Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a.cer
File:                     85dd82c5-5f88-45b7-afc5-f84290d7414a.cer (raw, json)
Hash identifier:          3kaaQzUkZ9DOMvtkc6VxOhfz0VF/Z+YD4S8SjJU0R1M=
Subject key identifier:   9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584961F3018B8FA8AF64D598BA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Apr 2025 14:56:52 +0000
Certificate not after:    Mon 05 Jul 2027 14:56:52 +0000
Subordinate resources:    AS: 17119

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:f3:01:8b:8f:a8:af:64:d5:98:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  1 14:56:52 2025 GMT
            Not After : Jul  5 14:56:52 2027 GMT
        Subject: CN=85dd82c5-5f88-45b7-afc5-f84290d7414a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:88:39:59:b9:c4:f6:14:b5:7d:29:4a:c5:
                    4e:56:84:0f:3b:a0:15:cb:6b:d2:86:74:50:86:e1:
                    e0:7a:c7:c1:75:c2:d2:01:7c:48:c4:ac:5f:d3:b9:
                    84:ca:49:70:57:19:e5:ae:b9:60:b3:a0:c7:64:e8:
                    f7:23:e2:28:82:e4:8c:c3:ca:9c:fd:c0:75:ee:4c:
                    c5:5d:40:3c:9d:ac:ee:96:43:fb:b3:f2:91:97:4f:
                    fa:4b:b2:5c:06:21:87:5e:ca:99:5f:ed:c2:2b:87:
                    88:5a:4e:20:7c:26:63:b1:9c:ea:55:09:da:38:fc:
                    b9:be:97:a9:7d:de:7e:c4:3e:46:13:62:60:9c:8b:
                    96:08:04:fd:25:40:72:14:4f:af:aa:66:fe:51:4e:
                    51:76:14:5e:e7:65:14:e3:ae:49:b2:19:c8:ae:64:
                    5e:c9:93:c8:79:70:14:9c:7e:82:92:d9:08:88:25:
                    15:8e:9e:e8:ff:13:04:8f:d4:b2:54:9a:e7:80:a3:
                    e6:dd:5e:24:4a:64:6f:dc:d7:f4:45:5f:86:a5:43:
                    67:83:7a:42:c2:94:4b:96:59:d5:e3:9c:84:21:41:
                    7e:b6:c6:f4:d2:05:e3:5c:f4:8d:f0:56:71:e6:70:
                    2a:68:1a:c9:68:73:b4:71:a2:31:f5:c1:36:ad:c0:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17119

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:59:bb:38:ab:2b:21:d9:5e:03:9e:bc:3a:7f:85:ce:db:1e:
         42:43:d4:c0:34:c0:d0:f4:7c:b9:cb:20:94:e6:25:40:7e:65:
         71:c2:ea:2d:69:e1:e1:7e:c7:02:6d:72:54:53:39:76:85:eb:
         aa:0e:ad:73:90:c5:6e:f3:b9:03:7c:c5:93:c6:8c:ac:ca:17:
         9a:e9:3f:5e:f8:06:a9:f1:5f:39:49:49:20:04:95:64:98:c1:
         ae:68:e5:83:2e:50:db:68:ca:d2:da:49:c3:6a:51:b8:38:d9:
         c4:ec:48:db:5e:75:ac:e4:06:86:07:a3:5f:fc:e2:7f:3c:18:
         9f:c9:ae:14:ae:cb:28:b3:04:88:c1:46:b6:d4:e2:9d:5b:7b:
         01:9c:97:35:ba:e1:1a:99:d2:f9:3d:81:e5:5a:aa:2f:e5:f0:
         80:44:9a:12:13:2f:ef:7e:a7:37:30:d5:00:a7:84:cf:03:5d:
         2b:00:9b:4d:84:71:dc:b7:44:31:92:69:8f:43:af:0d:00:be:
         a6:28:d9:92:4e:e5:6c:50:66:c9:bd:31:88:60:ba:aa:6a:90:
         8f:d8:58:ef:9a:06:ba:e6:d6:8d:e1:25:d9:4d:0f:22:e3:e7:
         9f:5c:fd:40:9b:30:60:22:01:c5:58:02:30:cc:dd:70:b7:b9:
         3c:67:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net