Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea.cer
File:                     fe3ef598-e802-4fab-a220-9d90cd5b74ea.cer (raw, json)
Hash identifier:          AgI7yfbSzFAv/FCpPH1avfHLFCWGkWTFPRVpLIIkf2k=
Subject key identifier:   AE:B9:B7:C1:4F:27:6A:D9:9C:C0:CD:25:76:0B:66:A7:72:65:53:82
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849754E7E728226C3987C6C4CE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/fe3ef598-e802-4fab-a220-9d90cd5b74ea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 13:21:33 +0000
Certificate not after:    Mon 12 Jul 2027 13:21:33 +0000
Subordinate resources:    AS: 393936

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:4e:7e:72:82:26:c3:98:7c:6c:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr  8 13:21:33 2025 GMT
            Not After : Jul 12 13:21:33 2027 GMT
        Subject: CN=fe3ef598-e802-4fab-a220-9d90cd5b74ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:7d:6a:ce:60:04:95:f8:20:5c:ff:f4:c4:
                    b3:17:dd:75:d8:fa:8d:a5:37:a2:53:b6:ac:57:cf:
                    e0:39:c8:48:40:43:ba:ca:27:94:e4:63:20:1f:bf:
                    1d:de:e6:03:8c:15:6a:19:ce:0f:b1:c8:25:bf:09:
                    d9:ec:60:03:19:b2:c2:e3:2a:ad:1b:10:c1:e0:2e:
                    df:32:74:bb:85:45:06:38:43:b8:c1:af:d2:bf:a4:
                    e4:24:b7:46:f2:9d:04:b1:7a:46:89:e5:a6:69:9b:
                    a4:00:46:14:98:ad:57:fa:68:68:27:4a:15:bc:80:
                    68:6f:44:dc:8b:de:c6:f1:09:25:52:32:39:eb:7f:
                    8b:dd:6b:8c:7e:16:d2:27:e4:93:4c:1c:16:8a:60:
                    84:6b:85:4e:52:25:4e:e9:dd:15:72:a4:69:46:28:
                    cc:12:84:e0:3a:91:c9:bd:54:b2:96:96:95:46:d6:
                    aa:90:ac:fc:95:7a:54:8c:12:da:e2:2d:02:79:be:
                    65:05:f3:7c:86:7a:2c:9c:f5:08:e0:05:28:59:d7:
                    c1:96:ac:f4:d9:9b:bd:ee:46:2f:fd:5d:bc:bf:66:
                    bf:94:f4:95:0d:89:3d:b3:43:4d:59:e4:69:0c:6a:
                    ba:22:ad:63:ff:15:ad:c3:08:57:fe:20:bc:78:67:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:B7:C1:4F:27:6A:D9:9C:C0:CD:25:76:0B:66:A7:72:65:53:82
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/fe3ef598-e802-4fab-a220-9d90cd5b74ea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393936

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:4f:f9:a5:71:d0:df:db:87:3d:31:b6:03:19:7a:fd:cf:
         84:84:5e:8f:55:c9:ab:6e:ae:81:9b:30:1e:f2:97:73:6d:0a:
         cd:4a:b6:21:8a:45:0c:1b:83:c3:66:5b:fd:c3:8f:e4:04:6c:
         ed:54:f5:12:c2:c3:a3:6f:93:ad:45:77:d0:26:9e:8b:21:ef:
         f8:2a:57:40:57:86:d6:4a:c0:ab:56:52:b6:43:1b:c0:84:28:
         23:99:47:68:31:6e:3d:d8:d2:c7:d1:ff:1a:4d:67:40:58:d4:
         cd:61:9c:21:e1:ef:85:ee:b7:d8:8d:af:61:4d:87:05:94:30:
         60:ba:07:1e:fe:98:59:0b:d8:3b:c9:8f:8d:a2:7f:c7:d0:87:
         5f:b0:e2:ec:b6:bf:4a:70:c3:3a:26:07:c6:85:b1:14:47:c0:
         c3:0a:ec:b5:87:9c:80:32:be:02:ba:0a:b7:0c:a4:71:0b:39:
         46:3a:d6:f0:fd:15:dc:6a:85:91:ec:43:9d:63:a6:b4:dd:4a:
         9d:66:43:30:af:20:80:7b:67:fa:7d:ac:2d:f2:30:d8:99:ae:
         ec:1f:87:e4:00:57:60:d3:15:c7:2a:b8:db:b0:4c:63:8c:41:
         d7:c3:e5:d9:bf:31:33:5e:da:2f:24:c3:f1:e1:46:5b:85:49:
         b9:97:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net