Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
File:                     4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer (raw, json)
Hash identifier:          P30uF/0WWlFtiYQODp/GpeAuP4+KuvaTkuSLElZ6OtE=
Subject key identifier:   FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858497F3F26D3F5A5E04BFF45E1C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 12 Apr 2025 02:48:44 +0000
Certificate not after:    Fri 16 Jul 2027 02:48:44 +0000
Subordinate resources:    AS: 395176
                          IP: 208.92.68.0/22
                          IP: 2602:ff41::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:3f:26:d3:f5:a5:e0:4b:ff:45:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr 12 02:48:44 2025 GMT
            Not After : Jul 16 02:48:44 2027 GMT
        Subject: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:de:a8:63:a4:d4:0c:7b:93:a0:06:d6:7e:
                    90:c5:17:a3:b8:e6:58:e9:17:86:c1:dd:e6:9e:67:
                    8f:48:f9:0d:57:d7:26:6d:3d:b5:32:05:43:05:74:
                    9c:3c:9f:ab:e8:e3:21:c3:9c:2e:8b:d6:02:e8:f2:
                    50:2d:fb:d5:c7:36:18:3a:0c:ac:24:8d:d7:fe:f2:
                    2c:91:bd:2c:6b:fd:fa:50:2b:62:58:5b:87:aa:f6:
                    13:37:26:9d:66:06:83:73:e0:6f:38:2a:50:46:e5:
                    09:88:4b:4d:17:da:67:a6:56:ea:49:3d:71:f1:c9:
                    ca:7c:2e:b2:21:8e:60:85:b6:aa:95:ad:a1:0d:36:
                    57:c5:4d:d9:6a:10:83:a2:54:fe:b0:85:0c:61:34:
                    9c:5f:bb:06:60:b1:20:d4:76:b5:9e:74:b9:da:3b:
                    a7:d9:5e:37:49:88:5d:11:12:41:9f:90:0f:c2:7d:
                    41:ab:50:4d:f4:9d:08:14:85:85:f9:b8:4f:cb:69:
                    f4:1d:a8:ee:04:e8:6c:61:92:8f:1a:dd:69:b9:8f:
                    10:d1:e4:98:35:8f:6d:0b:a5:ed:10:14:17:42:3f:
                    72:68:dd:d9:1f:2f:d2:ce:10:d1:06:37:c9:b9:f1:
                    28:b1:f7:d3:23:70:56:97:8f:f0:1b:07:dc:07:86:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.68.0/22
                IPv6:
                  2602:ff41::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395176

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:50:b9:a3:c7:21:97:69:97:36:01:4a:3b:2c:4d:87:aa:
         07:42:79:f4:40:92:fa:68:d7:f8:24:77:67:c8:8d:80:f0:bc:
         01:2e:82:4f:2e:20:c7:ae:f5:d9:b9:5b:0a:83:18:47:4b:fb:
         25:7e:88:73:19:a3:41:df:f3:1f:e8:8c:f9:2b:0c:d8:9b:71:
         9f:0b:a8:2d:27:ae:4c:07:72:d1:8f:7e:3c:6f:0b:69:8f:be:
         0d:ad:bb:cd:d7:ef:c4:05:80:12:dc:a0:f9:9f:34:42:90:c9:
         92:28:0f:11:4c:73:84:55:e9:30:c3:ac:f5:43:fb:6a:e8:16:
         3c:a7:6b:2a:68:28:b2:15:64:74:c1:b3:fa:00:18:b7:06:64:
         ac:1d:c8:ca:80:53:20:54:cd:91:72:6f:09:f9:e9:d5:4f:d0:
         f6:ea:e8:40:c9:b1:1a:11:bc:a2:e7:9c:89:67:57:50:5d:e1:
         a5:4a:4c:d8:0c:ae:12:d2:7d:e6:04:49:e2:4a:da:60:86:d3:
         63:4b:4c:1f:bb:ff:a6:71:3b:2c:fa:b8:9b:76:7f:25:c0:0c:
         4d:f2:ae:93:59:0b:5e:5b:4f:28:5d:8d:ca:73:10:8d:25:17:
         23:b1:3e:c6:27:00:62:88:70:e1:94:c7:7d:e2:b0:a8:0b:9d:
         8d:96:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net