Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95.cer
File:                     608c8ba1-b17a-418a-a69d-751fc7e07f95.cer (raw, json)
Hash identifier:          pAThLfpZUhbN+v2vVwUEqjnWSufUmNOnvbesmnWqctA=
Subject key identifier:   7A:6E:9C:E2:0A:1E:CF:C3:E2:C1:14:6A:71:A8:8F:56:CA:3E:12:D0
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858496F43738E1E2DCB734FD613C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 06 Apr 2025 09:24:27 +0000
Certificate not after:    Sat 10 Jul 2027 09:24:27 +0000
Subordinate resources:    AS: 401078
                          IP: 23.178.104.0/24
                          IP: 2602:f8ed::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:43:73:8e:1e:2d:cb:73:4f:d6:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  6 09:24:27 2025 GMT
            Not After : Jul 10 09:24:27 2027 GMT
        Subject: CN=608c8ba1-b17a-418a-a69d-751fc7e07f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3b:28:2f:5e:b6:2a:72:31:4c:5c:da:99:41:
                    44:b3:3e:d1:fe:6c:4f:d8:38:49:4d:d5:c1:8b:8f:
                    08:c9:e5:94:30:81:d0:3a:79:05:91:cd:a2:2e:a8:
                    b4:55:1c:3a:a1:af:12:c5:03:ac:55:c8:8e:a2:91:
                    52:31:d6:6a:18:be:2f:bb:57:a0:7c:6e:49:7d:7e:
                    3e:03:0e:01:5e:a9:10:11:e8:cd:0a:08:0e:bd:d9:
                    9c:52:49:41:34:5e:fd:00:fc:01:cc:52:c1:9a:43:
                    a4:17:fa:7c:a1:72:28:c9:8a:6a:da:2a:eb:5d:3f:
                    78:c6:a6:60:9d:e9:62:5b:01:28:03:e4:4c:9e:4c:
                    3e:06:c5:ac:51:62:1f:83:cf:72:e1:a4:b1:b7:54:
                    e7:f8:a7:07:aa:9c:6c:40:89:5c:c9:8c:92:13:e1:
                    0d:d0:9b:2c:fd:88:3d:f4:a5:74:27:32:59:f7:7c:
                    16:6f:39:de:2a:47:36:3c:90:59:b3:d4:a1:8a:1a:
                    33:e5:e9:dd:77:1f:f0:7e:dd:24:0a:8b:1a:41:42:
                    0e:42:e1:2a:30:d8:4b:16:98:ca:21:80:4b:fb:3a:
                    d5:bf:e5:14:b1:d9:a4:6b:bc:7e:c8:9f:ff:16:8e:
                    bb:35:83:e7:96:39:05:26:02:53:6c:87:d3:bf:21:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6E:9C:E2:0A:1E:CF:C3:E2:C1:14:6A:71:A8:8F:56:CA:3E:12:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.104.0/24
                IPv6:
                  2602:f8ed::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401078

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:1d:91:ed:1d:59:e5:c3:2d:70:1d:4b:ec:14:dd:04:1e:
         36:e7:82:ef:a8:1a:fd:76:00:32:f8:8f:04:31:08:05:a3:8c:
         a7:c2:a4:54:80:d3:4d:e6:89:87:f5:72:c7:67:8c:32:b5:d1:
         cf:b9:09:45:87:37:7a:d2:ee:d6:07:8a:70:84:6f:08:06:2a:
         6b:af:18:c7:ff:e6:ec:ff:bf:bc:c0:96:69:88:8d:87:76:e8:
         60:bb:86:59:3a:a6:3c:51:93:b2:7e:0f:f3:a3:19:48:4a:20:
         8a:f3:87:de:5c:f3:1f:03:e0:f4:0b:4e:c0:cf:d9:4d:a9:8b:
         b8:3b:d9:42:94:9e:ed:b9:3b:d0:b9:b7:a8:94:d2:87:ea:0a:
         64:db:f7:28:09:85:5b:cc:2d:cf:fd:ad:c9:20:d2:bf:43:78:
         0f:f8:07:c4:a4:b6:d5:8a:d3:93:9f:eb:5f:58:6d:99:b7:36:
         f3:03:45:55:5d:4d:8c:a4:6a:c1:c5:76:5c:fa:f4:0a:08:77:
         bc:77:80:ab:a4:c3:17:be:02:84:69:9d:18:a3:6f:5e:77:80:
         23:1b:4c:04:0b:3c:80:23:03:57:54:a7:7f:16:43:cd:64:a2:
         93:61:78:89:da:b3:84:92:27:e0:72:ad:99:ea:dd:ac:4c:22:
         ad:f7:a7:02
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElvQ3OOHi3Lc0/WE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDQwNjA5MjQyN1oXDTI3MDcxMDA5MjQyN1owLzEtMCsGA1UEAxMk
NjA4YzhiYTEtYjE3YS00MThhLWE2OWQtNzUxZmM3ZTA3Zjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDsoL162KnIxTFzamUFEsz7R/mxP2DhJTdXB
i48IyeWUMIHQOnkFkc2iLqi0VRw6oa8SxQOsVciOopFSMdZqGL4vu1egfG5JfX4+
Aw4BXqkQEejNCggOvdmcUklBNF79APwBzFLBmkOkF/p8oXIoyYpq2irrXT94xqZg
neliWwEoA+RMnkw+BsWsUWIfg89y4aSxt1Tn+KcHqpxsQIlcyYySE+EN0Jss/Yg9
9KV0JzJZ93wWbzneKkc2PJBZs9Shihoz5enddx/wft0kCosaQUIOQuEqMNhLFpjK
IYBL+zrVv+UUsdmka7x+yJ//Fo67NYPnljkFJgJTbIfTvyHWlQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFHpunOIKHs/D4sEUanGoj1bKPhLQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82
MDhjOGJhMS1iMTdhLTQxOGEtYTY5ZC03NTFmYzdlMDdmOTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzYwOGM4YmExLWIxN2EtNDE4YS1h
NjlkLTc1MWZjN2UwN2Y5NS82MDhjOGJhMS1iMTdhLTQxOGEtYTY5ZC03NTFmYzdl
MDdmOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXsmgwDgQCAAIwCAMGACYC+O0AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYetjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0xh2R7R1Z5cMtcB1L7BTdBB42
54LvqBr9dgAy+I8EMQgFo4ynwqRUgNNN5omH9XLHZ4wytdHPuQlFhzd60u7WB4pw
hG8IBiprrxjH/+bs/7+8wJZpiI2Hduhgu4ZZOqY8UZOyfg/zoxlISiCK84feXPMf
A+D0C07Az9lNqYu4O9lClJ7tuTvQubeolNKH6gpk2/coCYVbzC3P/a3JINK/Q3gP
+AfEpLbVitOTn+tfWG2ZtzbzA0VVXU2MpGrBxXZc+vQKCHe8d4CrpMMXvgKEaZ0Y
o29ed4AjG0wECzyAIwNXVKd/FkPNZKKTYXiJ2rOEkifgcq2Z6t2sTCKt96cC
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net