Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.cer
File:                     c1fd7fee-281b-4e7d-abfe-b2e4198147ae.cer (raw, json)
Hash identifier:          SYsQEB+1/5RWMo+lTcBh1MF041aFcEZQ4ORwOcB3ukU=
Subject key identifier:   84:D5:C3:E4:71:A2:F0:A6:30:05:D2:0D:F4:45:63:CD:DD:57:1F:0B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849633DDDA95829F9E3F349B080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 02:03:30 +0000
Certificate not after:    Tue 06 Jul 2027 02:03:30 +0000
Subordinate resources:    AS: 54319
                          IP: 23.134.188.0/24
                          IP: 2602:f6e3::/36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:3d:dd:a9:58:29:f9:e3:f3:49:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  2 02:03:30 2025 GMT
            Not After : Jul  6 02:03:30 2027 GMT
        Subject: CN=c1fd7fee-281b-4e7d-abfe-b2e4198147ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:cc:76:1a:3b:06:9a:b2:f4:33:3d:89:66:
                    d6:2e:73:da:67:d5:23:01:e9:71:87:87:44:a5:92:
                    3e:72:88:9b:3e:8a:0a:c6:e8:44:c0:e8:af:96:ff:
                    cd:73:4c:5c:b7:7e:6b:03:e1:6b:c3:91:7c:f7:97:
                    3a:9f:d2:15:d1:4c:7f:3c:58:59:1c:52:21:ca:25:
                    d4:a5:5b:13:59:da:c3:56:3f:9a:1c:c1:d0:ee:45:
                    8f:43:f9:4c:00:81:0f:d6:8f:90:a6:a4:33:8e:cd:
                    30:db:f5:ad:17:00:b3:be:44:26:77:d4:86:28:e1:
                    a7:dc:96:4f:d5:aa:67:27:5c:77:63:19:8b:df:0f:
                    fb:06:ad:86:11:16:36:a1:af:1f:a1:3d:3f:33:01:
                    13:81:7f:dc:b5:38:cf:52:96:4c:7b:af:df:a7:09:
                    1e:42:10:2e:53:80:53:e3:d3:27:ea:b7:81:19:c7:
                    44:f6:8c:2e:28:ad:8b:b7:0f:ea:c3:18:1e:ba:bc:
                    ab:47:a5:24:0e:e6:5a:82:b6:a1:9f:f4:1e:63:64:
                    7b:5f:78:67:92:19:a9:f5:8e:8a:e3:83:02:85:52:
                    3f:32:8e:ed:47:18:1b:fb:bc:16:cd:6a:65:44:4e:
                    33:49:1f:f3:bc:ab:15:f3:16:a9:a6:b5:2e:24:99:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:C3:E4:71:A2:F0:A6:30:05:D2:0D:F4:45:63:CD:DD:57:1F:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.188.0/24
                IPv6:
                  2602:f6e3::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54319

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:43:b0:87:46:8f:ef:b6:7f:03:f5:63:76:29:33:78:66:
         e3:43:a2:ec:40:75:1e:a1:0d:ef:9d:cc:06:49:fc:ff:f8:46:
         e3:8d:61:7d:1b:f5:c2:a2:24:f7:1f:59:db:3b:05:2e:70:9a:
         87:3b:b1:8d:ee:9b:73:7c:f7:96:2c:52:67:2c:3e:fe:ed:0f:
         87:8d:3e:20:49:26:02:cd:a0:a0:cf:de:72:3d:db:5a:18:f7:
         45:30:28:e2:ff:96:9d:d0:d5:9f:4c:ab:e6:c9:f5:5a:c0:46:
         d8:7c:c4:f7:f6:03:d3:1b:3a:9e:99:31:a8:c9:41:bf:f6:96:
         ec:95:d4:7e:9f:cb:8c:60:49:9d:b3:b9:f4:01:16:a4:d2:61:
         fd:c5:7d:ef:e9:9a:f7:d2:0c:26:ac:13:09:29:4a:8a:b9:0a:
         df:80:49:30:85:83:10:97:43:0d:d1:d6:d6:b7:9f:ad:b5:86:
         8e:c4:ab:f2:aa:76:ea:0e:4e:14:a1:ea:b5:15:c9:d5:c4:03:
         3a:a3:88:80:2c:1a:18:f8:55:9c:8f:cc:be:9f:05:2e:82:1f:
         2f:5f:38:62:ec:a7:aa:a6:9a:84:9a:8b:e1:dd:1c:2e:5b:12:
         3f:0a:8a:7b:60:99:f7:45:a2:24:59:73:86:83:ad:8d:fc:09:
         46:3f:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net