Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer
File:                     6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer (raw, json)
Hash identifier:          FHbcSozwaEbk7frMRexZJ/m8LW4dspT1ClRwFjvUpcc=
Subject key identifier:   5D:F2:5D:CA:E7:BA:C5:90:FD:1C:E8:E4:17:1E:55:E7:02:6E:E2:AC
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858497631F36DBBB2DE6A39BBEE18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 20:59:51 +0000
Certificate not after:    Mon 12 Jul 2027 20:59:51 +0000
Subordinate resources:    AS: 22931
                          AS: 397809
                          IP: 72.10.176.0/20
                          IP: 2620:c1:8000::/48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:31:f3:6d:bb:b2:de:6a:39:bb:ee:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  8 20:59:51 2025 GMT
            Not After : Jul 12 20:59:51 2027 GMT
        Subject: CN=6afd62dd-ec3c-44d7-93fe-81efca4b3dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:10:11:36:68:e5:cf:2a:f4:16:3b:8e:62:
                    fc:0a:ca:80:2a:0f:c4:09:a2:89:31:d2:02:fa:9e:
                    ae:13:fa:2b:28:cd:10:1b:4b:7f:b0:b9:2b:13:e3:
                    87:05:dc:a2:5e:31:85:50:90:12:46:67:c0:55:b9:
                    99:40:77:11:0c:b7:12:5d:d8:c1:21:4d:40:68:38:
                    89:23:3d:92:6e:66:d9:d3:70:ab:26:6e:03:5f:0e:
                    42:38:53:f2:f8:08:9c:f3:56:bb:c5:d7:2c:85:b9:
                    e2:de:cf:37:a1:f8:11:0f:5f:92:4e:78:f0:e6:2d:
                    52:a7:72:41:68:29:f3:c5:0f:fb:7e:7d:5a:d9:60:
                    d8:71:e9:de:ba:b8:af:73:c1:be:76:99:33:aa:47:
                    16:c3:fa:5d:59:e6:ff:21:44:14:b7:2b:6d:84:f6:
                    b2:9f:b2:68:67:2d:86:34:64:03:c2:27:0e:40:4f:
                    ac:56:52:8b:ed:d5:ca:ce:0d:c5:79:5f:82:69:51:
                    9d:34:98:8e:2f:be:ba:7f:47:69:f4:4c:37:e3:e2:
                    09:ad:a7:3d:e2:71:4f:ef:74:1d:b1:d4:f6:b9:86:
                    f5:2b:92:82:53:05:29:33:5d:2f:a1:86:08:bc:e2:
                    db:49:fa:31:f7:ed:52:45:4e:d0:12:e6:31:6c:f2:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:5D:CA:E7:BA:C5:90:FD:1C:E8:E4:17:1E:55:E7:02:6E:E2:AC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.176.0/20
                IPv6:
                  2620:c1:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22931
                  397809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:bc:11:1d:9a:21:b2:8a:7b:e4:3c:69:bd:87:9c:73:44:
         53:af:06:ff:7c:96:21:27:88:a5:d0:f9:f8:04:16:db:39:f0:
         cf:7a:81:2d:c3:7f:53:77:45:fd:a8:ff:2b:ad:f6:3c:f1:ca:
         af:35:11:20:c8:cc:b5:bf:0d:cd:d9:ea:c6:d2:12:0c:b4:bc:
         62:40:eb:c9:c1:49:54:26:30:c7:26:81:d4:90:29:d8:ab:b1:
         1d:f1:df:d1:a7:cd:f9:ba:50:0c:e3:25:40:5f:10:6f:30:c2:
         6d:81:c3:cb:dc:e6:f5:e3:af:18:9b:ac:49:07:ac:1a:1d:32:
         3f:a0:8a:86:74:38:79:37:93:1f:b3:1d:61:31:e6:fc:7d:a5:
         96:e0:c3:24:e7:fc:2c:2a:6a:a0:d4:d5:2f:d4:ee:41:e3:a2:
         2a:11:7d:44:a3:13:7e:66:ca:ce:4f:93:d8:12:54:1b:96:18:
         ea:a6:8d:dd:90:a3:78:48:e8:68:d9:c8:23:23:df:64:5c:af:
         ed:f2:c8:c0:eb:b2:ae:ad:1d:0f:85:9a:30:3e:e3:8a:6e:35:
         19:bb:33:23:d2:cd:f9:a8:ed:a2:78:7e:bf:24:de:9a:c2:0b:
         cd:7d:a3:c0:41:9e:0c:2e:c8:50:15:3f:c8:82:56:05:7f:f6:
         08:8a:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net