Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0.cer
File:                     6d91c088-4199-4ddf-8903-a38d9c8a4ae0.cer (raw, json)
Hash identifier:          m/8pyC3GgBWFUOoIKs5orz4WFdChWaN4qYmmJWMHidM=
Subject key identifier:   49:6C:94:9F:31:8B:C2:B9:C9:52:04:F4:CE:42:4B:47:8A:40:66:84
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858497EF3763A28C7B8ADF6BF29C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/6d91c088-4199-4ddf-8903-a38d9c8a4ae0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 12 Apr 2025 00:16:13 +0000
Certificate not after:    Fri 16 Jul 2027 00:16:13 +0000
Subordinate resources:    IP: 23.137.36.0/24
                          IP: 2602:f68e::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7e:f3:76:3a:28:c7:b8:ad:f6:bf:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr 12 00:16:13 2025 GMT
            Not After : Jul 16 00:16:13 2027 GMT
        Subject: CN=6d91c088-4199-4ddf-8903-a38d9c8a4ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bf:fb:fc:67:89:17:8f:25:aa:71:d4:63:57:
                    e4:90:cd:d6:fb:de:7f:b7:69:95:7f:e0:9f:7b:8c:
                    6b:07:ab:c7:10:9e:aa:7d:dd:77:fb:47:b5:12:9c:
                    34:70:a8:57:10:a3:96:eb:60:b5:0c:f1:ea:a2:ee:
                    cc:ce:e2:6e:79:c4:4f:ed:5d:89:30:fe:db:b2:cc:
                    f7:35:d7:6b:12:35:18:8f:32:5e:ad:d4:19:ff:af:
                    8e:47:71:87:7e:2a:29:d0:61:89:ae:f2:e4:8b:e9:
                    68:84:b0:ad:8a:77:fc:8f:06:ab:31:85:90:46:73:
                    11:dd:0e:fe:28:11:72:24:2d:21:f6:cd:a8:ee:11:
                    e8:4b:78:bf:2b:68:32:41:be:02:65:3b:2c:d3:4c:
                    2a:fc:07:ad:25:72:bd:6b:c8:bd:93:dd:46:db:aa:
                    49:35:8d:77:f2:05:07:65:8a:71:2f:4b:01:0f:18:
                    72:de:8b:8f:c1:8f:0b:81:b1:bf:4e:b6:ba:5c:1b:
                    45:39:bb:51:32:19:7a:4c:0b:3a:0b:78:88:f7:8f:
                    33:b6:f8:dc:19:6f:fb:dd:7c:e4:7f:b7:cb:c2:52:
                    aa:a1:9d:0c:45:c3:7a:65:32:23:29:61:ec:3b:d7:
                    8c:64:89:f3:82:a2:1f:4c:c8:85:4a:79:d6:38:e5:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6C:94:9F:31:8B:C2:B9:C9:52:04:F4:CE:42:4B:47:8A:40:66:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/6d91c088-4199-4ddf-8903-a38d9c8a4ae0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.36.0/24
                IPv6:
                  2602:f68e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:fb:61:26:e0:19:a3:30:f4:31:2f:93:78:d3:08:1e:ab:
         80:48:da:21:a0:b3:ce:03:c2:3c:31:1c:4e:93:1e:f2:74:39:
         3f:8e:38:30:23:4a:6b:21:57:e3:7b:03:d7:f9:d7:b5:44:17:
         87:e6:84:c6:be:fa:ad:b8:f9:91:c4:b4:c1:96:f4:68:2a:88:
         4f:c6:cc:36:fb:a0:38:ed:5b:a1:d0:b2:10:79:42:a2:58:ac:
         06:a7:05:44:9a:2e:e1:ef:23:e4:22:a9:50:07:cb:53:41:7b:
         11:75:cb:41:d9:9e:78:ed:ed:ed:0c:44:78:66:f3:21:be:50:
         6f:4e:6f:0b:c8:00:e2:a8:e0:71:3f:69:01:f9:1d:9d:8c:8b:
         1a:de:12:57:e0:97:13:06:6d:6f:77:07:66:36:ed:ae:4e:45:
         87:4d:43:71:75:71:07:4d:cc:c6:ca:8b:59:dc:b8:e6:6a:d6:
         04:a6:0d:d7:4d:c7:0e:0c:c9:79:63:e5:8b:75:3c:88:30:48:
         94:0c:b8:7c:fc:e3:c3:f8:e2:bc:92:fb:71:a8:5c:8f:3e:a7:
         bc:09:62:16:2b:4c:d1:6a:e0:ef:bf:9a:11:18:98:ba:bc:4d:
         3b:d6:70:e2:a4:e9:66:e2:c6:a6:fa:3c:66:a5:01:40:53:8f:
         fa:7c:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net