Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
File:                     19cb6623-eabf-410a-89de-eb6cae8e37a3.cer (raw, json)
Hash identifier:          JuVX/irayJiSbj/Ult+SmwYdw9ChdeFmHhAKqt1NDd0=
Subject key identifier:   0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858487E038DE7FC4BD792C2D339C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 09 Jan 2025 23:25:54 +0000
Certificate not after:    Wed 14 Apr 2027 22:25:54 +0000
Subordinate resources:    IP: 2602:f73e::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:03:8d:e7:fc:4b:d7:92:c2:d3:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan  9 23:25:54 2025 GMT
            Not After : Apr 14 22:25:54 2027 GMT
        Subject: CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:b1:c3:04:79:c5:2b:99:45:87:1e:63:b2:
                    89:fb:d3:6d:60:ef:01:d2:2b:de:d7:e3:15:c3:ed:
                    43:4a:d1:b5:58:04:05:28:00:af:c0:81:c6:31:83:
                    0a:18:63:2c:4b:ee:e3:8d:4c:c5:63:d5:b2:fa:d4:
                    70:e9:4e:41:be:4c:c3:bf:f9:d0:5d:c8:6e:7b:b7:
                    8c:5c:f5:e3:c4:f1:bc:aa:d2:66:38:e9:74:5c:b0:
                    68:ba:01:1a:a1:16:f9:ec:b3:15:4c:02:91:31:79:
                    9e:eb:80:6d:72:e6:d3:82:2f:1e:3e:91:d3:52:98:
                    71:94:23:60:e2:6f:40:7b:80:49:75:20:88:a7:a4:
                    60:b7:a2:f3:b9:02:43:53:33:fe:00:f0:56:27:7d:
                    63:b0:b1:6c:fe:95:7b:35:e9:dd:e3:02:cd:40:39:
                    54:e4:99:a3:9b:79:41:86:c9:54:33:26:be:a4:da:
                    4e:93:51:14:bf:1d:c1:51:5f:02:38:5d:6b:00:3d:
                    9c:44:b5:c7:f3:c8:44:4d:5a:49:e2:15:b7:b3:8b:
                    ce:3a:69:7e:6b:36:a6:78:26:a0:ab:fe:b7:e8:35:
                    a7:ac:ff:d0:5f:b8:b7:1b:ff:f0:58:ed:66:03:db:
                    4a:18:1a:24:26:68:47:44:69:32:47:16:cf:8c:77:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f73e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:28:f3:c6:64:35:42:42:1b:04:27:95:1a:07:dc:5e:78:
         f8:cc:a8:0f:6a:0a:1b:81:23:aa:7a:af:d6:a5:e0:d6:01:92:
         c9:c0:1d:1f:58:3d:02:48:5e:2a:40:3d:8a:77:2d:c2:2f:3d:
         bd:21:56:96:cb:6c:52:2d:27:a1:aa:47:e3:40:70:f9:a1:2c:
         40:6c:c4:9d:1d:09:23:d9:5d:0f:ee:5f:0d:12:3e:83:e7:8c:
         b6:7c:94:a1:8f:a5:1a:2c:a0:50:1c:fc:fa:d1:00:04:45:a2:
         ff:a1:76:65:c9:ba:fb:fa:68:68:b3:35:3a:b8:46:06:6a:b6:
         95:4e:cd:66:18:4c:44:23:41:8d:17:49:b1:02:86:89:cd:25:
         58:fe:77:78:55:27:c9:f4:df:f0:fd:55:cf:57:0d:20:e2:f6:
         f3:6b:61:7f:68:1e:0b:b4:56:48:2f:0c:60:1d:29:1b:a1:ea:
         e0:30:31:44:25:eb:4f:c8:5c:ce:b6:61:52:bd:ce:fc:a9:30:
         8b:c3:47:6b:c3:28:11:70:f7:d7:4e:43:aa:09:2c:aa:ff:b5:
         20:cb:b7:27:ef:05:98:8e:b4:a1:f1:0a:ee:ba:e1:fc:8d:46:
         c8:c4:f0:4f:b1:9e:49:cd:a2:64:96:83:30:f5:d2:88:6b:5a:
         52:ea:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net