Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
File:                     d3d6dade-3164-4681-8f0a-34023fdf6934.cer (raw, json)
Hash identifier:          +oFwRXtVfWR3Uj8ATWHxg87Co3fYKVzsJTGgNhaO1cQ=
Subject key identifier:   C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849658E356A443EF7C23A18E200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 21:57:00 +0000
Certificate not after:    Tue 06 Jul 2027 21:57:00 +0000
Subordinate resources:    AS: 399349
                          IP: 2620:1bd::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:8e:35:6a:44:3e:f7:c2:3a:18:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  2 21:57:00 2025 GMT
            Not After : Jul  6 21:57:00 2027 GMT
        Subject: CN=d3d6dade-3164-4681-8f0a-34023fdf6934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:60:2a:54:85:d5:57:5d:e1:62:c1:5a:ac:
                    c2:8a:92:a4:4d:49:98:36:5a:97:e1:a8:88:0d:71:
                    70:bd:06:ff:b1:ad:a3:9f:af:be:0e:b5:85:3e:52:
                    9a:68:e5:64:f9:b9:7e:c8:27:7e:91:a6:b5:f8:21:
                    06:55:32:5a:de:a0:af:cb:4c:f8:df:8a:61:d8:8b:
                    3e:70:71:6a:2f:f4:08:70:74:9d:c8:b8:c0:bb:1c:
                    1c:f5:d4:dc:92:8a:25:3c:42:55:a0:66:6e:6a:4e:
                    07:ec:2a:3e:b3:92:0a:86:91:b5:e1:07:be:6f:60:
                    e9:79:14:13:15:37:40:c8:7d:c7:47:47:c9:d9:47:
                    6b:93:d4:bb:48:f1:33:07:d2:9e:a5:70:e4:fe:92:
                    f7:8a:2c:30:9f:3a:8a:37:b3:13:95:36:7f:ad:23:
                    d3:5a:60:53:01:b7:de:d3:3e:8d:c1:db:a6:ca:ac:
                    ea:63:f2:11:d7:96:7b:47:b0:78:18:8d:ac:cb:b4:
                    74:fd:54:a9:30:08:c3:ca:64:71:75:1f:aa:b5:55:
                    7f:d6:79:fb:46:83:1f:92:7f:f5:aa:b0:e1:ec:8a:
                    d3:f0:f7:dd:19:63:2f:db:e4:c6:94:24:8a:3b:11:
                    2e:61:d2:3d:e6:c6:c1:a5:43:1a:e9:d7:ca:f4:ac:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1bd::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399349

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:75:d4:92:03:a0:d0:e9:9f:f4:49:60:97:83:65:99:06:17:
         1c:28:e3:f3:c0:b0:82:54:1d:9b:d5:30:88:78:67:65:31:ed:
         55:59:d2:4c:83:b8:50:99:1c:c9:0a:fb:12:cc:bb:71:4e:10:
         df:85:93:01:b9:f0:01:db:27:f9:ea:25:03:6e:5f:81:58:44:
         ff:cb:40:7c:af:db:09:5c:b3:0d:7b:54:54:1e:b8:4b:db:82:
         70:19:43:3e:bb:29:03:28:73:cb:c8:6f:ee:fa:b3:ad:1d:0d:
         7d:18:4e:3a:d4:b4:1d:10:98:f1:fe:1b:85:6c:68:74:68:b8:
         36:65:01:79:44:10:ca:06:e0:f6:d5:b3:a8:b6:f2:f4:6a:cf:
         cc:fb:57:54:22:bc:ec:23:ec:d6:8b:b2:2c:be:26:3d:3c:03:
         fd:ce:65:ee:33:49:86:07:b4:ff:73:e3:7f:b0:d4:db:e5:02:
         24:86:51:ed:e3:75:9e:f0:07:8f:f8:66:d6:7e:8f:d9:d6:aa:
         d3:44:0b:65:45:b6:cc:bb:56:ea:33:00:ec:8d:da:71:95:2d:
         9d:1e:92:38:25:db:56:df:9b:ae:e7:40:ce:bd:62:ef:1a:26:
         ba:b0:ac:cf:45:44:8a:56:c2:0f:fd:cc:c1:c0:17:bd:c9:3d:
         fc:6a:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net