Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
File:                     7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer (raw, json)
Hash identifier:          fYa5RhB61aW92VQpJ3EQBRWcrdZ5zLyUfRwuKWbpnJE=
Subject key identifier:   17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority key identifier: 37:33:EB:5B:18:1F:15:8D:BF:5E:5E:E5:54:70:03:E8:49:25:77:71
Certificate issuer:       /CN=d40e6cab-e66c-4ca7-ab61-126b3cfcbb86
Certificate serial:       010D0C9F4328584938259EB91C9C988B43BA9A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
Manifest:                 rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
caRepository:             rsync://rpki.sunoaki.net/repo/SUNOAKI/0/
Notify URL:               https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 15:34:54 +0000
Certificate not after:    Sun 20 Jun 2027 15:34:54 +0000
Subordinate resources:    AS: 30581
                          AS: 397958
                          AS: 401519
                          IP: 23.147.232.0/24
                          IP: 23.163.8.0/24
                          IP: 140.235.36.0/22
                          IP: 2602:2a3::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:38:25:9e:b9:1c:9c:98:8b:43:ba:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40e6cab-e66c-4ca7-ab61-126b3cfcbb86
        Validity
            Not Before: Mar 17 15:34:54 2025 GMT
            Not After : Jun 20 15:34:54 2027 GMT
        Subject: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:e3:1c:61:41:66:df:87:73:48:32:38:c8:
                    8e:b2:63:1d:18:6a:b5:b2:05:f8:34:b8:b6:92:8c:
                    54:cb:bf:f1:f2:48:0f:bf:c8:a3:06:af:2a:66:4d:
                    fc:74:ac:b9:f1:e4:10:be:c1:21:d2:0c:01:63:2c:
                    10:f2:86:25:11:75:8d:10:c4:39:04:12:87:29:84:
                    90:5d:55:8a:eb:7d:f3:18:f4:d0:9e:71:a1:a9:9d:
                    74:c9:26:bb:3e:5b:a8:6e:e0:d7:fa:53:66:d0:69:
                    2f:64:e7:08:85:9e:06:79:c5:74:cc:88:0a:fe:8e:
                    a9:7f:25:d7:5e:06:03:a9:5a:fe:05:a6:54:3d:07:
                    50:0c:3c:42:ab:9c:98:4b:40:e9:9b:33:b1:94:58:
                    13:a4:fa:c6:9d:97:38:90:02:bd:df:8f:54:78:ea:
                    9c:e2:bf:88:87:0e:db:3a:a0:ca:a9:bd:c2:97:22:
                    d5:93:1c:7d:65:e4:33:d2:48:08:a1:84:e1:3a:b1:
                    67:e9:47:06:2c:a9:f5:1e:57:ac:e1:bc:72:55:8b:
                    5a:4c:6d:28:39:4c:c3:82:81:61:b9:64:18:f4:24:
                    4f:56:ca:55:4f:fe:52:a2:0a:75:2c:8d:85:7e:8c:
                    5f:0e:2b:72:ac:0e:b4:a9:8f:53:99:60:ac:64:09:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/
                RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl

            X509v3 Authority Key Identifier:
                keyid:37:33:EB:5B:18:1F:15:8D:BF:5E:5E:E5:54:70:03:E8:49:25:77:71

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.232.0/24
                  23.163.8.0/24
                  140.235.36.0/22
                IPv6:
                  2602:2a3::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30581
                  397958
                  401519

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:22:24:0b:55:b2:75:99:01:8f:0a:3d:26:ad:23:f0:a8:39:
         78:41:54:d9:68:50:35:5f:c3:7b:43:d7:bb:2f:bf:a4:06:3c:
         33:58:1a:9a:92:3b:05:db:04:68:47:50:a6:b6:c0:fb:2a:e0:
         25:02:bb:6f:48:27:12:3e:87:e9:93:66:c2:0a:53:d4:88:9a:
         12:73:1b:a7:20:84:68:18:b0:10:c5:51:41:48:4d:b1:7a:30:
         83:51:da:84:aa:13:50:ed:4c:6d:fe:df:ab:57:ee:e3:65:02:
         95:cc:98:38:62:5c:0d:4e:a0:46:72:7b:be:47:55:71:5e:de:
         08:7e:ec:11:35:5e:4e:ef:06:6a:4b:d5:06:cf:19:95:9a:87:
         8b:1b:89:44:38:e2:0d:a0:4a:0d:99:ec:8d:ad:7f:d2:c8:5d:
         ca:c3:b2:31:63:5a:2c:51:d0:70:c7:21:ab:5d:5b:9d:3f:57:
         8e:44:0f:c3:1d:54:99:09:06:b8:67:0a:ee:a9:4a:b5:b2:fd:
         7d:ae:5f:89:40:91:c7:2e:ca:e7:cc:38:e4:66:c7:70:b1:55:
         8f:7c:07:24:17:33:a4:3e:c4:a5:a1:83:e2:48:46:d4:17:a2:
         f0:b1:59:63:91:79:0b:c5:93:12:96:a9:9d:aa:1a:3d:6d:e7:
         4c:7a:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net