Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer
File:                     3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer (raw, json)
Hash identifier:          XdWMIkgBYQKD41DD5ghrafBrvVh7v+NngQQaMc0P47M=
Subject key identifier:   78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858497C3757B628C9D311DFF60880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 00:45:34 +0000
Certificate not after:    Thu 15 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 395635
                          IP: 192.101.119.0/24
                          IP: 2620:ba:a000::/48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:37:57:b6:28:c9:d3:11:df:f6:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 11 00:45:34 2025 GMT
            Not After : Jul 15 00:45:34 2027 GMT
        Subject: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:29:d1:28:bd:05:d7:78:4a:a3:60:e6:80:
                    0d:d8:a4:54:c6:77:c1:b3:19:b4:b8:23:2e:92:0a:
                    0a:fe:53:1d:05:15:68:88:5e:ab:43:9c:d3:d1:29:
                    75:2f:67:2e:f0:4f:46:7a:cf:1a:20:d8:72:ce:43:
                    0b:13:db:4d:d8:d0:38:77:9c:fb:5f:6f:22:99:bb:
                    bb:e0:4a:5e:95:8e:2f:66:9f:4c:c8:eb:e7:46:6e:
                    ea:eb:cc:c4:52:78:14:85:20:01:cf:3d:b1:26:27:
                    27:f2:1d:82:46:9f:0d:43:13:fc:d5:12:79:47:a8:
                    36:7d:a1:f3:bd:af:ba:8b:70:35:a4:b5:58:60:3a:
                    74:45:2e:ec:53:e2:92:bf:f2:91:d3:ca:bf:ee:30:
                    dc:a8:ed:03:4b:34:60:c6:8c:e0:df:0b:f5:18:da:
                    23:26:bd:1f:62:d9:77:8c:94:2e:8f:2e:d8:f0:f7:
                    ea:40:14:5e:04:74:14:df:03:8f:71:88:1c:54:a7:
                    91:66:2c:5b:6b:eb:84:ec:37:96:73:05:60:9e:7a:
                    e6:8e:59:67:66:f2:3e:01:3d:fc:9e:de:40:c2:84:
                    3b:d7:3c:1f:f8:c9:5b:86:d3:a9:6f:ca:cd:b7:47:
                    7b:90:b1:6e:bf:12:7c:c4:47:cf:1b:5f:de:42:99:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.119.0/24
                IPv6:
                  2620:ba:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:15:64:9d:f9:e5:d0:12:9c:21:e9:7c:82:25:0d:3b:12:
         5e:7a:5a:2d:57:b6:71:23:a1:75:34:e2:c8:20:7f:66:bd:82:
         4b:e6:ba:c8:9e:07:28:d0:53:5b:ab:41:68:55:42:60:d4:70:
         e5:f8:a9:9c:8b:db:c9:77:e8:bc:ab:d4:46:2b:1e:2d:4b:0c:
         81:75:ef:86:b1:89:51:a8:28:f6:2e:e6:7e:1d:71:2d:b8:2f:
         5a:83:a8:63:36:44:c9:d8:b9:18:15:5c:fe:77:28:16:fa:cd:
         b9:5d:f0:70:22:80:a9:3a:76:04:48:85:07:ac:1d:8a:67:24:
         4b:8b:5d:20:2f:7c:c7:93:96:22:5e:8c:89:8e:33:7e:20:c5:
         5b:7f:2d:39:e3:34:60:cd:01:20:41:0c:51:8b:60:c0:a8:11:
         c2:ce:e2:ed:2e:4f:22:dc:f3:c2:00:59:8a:03:74:69:98:df:
         1f:f2:40:28:29:95:a1:38:c4:2b:d0:1b:2e:de:ab:0a:b2:86:
         6e:74:36:0e:a3:e9:65:6f:9b:42:34:b8:d6:38:56:6e:bd:a0:
         eb:f2:e1:f6:62:d4:2f:59:6a:e1:99:c4:ad:8e:46:89:15:a2:
         80:10:a7:2a:ab:ee:88:1f:36:33:39:e1:b4:4d:ef:c2:98:1e:
         e9:0b:54:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net