5b:19:e7:99:d3:ed:88:a5:a4:46:
                    0d:1f:21:27:a4:f7:95:3c:d8:df:e1:fb:ea:83:30:
                    d7:95:e3:cb:52:e7:50:7b:99:97:98:1b:ed:b0:ba:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F3:2A:71:25:C5:35:A2:3B:9B:A3:84:6A:D7:04:17:C0:D2:7F:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/d339c056-b26d-4cd7-96f4-34cf48d6627a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.60.0/22
                IPv6:
                  2606:3640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399481

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:49:86:3e:78:34:5a:56:f0:09:e9:5c:62:13:c5:ab:19:
         c4:8f:a1:c0:ba:73:16:de:a4:ed:6a:d0:6a:d8:20:1f:32:58:
         0c:45:12:8d:1f:30:e9:05:45:d2:a8:54:3d:75:56:4a:d5:cc:
         a5:85:7f:02:6c:77:b5:2e:03:11:96:aa:40:96:ac:e9:1f:f0:
         30:72:5c:79:ad:33:51:8d:f2:f0:0c:e6:cb:56:19:98:cb:81:
         f6:b5:a5:97:eb:b9:ff:ba:50:af:9a:0f:e6:72:c8:64:0d:8c:
         d5:ae:0d:f6:4e:fc:ff:0c:5f:93:83:93:58:4c:02:b6:43:5b:
         f0:a3:6b:6a:f3:1c:dc:1a:ba:b0:95:17:0f:7e:e4:c5:93:5e:
         a5:f6:eb:77:e7:ea:0f:08:fa:96:25:50:5a:95:9d:0f:8d:0f:
         22:27:c3:b5:56:fb:c9:70:d4:96:8a:32:aa:71:6b:2a:c9:91:
         be:b2:c7:e7:0e:9c:32:45:fa:74:4c:e7:a1:86:5f:ed:1b:a4:
         b6:8c:95:f7:a5:6d:8c:b2:51:c1:7a:08:c1:4e:7a:3a:e4:2e:
         b5:86:71:9f:b2:26:e3:c5:56:d1:1c:16:21:58:c4:98:10:a9:
         10:d4:29:be:ed:69:27:2e:de:3d:3e:16:09:50:16:e0:7d:07:
         78:ad:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:12 2025 by rpki-client on console.sobornost.net