Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/D6E016549D8E355A696915B7EA08346EAE3B7A35.cer
File:                     D6E016549D8E355A696915B7EA08346EAE3B7A35.cer (raw, json)
Hash identifier:          Jnyog64ZWQorme4novkhG+yQKTOpwL/X/7f1hIeR3QU=
Subject key identifier:   D6:E0:16:54:9D:8E:35:5A:69:69:15:B7:EA:08:34:6E:AE:3B:7A:35
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       3CDB251ACAF2B40E2C67B73CF03A71904DE41D1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Manifest:                 rsync://rpki.co/repo/August/14/D6E016549D8E355A696915B7EA08346EAE3B7A35.mft
caRepository:             rsync://rpki.co/repo/August/14/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:43:01 +0000
Certificate not after:    Mon 20 May 2024 21:48:01 +0000
Subordinate resources:    AS: 7719

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:db:25:1a:ca:f2:b4:0e:2c:67:b7:3c:f0:3a:71:90:4d:e4:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: May 22 21:43:01 2023 GMT
            Not After : May 20 21:48:01 2024 GMT
        Subject: CN=D6E016549D8E355A696915B7EA08346EAE3B7A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:69:61:12:ed:95:f3:c4:5a:1a:84:13:6a:
                    68:8c:e2:14:44:e3:d7:b6:ee:cc:75:ce:e8:a7:dd:
                    6c:14:42:a0:57:fb:ab:b0:64:37:56:e6:c2:ea:28:
                    e5:6a:d7:81:88:cd:53:fd:12:32:7c:4a:a0:10:2f:
                    09:dc:84:11:a9:6e:0b:d0:24:e8:10:66:a9:8f:36:
                    8b:2c:26:8d:71:8c:f9:6d:f6:4f:7d:d8:6c:9e:58:
                    6c:ef:29:9b:3b:53:01:9e:81:82:6c:30:56:0e:a3:
                    49:ef:ed:67:19:90:41:eb:30:76:c5:e2:b1:c5:f8:
                    8d:4f:8b:25:8a:f9:73:ec:f6:4d:9b:75:0e:b2:81:
                    45:b6:96:e6:01:1e:72:97:c7:1b:77:a3:f7:fd:70:
                    0d:e7:21:11:d9:89:76:fe:16:c6:91:c2:ab:d7:64:
                    6f:79:23:2b:97:ab:ae:35:2e:c0:5a:dd:6b:d1:15:
                    0c:61:60:ba:fb:ac:62:df:b1:a6:ba:09:f7:f8:f4:
                    5c:bc:17:63:4a:3f:7a:d9:69:33:ee:a3:35:68:92:
                    f2:73:f7:6c:f3:f0:63:2f:b0:c3:88:dc:86:2c:19:
                    fa:3b:db:b0:62:38:94:fa:04:3d:fa:b8:a4:97:19:
                    60:e4:3e:d0:2e:4c:fe:9e:9d:cf:51:9e:82:b2:74:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:E0:16:54:9D:8E:35:5A:69:69:15:B7:EA:08:34:6E:AE:3B:7A:35
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/14/
                RPKI Manifest - URI:rsync://rpki.co/repo/August/14/D6E016549D8E355A696915B7EA08346EAE3B7A35.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719

    Signature Algorithm: sha256WithRSAEncryption
         63:40:3c:e4:c2:e7:71:c1:94:b4:1f:54:30:96:f3:d4:dd:f5:
         11:64:4a:ad:c8:88:78:0c:98:54:8b:53:c6:b9:6f:fe:4c:59:
         1b:25:a7:93:03:26:bf:5b:d8:55:56:30:4c:4e:32:d5:de:09:
         a4:c8:a6:c4:08:23:d8:e1:da:9d:c2:0c:ca:e9:63:36:7a:75:
         79:a7:71:4f:e5:28:a4:aa:06:c2:53:ba:94:77:fc:ba:70:d9:
         64:cc:77:22:fa:a0:a9:b9:fd:9d:7f:b1:ba:17:60:5c:93:a3:
         99:bc:3f:a6:fa:56:2c:bf:0a:67:5f:36:45:ff:9b:2b:60:ab:
         c6:f5:e1:22:f3:d4:fd:55:f0:39:1a:41:1e:fd:1a:88:e8:6f:
         2c:6b:58:b3:49:14:8f:31:8c:ec:7b:ab:93:ca:fe:74:69:5f:
         cd:f0:dc:f1:12:ac:dd:eb:3e:0b:d1:d1:56:c1:66:10:aa:db:
         44:6d:fe:c0:da:9a:89:28:27:9e:fa:13:20:c3:02:9b:99:15:
         35:fc:e6:cd:78:11:da:44:d5:50:91:ad:e8:66:7b:9c:79:a5:
         b2:88:67:1d:79:07:67:04:f4:ec:ba:56:8a:42:1a:b8:7d:49:
         c4:3e:17:d8:08:49:67:f0:44:66:5a:c2:c2:29:e8:23:f6:b3:
         7f:31:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----