Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b.cer
File:                     3b2e41b1-e97f-4595-8a77-77338bad4a7b.cer (raw, json)
Hash identifier:          LJAzcOxYLcOEpb4a5uhX5Xd6fjI0jotfj41lbgqyesU=
Subject key identifier:   9C:31:E5:4A:DA:C8:C4:04:8A:03:79:0E:37:94:41:F4:F3:6B:27:DF
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D52787B63C62CE0A5C2FEF000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/3b2e41b1-e97f-4595-8a77-77338bad4a7b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Mar 2022 16:29:37 +0000
Certificate not after:    Mon 22 Mar 2032 16:29:37 +0000
Subordinate resources:    AS: 1347
                          AS: 5006
                          AS: 5715
                          AS: 7821
                          AS: 11774
                          AS: 14370
                          AS: 15219
                          AS: 19897
                          AS: 40160
                          IP: 64.52.0.0/23
                          IP: 64.52.5.0/24
                          IP: 64.52.10.0/24
                          IP: 64.52.20.0/24
                          IP: 64.190.0.0/23
                          IP: 64.190.3.0/24
                          IP: 64.190.5.0 -- 64.190.9.255
                          IP: 64.190.82.0/24
                          IP: 64.190.136.0/24
                          IP: 64.190.147.0/24
                          IP: 64.190.200.0/24
                          IP: 64.190.207.0/24
                          IP: 64.190.241.0/24
                          IP: 74.120.92.0/22
                          IP: 137.192.0.0/16
                          IP: 192.207.245.0/24
                          IP: 192.209.20.0/22
                          IP: 198.174.0.0/16
                          IP: 199.86.0.0/16
                          IP: 199.199.0.0/16
                          IP: 204.72.0.0/15
                          IP: 204.220.0.0/15
                          IP: 206.8.0.0/14
                          IP: 206.144.0.0/14
                          IP: 207.229.192.0/18
                          IP: 208.68.84.0/22
                          IP: 208.83.16.0/22
                          IP: 208.93.224.0/22
                          IP: 209.18.128.0/17
                          IP: 209.32.0.0/16
                          IP: 209.105.0.0/17
                          IP: 216.198.65.0/24
                          IP: 216.230.66.0/24
                          IP: 216.230.80.0/23
                          IP: 216.230.85.0/24
                          IP: 216.230.88.0/24
                          IP: 216.230.90.0/24
                          IP: 216.246.203.0/24
                          IP: 2604:3000::/32
                          IP: 2604:d380::/32
                          IP: 2605:6d80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:52:78:7b:63:c6:2c:e0:a5:c2:fe:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 22 16:29:37 2022 GMT
            Not After : Mar 22 16:29:37 2032 GMT
        Subject: CN=3b2e41b1-e97f-4595-8a77-77338bad4a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:bc:6f:7c:25:c9:50:26:f4:a6:ac:b2:1a:
                    35:9d:fb:74:27:10:d4:7e:d0:2a:fb:16:f0:23:c7:
                    e6:2c:4d:57:1b:ce:cc:31:69:47:2f:ad:ec:3f:d0:
                    7d:6b:07:bc:29:2e:cb:56:08:93:66:1f:04:68:b5:
                    b4:ff:e4:95:80:15:e7:86:d1:15:70:24:98:83:7e:
                    89:58:be:dd:21:1a:a5:c1:2c:04:af:bc:2e:2f:3d:
                    dd:28:46:bf:22:e1:55:7f:83:38:5d:4c:18:64:9f:
                    03:9d:b5:cc:c4:21:a5:32:b3:9d:67:aa:22:ff:a4:
                    8d:77:a3:94:42:04:b3:6f:06:71:2d:cf:44:7f:0f:
                    50:90:43:2c:ec:bf:31:d2:b1:e3:ea:22:2a:88:8a:
                    61:0a:f2:fc:ad:5f:d0:78:07:a3:e3:e2:c1:17:cc:
                    5f:3e:c3:90:85:37:75:f3:4e:f9:46:65:79:4c:0a:
                    46:13:21:77:49:bf:95:21:71:c6:e8:89:f0:58:31:
                    9b:39:a2:d9:2f:e0:32:b2:57:df:92:f7:3a:ee:e2:
                    cc:3c:b8:b7:65:f3:b1:46:90:f7:ad:9c:24:56:60:
                    68:14:19:af:45:2d:19:21:a5:db:ef:1d:9c:5b:75:
                    56:fc:79:cf:25:df:ba:12:bf:b1:67:6f:f8:15:36:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:31:E5:4A:DA:C8:C4:04:8A:03:79:0E:37:94:41:F4:F3:6B:27:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/3b2e41b1-e97f-4595-8a77-77338bad4a7b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.0.0/23
                  64.52.5.0/24
                  64.52.10.0/24
                  64.52.20.0/24
                  64.190.0.0/23
                  64.190.3.0/24
                  64.190.5.0-64.190.9.255
                  64.190.82.0/24
                  64.190.136.0/24
                  64.190.147.0/24
                  64.190.200.0/24
                  64.190.207.0/24
                  64.190.241.0/24
                  74.120.92.0/22
                  137.192.0.0/16
                  192.207.245.0/24
                  192.209.20.0/22
                  198.174.0.0/16
                  199.86.0.0/16
                  199.199.0.0/16
                  204.72.0.0/15
                  204.220.0.0/15
                  206.8.0.0/14
                  206.144.0.0/14
                  207.229.192.0/18
                  208.68.84.0/22
                  208.83.16.0/22
                  208.93.224.0/22
                  209.18.128.0/17
                  209.32.0.0/16
                  209.105.0.0/17
                  216.198.65.0/24
                  216.230.66.0/24
                  216.230.80.0/23
                  216.230.85.0/24
                  216.230.88.0/24
                  216.230.90.0/24
                  216.246.203.0/24
                IPv6:
                  2604:3000::/32
                  2604:d380::/32
                  2605:6d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1347
                  5006
                  5715
                  7821
                  11774
                  14370
                  15219
                  19897
                  40160

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1e:34:5d:af:62:4d:50:eb:ae:58:d3:1e:cd:fa:f6:99:c2:
         14:eb:21:a6:5e:f2:9b:5b:d8:24:75:17:f5:a2:2e:23:3a:5f:
         3b:aa:8f:e6:8d:40:24:87:0b:a9:63:6d:ad:05:cb:26:10:f6:
         c8:9f:b8:cf:1a:a8:ee:3b:2f:30:37:84:f7:86:b2:22:0b:a8:
         63:18:a5:89:d9:46:de:75:02:74:4c:09:28:c1:4f:37:9a:af:
         8d:75:da:50:fa:8b:01:a3:cd:3e:4d:c6:f6:a5:2a:3a:54:5d:
         a9:fe:4b:bd:df:51:01:4d:c1:8e:3a:e2:39:3a:66:02:67:24:
         cf:92:05:fa:d3:ad:d2:e7:fa:fa:95:df:ea:89:fc:b9:bd:ee:
         fd:a2:70:30:55:7b:d4:14:3e:c9:7f:6f:24:ff:5a:62:bd:2f:
         d0:64:ef:20:cd:62:30:f1:5a:fa:b4:a2:18:de:2f:b9:63:8c:
         38:d2:60:d0:d4:ed:91:ad:f3:0e:59:57:62:19:10:14:0b:49:
         46:61:62:10:07:e1:c3:82:24:ec:3b:99:80:fb:19:67:36:fe:
         5b:0c:a3:be:d8:2f:bf:44:ec:bb:76:15:7c:35:be:eb:06:ea:
         72:2b:85:96:91:31:78:95:d3:11:fe:de:70:8d:ff:b4:41:24:
         89:34:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----