Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer
File:                     98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer (raw, json)
Hash identifier:          nw2wIo/0bLu/Kw7UFUdVgxnhSLrTII56xdOtnNP2/T0=
Subject key identifier:   61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285849710C9B23A7258E8C7578A400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Apr 2025 00:45:34 +0000
Certificate not after:    Sun 11 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 10631
                          IP: 131.96.0.0/16

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:0c:9b:23:a7:25:8e:8c:75:78:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Apr  7 00:45:34 2025 GMT
            Not After : Jul 11 00:45:34 2027 GMT
        Subject: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:31:f4:26:f6:c5:9c:48:b7:47:a7:50:ef:
                    59:46:07:3b:0c:4f:e0:73:bb:71:a9:0e:ba:af:d0:
                    fe:e4:5c:dd:1c:63:d7:eb:5c:92:6a:19:d3:8b:c9:
                    33:45:d5:33:06:ec:bd:61:ca:62:6d:8c:cb:ce:ca:
                    20:df:90:26:a8:64:5b:33:f2:cb:1a:3d:37:5c:e4:
                    b7:bb:09:c4:4e:a6:5d:b8:85:fc:69:24:08:b6:8f:
                    5b:12:7e:f0:8a:59:83:89:68:59:88:8a:be:92:d9:
                    7e:16:09:ee:15:b8:ec:e3:46:d9:62:10:20:d2:f6:
                    f3:d7:92:a3:44:4c:0e:1e:fb:8e:11:8e:4f:b9:cf:
                    5b:98:c8:66:a5:d8:62:a0:fa:12:05:e6:ec:20:97:
                    e7:1a:6f:14:3b:54:aa:28:2f:0a:3b:a5:41:10:e1:
                    0b:f6:d0:38:cf:d1:fb:ab:c3:88:53:91:ba:c7:c7:
                    63:42:20:eb:d5:59:c9:2b:a2:0e:18:b9:5d:c6:31:
                    25:12:39:87:a7:fb:5b:a9:64:b5:25:92:9e:cb:1e:
                    59:02:a0:ce:20:21:73:65:b6:90:84:33:39:c0:2f:
                    a0:91:67:a0:dc:2a:c8:7e:a2:cb:6a:4c:d8:60:83:
                    65:be:cb:81:47:cb:b4:69:a9:5f:0e:d8:8e:f5:16:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.96.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10631

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:26:b1:65:2a:d9:11:09:f2:7f:6f:99:6c:67:97:db:64:1d:
         51:bc:21:b7:ef:dc:31:61:fd:3e:11:f2:f7:0e:83:44:92:37:
         11:d7:51:eb:05:4f:c4:97:a2:bc:59:bc:30:18:26:c1:94:f3:
         c6:06:b9:7e:c8:ea:52:0d:90:9f:fb:0a:92:de:a5:94:7d:cd:
         24:de:ab:2f:9c:14:f2:b4:fd:46:4d:6c:1c:00:3d:2e:9d:8a:
         3c:e5:61:bc:5c:5d:9e:6e:33:b6:5f:88:f8:78:66:a4:ed:bb:
         14:6f:ef:bc:1c:00:10:10:20:35:a4:80:d7:7e:b2:0f:9d:1c:
         bc:b2:4a:d4:c3:0b:12:8a:0d:89:5a:e2:5e:61:24:85:e9:e7:
         a8:c2:67:03:92:75:e2:aa:e1:bc:c7:14:ad:e1:77:49:a5:ae:
         66:63:8b:cd:a2:08:2f:67:da:9a:86:a1:6b:80:50:8a:c9:54:
         d0:17:b5:12:f6:dc:31:3a:74:7b:d5:32:69:d2:30:64:2a:4b:
         09:ef:29:eb:8a:3a:da:ea:7b:eb:b8:94:43:9f:1d:08:34:97:
         1c:ab:b4:cb:c2:cd:f0:4c:b1:33:23:bd:12:12:5b:d6:f3:c1:
         85:70:ac:7e:79:4c:6c:ff:d8:17:44:4b:58:ef:f9:53:70:5d:
         8a:e2:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net