Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer
File:                     1f54df1e-3d93-4ac5-b209-e24261193230.cer (raw, json)
Hash identifier:          eoi2syHbxlorFI1bK6uiuu8CPjI8ZEGhnvcp1CJnzHU=
Subject key identifier:   C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858496077AD5C1772C8727FC1C1E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Apr 2025 02:12:34 +0000
Certificate not after:    Mon 05 Jul 2027 02:12:34 +0000
Subordinate resources:    AS: 397324
                          AS: 399092
                          IP: 158.51.4.0/22
                          IP: 163.123.148.0/22
                          IP: 184.169.96.0/20
                          IP: 192.173.14.0/23
                          IP: 2604:ff40::/32
                          IP: 2605:2540::/32
                          IP: 2607:c980::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:77:ad:5c:17:72:c8:72:7f:c1:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  1 02:12:34 2025 GMT
            Not After : Jul  5 02:12:34 2027 GMT
        Subject: CN=1f54df1e-3d93-4ac5-b209-e24261193230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:97:25:26:8a:56:e0:c6:fc:ba:e6:17:13:
                    d3:71:75:ef:12:1c:84:67:a1:47:36:3f:30:99:22:
                    b7:ed:d0:ee:b6:8c:70:b5:ef:91:65:a7:e4:9e:13:
                    9e:d2:7c:f2:5a:6e:fb:96:e6:83:0d:3a:47:01:5f:
                    7c:31:d3:31:95:d2:6f:88:bc:59:f8:ec:44:ac:60:
                    b8:59:07:e8:4b:61:9b:ae:33:d3:28:df:08:f7:e7:
                    a4:d9:ac:af:b0:26:5e:94:c9:20:84:c5:47:56:3f:
                    f8:3a:d4:3c:dc:43:14:0d:45:10:58:85:06:f8:ea:
                    8d:4c:92:10:fd:81:8d:22:89:52:5c:2c:c6:c0:62:
                    69:da:76:38:7e:4f:93:d2:1b:12:be:2a:f2:5e:4c:
                    ad:2f:b2:2c:d2:ee:5f:38:b6:4d:2c:dc:90:58:43:
                    a1:70:ff:88:dc:5c:d9:54:46:62:0a:41:f6:d1:d7:
                    0b:6b:b7:91:ce:ee:b9:76:07:72:1b:2d:72:8e:71:
                    4f:ca:d1:59:54:a7:38:06:79:b3:8d:41:3a:66:e5:
                    bb:d1:1c:99:51:48:7e:40:36:d8:14:a4:61:bf:9f:
                    0a:47:dc:fa:56:ea:24:40:29:c0:e1:44:12:56:e3:
                    a5:4f:36:23:4f:8b:8d:dd:bc:c2:ae:b3:8b:65:15:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.4.0/22
                  163.123.148.0/22
                  184.169.96.0/20
                  192.173.14.0/23
                IPv6:
                  2604:ff40::/32
                  2605:2540::/32
                  2607:c980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397324
                  399092

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:84:79:6a:6a:92:55:b3:65:33:b1:9d:2d:cb:a3:f8:65:
         9a:66:c1:68:ab:66:83:85:b3:af:f2:cf:38:16:d7:c9:52:bf:
         4f:6f:7c:79:b0:c2:df:98:36:58:23:56:3d:55:c2:3c:de:d4:
         c8:c7:32:00:80:69:a6:4a:8b:e5:b0:7a:c9:0c:7e:33:c4:c3:
         2a:36:b8:46:92:45:ee:33:ba:3c:69:25:d0:c8:58:97:dd:42:
         cf:ba:63:9b:39:0c:e2:b0:98:e9:48:03:ff:5b:f7:34:17:75:
         03:b8:86:45:d9:5c:f0:0c:75:bb:57:b8:a7:67:d3:4a:ab:e5:
         d7:a3:ef:ae:17:ea:e9:1b:cb:52:74:4a:4b:65:3a:e0:76:3a:
         ef:93:03:3a:c3:77:7c:ee:72:e9:a7:07:55:c1:10:5f:41:99:
         af:9e:49:f8:94:2e:af:c4:6b:b9:89:d5:4d:9c:76:2b:d2:a7:
         a7:49:7e:09:72:31:e6:14:b9:c4:1f:ac:c2:49:ae:3e:e6:76:
         28:1a:ba:80:17:6e:64:c5:db:96:8b:2a:81:56:8e:bf:96:22:
         9f:cf:52:49:78:fe:4f:6b:9e:a0:9e:68:83:4d:d9:d9:cd:52:
         d7:32:2c:3a:d4:53:46:21:9f:b5:c4:8b:60:74:c7:f5:2c:61:
         dc:46:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net