Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
File:                     bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer (raw, json)
Hash identifier:          Zjw+A5VxAoyRTp6nY/9S4dbkSVcuTLzfcBry0FIX4e4=
Subject key identifier:   5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858496E41EADF6A3387FE64CEAD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 06 Apr 2025 00:45:33 +0000
Certificate not after:    Sat 10 Jul 2027 00:45:33 +0000
Subordinate resources:    AS: 46450
                          AS: 62580
                          IP: 64.112.228.0/22
                          IP: 69.12.26.0/23
                          IP: 74.80.230.0 -- 74.80.233.255
                          IP: 104.129.136.0/21
                          IP: 104.192.216.0/22
                          IP: 104.225.240.0/21
                          IP: 142.154.192.0/19
                          IP: 158.106.192.0/19
                          IP: 172.93.8.0/21
                          IP: 173.205.208.0/21
                          IP: 192.81.136.0/22
                          IP: 199.34.244.0/22
                          IP: 208.64.24.0/21
                          IP: 208.80.32.0/21
                          IP: 209.178.208.0/21
                          IP: 216.158.128.0/19
                          IP: 2606:3580::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:41:ea:df:6a:33:87:fe:64:ce:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr  6 00:45:33 2025 GMT
            Not After : Jul 10 00:45:33 2027 GMT
        Subject: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:75:0a:0e:ef:63:f1:9f:d6:c3:4e:ad:3c:
                    90:95:0e:e6:81:33:7d:68:1a:b7:f6:52:98:af:5a:
                    aa:a9:d3:91:4b:7c:62:54:05:0c:83:fe:08:b5:ae:
                    58:39:25:b7:36:7d:c4:06:59:47:e1:a3:b4:ed:4f:
                    0c:62:26:c4:2f:fe:99:73:ba:5f:bd:18:27:30:68:
                    d0:46:f1:46:34:6a:cd:f2:d3:16:06:d0:78:e0:97:
                    0c:da:a5:e2:91:fc:c8:e1:3b:60:f6:50:be:40:35:
                    aa:7d:a8:a1:fa:c4:18:1f:82:c5:de:44:54:03:f9:
                    c4:40:af:7c:06:13:29:bc:70:35:81:38:93:cc:fb:
                    35:cb:22:6a:0e:54:a1:98:4f:95:8e:6a:10:16:d6:
                    52:8b:72:7b:a5:93:9b:9d:8f:1f:46:59:84:3b:bc:
                    db:a1:29:2a:b3:f1:65:93:5c:65:8f:66:60:34:1a:
                    12:b5:53:f8:21:61:f3:bc:f5:6f:9c:d8:f5:a8:d5:
                    63:f1:12:94:c6:f0:b5:7b:9c:e1:6e:98:fc:88:28:
                    51:c3:8d:c4:4c:5a:74:23:03:73:5a:a6:d8:9d:30:
                    8d:4d:1f:01:60:13:8c:af:96:b8:40:37:bf:97:5b:
                    c0:5d:83:84:d3:48:ec:68:38:24:0e:e9:fa:fe:75:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.228.0/22
                  69.12.26.0/23
                  74.80.230.0-74.80.233.255
                  104.129.136.0/21
                  104.192.216.0/22
                  104.225.240.0/21
                  142.154.192.0/19
                  158.106.192.0/19
                  172.93.8.0/21
                  173.205.208.0/21
                  192.81.136.0/22
                  199.34.244.0/22
                  208.64.24.0/21
                  208.80.32.0/21
                  209.178.208.0/21
                  216.158.128.0/19
                IPv6:
                  2606:3580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46450
                  62580

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:00:55:83:99:12:d5:27:30:f9:cc:75:95:b8:17:85:e5:
         65:a4:f4:a6:5b:66:9c:64:c3:09:46:3c:a3:c7:46:51:dd:0a:
         b2:a5:dd:10:52:a9:55:0e:9a:d8:33:2c:07:c5:1e:52:95:5e:
         13:bf:5e:89:8b:0a:d9:41:0a:e4:ad:3f:75:eb:5a:09:71:ea:
         30:ce:aa:9b:35:d9:7f:70:c5:8f:5a:82:68:fe:de:5c:e3:4f:
         a2:c2:28:88:6c:1a:6a:c0:bf:e7:b3:25:39:7a:f5:3a:86:90:
         8b:4c:b2:6b:9e:12:f6:1b:3a:a6:a5:a5:b4:19:0e:0b:a8:a0:
         07:2f:2c:9a:ff:1c:9f:55:b8:05:e6:1f:e4:4c:80:57:94:b5:
         a5:fa:9a:41:77:cc:95:1e:15:5d:9f:32:dd:2e:80:65:f1:05:
         01:c2:41:ea:5b:54:aa:26:16:82:31:a3:5c:c3:7e:94:2e:eb:
         ba:ca:c9:6e:46:1b:f6:94:8f:f1:7a:ce:8f:26:14:8c:e4:f1:
         f1:40:af:14:3b:97:f0:cb:55:eb:d0:5a:bd:9d:13:78:13:73:
         8d:68:f2:f6:01:25:0b:3a:9e:08:02:63:1f:df:55:75:25:a4:
         e0:f9:52:76:d4:02:4a:66:97:02:65:4f:f0:28:f3:04:27:81:
         66:ed:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:34 2025 by rpki-client on console.sobornost.net