Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
File:                     8d34ec60-03b0-4663-8748-fab291e36393.cer (raw, json)
Hash identifier:          vxf81hfEpQXA4dqeUO4/UsGGuwxREQIU/qpkzUhw8tQ=
Subject key identifier:   3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584981CCB6151669F2C193D31F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 13 Apr 2025 00:45:34 +0000
Certificate not after:    Sat 17 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 395807
                          IP: 199.60.144.0/21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:cc:b6:15:16:69:f2:c1:93:d3:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Apr 13 00:45:34 2025 GMT
            Not After : Jul 17 00:45:34 2027 GMT
        Subject: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:6e:54:d3:71:57:b7:45:f7:a5:d6:ee:fb:
                    32:03:b7:c7:8b:76:1d:2d:1c:96:9c:f0:21:e3:80:
                    9f:dc:bb:89:18:28:62:88:e1:5c:92:90:cb:38:06:
                    8b:2a:d3:32:f1:73:43:1a:bd:25:7f:ca:c1:c9:4c:
                    d2:e8:63:73:36:59:8a:d5:90:29:47:5f:b6:9e:0f:
                    9c:ed:1e:4e:99:10:7f:a6:79:04:db:f5:f0:3a:7c:
                    b4:71:e7:a2:9f:ad:f7:00:52:ea:4d:37:e4:7c:a6:
                    d1:69:3e:7d:76:fd:e8:f4:3e:69:f8:93:60:d3:be:
                    40:ef:16:65:ba:1f:d6:c2:c9:98:15:af:a3:16:37:
                    2a:73:59:1e:ad:73:71:07:5a:f0:bb:18:1b:6a:69:
                    51:94:40:1c:8c:81:1d:e6:8b:ac:c1:be:3a:82:26:
                    7f:d7:1d:61:d2:f7:6d:26:2b:99:a3:29:e3:4c:74:
                    7e:42:0a:1b:59:f2:a2:41:a2:8a:3d:05:a0:60:dd:
                    0d:20:bd:3b:3e:b6:ce:de:a5:cc:09:f2:e2:ec:32:
                    b6:de:f8:8d:07:78:d6:e9:a2:ff:1f:29:6d:25:a3:
                    51:45:d6:b7:d9:88:aa:29:f6:4f:a1:e9:97:9c:80:
                    e2:72:8c:41:0b:6c:25:94:ad:60:1a:75:24:eb:27:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.144.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395807

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:02:10:83:4a:20:01:ea:7b:09:5a:a8:66:f3:59:26:30:5b:
         ea:e4:f1:c9:e3:12:2c:21:b4:b0:d7:c6:f9:6f:0c:2f:67:97:
         6c:e4:3d:57:4d:fd:59:57:32:18:1b:be:f1:72:39:25:4f:c4:
         de:dc:c7:3a:cf:27:5e:36:4d:a5:c5:63:c6:49:92:50:92:e2:
         12:1e:8c:fb:15:b0:0f:6e:6a:ed:60:55:6b:6b:f8:61:a7:c9:
         84:2b:33:f3:a5:24:36:39:1d:ac:b6:66:12:0f:10:c8:82:3a:
         d7:13:53:50:e9:87:75:e9:fa:3e:16:a6:c1:fd:10:86:e4:a8:
         98:a5:9f:6d:b0:ce:de:b7:c6:ad:b0:7f:2c:3a:db:79:5b:16:
         c0:c0:23:7a:c0:d9:c3:29:56:77:51:7c:49:bd:62:02:a3:2f:
         39:1f:c7:c0:c9:7d:38:19:fc:0f:34:78:25:c7:f8:52:4c:3f:
         4f:e0:29:e9:21:6a:cc:a6:52:69:9d:56:11:ae:f7:3c:6f:9d:
         d8:e6:fe:90:c3:5c:1b:1d:d7:56:c7:eb:87:c7:30:3e:f1:22:
         9e:a7:3f:58:8e:f1:3b:4b:03:dc:fa:8b:b8:be:c5:12:62:95:
         6c:a1:78:87:0a:58:16:94:d7:0c:ef:81:5c:1e:54:5b:c6:7e:
         41:f7:ee:26
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmBzLYVFmnywZPTH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDQxMzAwNDUzNFoXDTI3MDcxNzAwNDUzNFowLzEtMCsGA1UEAxMk
OGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2MzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm5uVNNxV7dF96XW7vsyA7fHi3YdLRyWnPAh
44Cf3LuJGChiiOFckpDLOAaLKtMy8XNDGr0lf8rByUzS6GNzNlmK1ZApR1+2ng+c
7R5OmRB/pnkE2/XwOny0ceein633AFLqTTfkfKbRaT59dv3o9D5p+JNg075A7xZl
uh/WwsmYFa+jFjcqc1kerXNxB1rwuxgbamlRlEAcjIEd5ouswb46giZ/1x1h0vdt
JiuZoynjTHR+QgobWfKiQaKKPQWgYN0NIL07PrbO3qXMCfLi7DK23viNB3jW6aL/
HyltJaNRRda32YiqKfZPoemXnIDicoxBC2wllK1gGnUk6ye83wIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFDzhrcRs//9h0m11E1ml8gpNB4XdMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84
ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhkMzRlYzYwLTAzYjAtNDY2My04
NzQ4LWZhYjI5MWUzNjM5My84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFl
MzYzOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPHPJAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BgofMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJACEINKIAHqewlaqGbzWSYwW+rk8cnjEiwhtLDXxvlvDC9n
l2zkPVdN/VlXMhgbvvFyOSVPxN7cxzrPJ142TaXFY8ZJklCS4hIejPsVsA9uau1g
VWtr+GGnyYQrM/OlJDY5Hay2ZhIPEMiCOtcTU1Dph3Xp+j4WpsH9EIbkqJiln22w
zt63xq2wfyw623lbFsDAI3rA2cMpVndRfEm9YgKjLzkfx8DJfTgZ/A80eCXH+FJM
P0/gKekhasymUmmdVhGu9zxvndjm/pDDXBsd11bH64fHMD7xIp6nP1iO8TtLA9z6
i7i+xRJilWyheIcKWBaU1wzvgVweVFvGfkH37iY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net