Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fb2e1a2-8058-4735-a36f-c6816bf07e41.cer
File:                     2fb2e1a2-8058-4735-a36f-c6816bf07e41.cer (raw, json)
Hash identifier:          2QN995L8rJx120//Wg16dkAiyaiwkUoWAkftOhXM5VI=
Subject key identifier:   18:1B:2A:AE:80:64:57:45:13:EC:FD:8C:91:56:3C:DA:8B:F5:96:D0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858497B937DD20D49B89FA5E84880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fb2e1a2-8058-4735-a36f-c6816bf07e41/2fb2e1a2-8058-4735-a36f-c6816bf07e41.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fb2e1a2-8058-4735-a36f-c6816bf07e41/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 19:15:26 +0000
Certificate not after:    Wed 14 Jul 2027 18:31:19 +0000
Subordinate resources:    AS: 401651
                          IP: 2602:f68c::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:93:7d:d2:0d:49:b8:9f:a5:e8:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 10 19:15:26 2025 GMT
            Not After : Jul 14 18:31:19 2027 GMT
        Subject: CN=2fb2e1a2-8058-4735-a36f-c6816bf07e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:4e:78:1b:fb:64:66:b0:37:a0:bf:6a:cd:
                    87:bc:a0:5d:b0:1e:38:fb:d1:fa:3a:df:69:05:d1:
                    ed:3a:9f:c9:2e:72:5c:6a:65:74:24:00:cb:24:27:
                    bb:63:07:0b:94:96:bc:ff:fd:f3:90:ff:83:4e:0e:
                    d9:a3:9c:ad:5a:66:eb:59:62:0c:1a:06:74:86:c3:
                    78:e1:82:bc:eb:4b:10:3a:ca:a4:c7:0a:a6:9a:a2:
                    85:cf:91:31:f4:93:28:bf:d4:0e:c6:98:dd:04:79:
                    6a:32:bb:86:b3:78:3c:e4:0e:0e:3e:be:49:d0:1c:
                    c5:1d:99:51:3c:b3:1e:fb:ce:66:82:56:75:65:93:
                    6d:3a:e0:97:68:fa:86:b9:e3:62:ea:99:cf:ae:7c:
                    19:a7:e2:fb:4e:ae:1a:40:c0:10:03:9f:55:e4:14:
                    9a:c1:6f:c9:c1:17:d6:dc:65:b8:a8:2b:2d:fa:e0:
                    1f:c2:42:d3:3b:be:20:5d:cf:58:6e:65:67:99:c5:
                    94:1e:30:72:c8:d6:47:af:d5:03:49:6f:07:a5:3b:
                    12:2d:bd:d9:ec:e6:8f:8a:14:ea:f0:e3:f8:56:0d:
                    09:d6:ba:8c:2f:ee:19:0e:31:9c:b3:ec:b7:5c:e2:
                    4c:9c:cb:c6:65:8d:65:75:85:84:7b:20:98:71:67:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:2A:AE:80:64:57:45:13:EC:FD:8C:91:56:3C:DA:8B:F5:96:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fb2e1a2-8058-4735-a36f-c6816bf07e41/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fb2e1a2-8058-4735-a36f-c6816bf07e41/2fb2e1a2-8058-4735-a36f-c6816bf07e41.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f68c::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401651

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:6b:13:45:55:c8:3b:b5:38:6f:21:82:f4:5f:d3:c3:d8:
         5d:ae:9e:59:51:ad:70:b1:d1:c0:51:39:54:42:47:83:d2:4d:
         55:1f:3e:83:28:9a:2c:a8:f3:d9:05:1b:1a:4f:2c:c0:68:4d:
         a4:8a:72:2f:4c:91:d5:fe:b0:2b:39:b7:43:2e:e4:05:d6:8f:
         84:14:3f:4e:f3:7a:dd:27:91:13:5e:28:bd:67:a9:fd:79:a4:
         c2:41:73:fb:dd:3d:9e:fc:3b:83:f3:6b:d8:1f:f1:8b:14:50:
         2f:7f:35:24:68:d5:95:23:46:4d:90:59:1c:21:0a:3b:ce:d3:
         da:10:d1:59:0a:e0:99:bf:c2:c7:82:26:1d:f6:5e:ab:39:58:
         30:db:71:bf:f2:18:55:ad:77:cd:5e:4b:44:b8:11:b0:93:75:
         ee:dc:42:7b:4e:c6:3d:54:23:e9:a6:61:37:d1:96:0b:34:9b:
         a9:39:8a:8f:ce:dd:02:8f:07:2f:8b:94:a1:83:90:7e:1b:4d:
         aa:de:3f:7e:12:f5:d2:37:07:a2:c3:4e:e8:f9:0f:c5:48:f6:
         f3:68:f6:c0:47:8b:15:13:95:3e:c2:d3:2f:89:3e:35:1a:4a:
         a7:1e:00:18:98:e7:be:c9:79:a4:07:cb:f6:d9:f0:f6:b7:1d:
         b1:62:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:20 2025 by rpki-client on console.sobornost.net