Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer
File:                     5e2da88f-6029-42b9-b598-2623343a3150.cer (raw, json)
Hash identifier:          cckhU4t6xIgxfp9hNgjgt+7lSdvKXkooH5591LDWY+E=
Subject key identifier:   7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584981CCB5FB9F45C62AB10E6F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 13 Apr 2025 00:45:34 +0000
Certificate not after:    Sat 17 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 68
                          AS: 79
                          AS: 550
                          AS: 1829
                          AS: 1839
                          IP: 128.165.0.0/16
                          IP: 130.55.0.0/16
                          IP: 138.98.0.0/16
                          IP: 141.111.0.0/16
                          IP: 192.12.184.0/24
                          IP: 192.12.208.0/24
                          IP: 192.43.188.0/24
                          IP: 192.52.70.0/24
                          IP: 192.65.95.0/24
                          IP: 204.121.0.0/16

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:cc:b5:fb:9f:45:c6:2a:b1:0e:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Apr 13 00:45:34 2025 GMT
            Not After : Jul 17 00:45:34 2027 GMT
        Subject: CN=5e2da88f-6029-42b9-b598-2623343a3150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:ed:84:c3:2c:52:7e:e7:9a:5f:2a:d3:58:
                    b9:52:29:da:4f:00:a0:0f:24:10:fb:f9:e2:1c:d5:
                    e5:45:2f:8e:29:f3:43:e8:67:a6:67:b5:0c:6d:6a:
                    45:66:64:8d:15:f0:6b:51:61:a4:fe:4b:ec:12:61:
                    68:93:73:5d:09:2a:40:2c:89:fa:19:e2:de:aa:8f:
                    1f:b8:10:83:06:5a:f4:ec:0f:c6:33:e5:04:0f:a8:
                    cd:d9:ca:9c:68:8a:1d:86:d9:07:09:3e:37:d5:41:
                    a9:21:14:b9:6b:62:81:f4:ab:24:5e:d8:d9:2e:59:
                    72:41:43:f7:b4:fa:83:c7:3e:8f:45:02:ff:e5:87:
                    08:ef:7c:ec:b9:a8:83:d5:8c:e0:e3:31:d6:58:06:
                    80:a3:30:a6:6f:e3:79:5d:35:9b:33:e0:dd:1e:e0:
                    d1:8a:7f:e4:08:81:0e:5b:73:19:85:b0:3d:37:43:
                    c6:7d:3d:a0:a7:c9:73:f4:a6:3a:9a:15:e7:27:99:
                    6f:8c:d3:4a:5a:42:97:ac:d5:a0:ad:4e:1b:c1:e8:
                    6b:be:3f:83:1f:32:03:2c:69:88:12:04:fb:c3:78:
                    b1:08:bc:79:c3:f4:a7:6d:f8:7e:99:7b:73:75:bd:
                    7a:de:4c:b3:26:aa:a1:8e:78:a4:fc:e5:d0:97:97:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.165.0.0/16
                  130.55.0.0/16
                  138.98.0.0/16
                  141.111.0.0/16
                  192.12.184.0/24
                  192.12.208.0/24
                  192.43.188.0/24
                  192.52.70.0/24
                  192.65.95.0/24
                  204.121.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  68
                  79
                  550
                  1829
                  1839

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:04:07:34:2b:3f:69:01:fc:b7:69:d4:bb:59:8e:9b:35:ff:
         92:17:91:51:8e:f8:31:04:fc:11:a3:4a:a4:7a:00:7c:ae:0f:
         fc:ef:20:64:b9:0a:30:c6:fe:1a:51:3e:71:f2:45:db:1e:45:
         50:6b:15:b0:79:4f:f0:1c:39:04:59:d3:3a:46:fe:f5:89:13:
         be:4c:dc:d0:82:09:87:b6:3f:1d:69:63:a0:6e:21:c0:9b:d7:
         de:86:c0:51:be:69:72:4c:3f:80:31:9b:4d:63:4b:ea:43:3b:
         fb:09:6b:93:ef:f4:fe:44:78:2d:dd:6b:69:0c:a8:c8:2a:9a:
         aa:52:44:e1:7d:41:fa:8e:1d:de:8f:6e:3d:c8:7f:30:88:3b:
         c9:05:34:0a:3d:43:d4:be:4f:47:ae:bf:04:2a:70:fa:f9:41:
         85:e4:55:b1:01:fe:d0:14:5f:5b:9c:a5:b6:33:a0:15:b2:f7:
         c9:07:e0:26:3a:f9:bc:8f:38:42:7f:89:63:4e:53:83:fd:ba:
         37:58:1c:35:11:64:6b:8d:64:a1:03:d2:46:49:9b:c6:a5:08:
         29:5c:a0:78:a5:d6:22:55:7b:8d:69:d1:6d:62:c2:31:6a:22:
         bc:ae:60:7a:96:13:e8:e6:24:d4:b8:ba:03:fa:77:77:71:c4:
         63:7d:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net