Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer
File:                     bc3aa731-9547-4b21-8f65-60f3717ca369.cer (raw, json)
Hash identifier:          Qyp+E46e/33FcQUioOUfN8jOURbTi3EhO39NtmmatqU=
Subject key identifier:   51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858496EAE2936F9A51B39CC3EF500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 06 Apr 2025 04:23:39 +0000
Certificate not after:    Sat 10 Jul 2027 04:23:39 +0000
Subordinate resources:    IP: 23.182.136.0/24
                          IP: 2602:f89b::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:ae:29:36:f9:a5:1b:39:cc:3e:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  6 04:23:39 2025 GMT
            Not After : Jul 10 04:23:39 2027 GMT
        Subject: CN=bc3aa731-9547-4b21-8f65-60f3717ca369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:dd:73:73:31:43:6b:9d:24:30:11:e0:cf:
                    d4:25:da:70:2b:6c:04:10:7b:e7:ac:d3:da:bb:92:
                    60:50:cc:c5:2f:6d:7e:38:d1:8f:69:84:2c:bb:c1:
                    f5:3b:d1:70:87:1e:9a:f2:64:fd:27:2f:56:af:92:
                    97:38:b3:1c:36:2f:69:1e:c1:8c:b2:1e:a7:2d:a3:
                    93:15:75:75:0d:11:ba:e0:74:96:58:08:43:7d:fe:
                    a0:e6:7d:c2:1b:cd:1b:c3:87:80:11:d2:6d:c6:15:
                    d8:48:e6:c0:e4:b1:bb:3f:1a:e5:70:d1:10:63:61:
                    f2:97:27:a4:77:0c:c2:bb:aa:64:f2:8a:f3:a1:4d:
                    f3:7d:a5:53:5d:ba:fc:05:d8:00:46:9e:9e:ed:06:
                    2d:5e:23:58:89:1c:9d:e9:11:c8:9e:30:96:da:22:
                    91:47:f8:e0:3b:f1:bf:cf:ec:0a:ab:4f:a6:81:c1:
                    c4:ad:1e:9d:69:28:d7:59:b9:45:5f:54:ea:69:f3:
                    4d:6e:83:40:5f:59:63:b4:09:e1:36:e6:99:2b:2b:
                    6d:8a:e8:39:21:d3:ca:97:24:bf:ba:97:b0:ec:78:
                    0c:dc:2f:72:17:ea:d4:76:60:40:f1:a6:9b:5c:80:
                    3d:dd:90:b2:8f:a9:11:01:67:b2:b2:94:f4:43:b7:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.136.0/24
                IPv6:
                  2602:f89b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8c:62:1c:fd:48:89:54:b6:5c:ef:80:65:f8:db:1a:35:a0:
         8e:62:6a:57:89:d4:2e:9d:85:f4:26:0a:17:34:cc:4f:fe:11:
         ea:6a:b7:90:59:bf:e2:44:e3:fa:39:96:4c:76:fa:2c:3d:cf:
         21:1c:ed:b5:ec:79:1e:4d:d8:8c:72:5c:0a:13:03:77:b7:ee:
         21:85:28:5c:cd:1d:56:b5:ce:64:24:7d:8c:ab:1a:a3:b6:5c:
         c3:66:8f:f7:73:04:ab:16:fe:ab:af:a0:a6:14:2d:df:b0:a9:
         68:26:f9:6b:53:8b:0e:9f:5b:3c:ef:06:b5:93:0f:71:3d:9f:
         22:c6:d2:42:03:50:46:76:1c:0b:05:3a:22:f4:85:57:00:94:
         d4:70:2e:8b:6f:54:67:20:38:7e:48:dc:f8:06:b1:4a:ed:15:
         2f:5e:8c:b2:3d:25:90:fe:f8:1e:5d:ee:98:9b:40:56:ab:5d:
         62:2b:61:b2:24:ce:5b:ea:96:cf:ea:f3:01:8c:96:39:c0:41:
         94:81:8f:b7:f1:61:72:c7:5c:69:47:0c:44:68:57:52:cb:89:
         eb:6d:e7:5b:d4:18:bf:83:8c:08:bc:d4:c2:a7:bc:8e:44:90:
         5e:d6:ea:23:72:86:5c:d2:ea:72:a5:f9:de:47:ca:10:63:e4:
         42:f7:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net