Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer
File:                     578540a4-eada-4f9a-b817-b3e81b5c2663.cer (raw, json)
Hash identifier:          k3e241qK26sAnEsL1nrG1e2dVb8iDhDS3NbWdzd8v4Y=
Subject key identifier:   05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483535749C9CE9A04399800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 29 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 6126
                          IP: 130.119.0.0/16
                          IP: 130.200.0.0/16
                          IP: 138.42.0.0/16
                          IP: 141.202.0.0/16
                          IP: 155.35.0.0/24
                          IP: 155.35.2.0 -- 155.35.33.255
                          IP: 155.35.36.0 -- 155.35.45.255
                          IP: 155.35.48.0 -- 155.35.225.255
                          IP: 155.35.227.0 -- 155.35.231.255
                          IP: 155.35.233.0 -- 155.35.255.255

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 16:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:57:49:c9:ce:9a:04:39:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 29 19:06:39 2025 GMT
        Subject: CN=578540a4-eada-4f9a-b817-b3e81b5c2663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:92:4d:10:b6:e0:da:58:2e:09:75:c0:c5:
                    8c:a7:bc:a4:79:56:36:d3:5b:04:08:64:b9:bf:96:
                    14:74:29:68:1d:7e:04:97:bc:28:6b:08:e6:55:fe:
                    ba:1c:d7:15:df:73:dc:37:40:f4:86:96:d9:7c:20:
                    09:a5:66:26:a6:90:43:75:98:95:a0:b2:38:b7:05:
                    7b:a5:12:34:c7:57:bd:f3:c3:0c:fc:4e:6e:21:6d:
                    1c:35:a7:0d:0d:c5:21:01:85:ee:55:cc:1a:85:8f:
                    58:a7:40:d4:5c:19:45:4f:12:4f:61:02:a7:b3:82:
                    6e:fb:ce:42:db:49:7d:4f:11:d1:65:ec:a7:ae:40:
                    6c:3c:c2:a0:1b:1e:c8:66:ac:aa:80:8a:82:a2:50:
                    c6:13:82:93:0b:88:2b:ea:6c:ef:5b:8a:99:fa:49:
                    fa:16:64:18:c6:fc:fa:f8:a7:71:b6:b2:b6:f1:07:
                    1d:65:73:49:bd:80:ed:cf:9e:1d:a2:c1:f8:90:70:
                    7b:12:bc:17:e6:cd:93:6a:9c:d0:96:b9:ce:2f:61:
                    47:53:f9:ae:f0:e7:ac:f7:63:39:a3:46:4e:ba:fb:
                    75:2c:25:e5:54:e6:83:7e:98:5c:a2:97:f2:64:d7:
                    60:14:85:9d:d7:4a:60:b8:2a:7b:d1:ac:9e:87:91:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.119.0.0/16
                  130.200.0.0/16
                  138.42.0.0/16
                  141.202.0.0/16
                  155.35.0.0/24
                  155.35.2.0-155.35.33.255
                  155.35.36.0-155.35.45.255
                  155.35.48.0-155.35.225.255
                  155.35.227.0-155.35.231.255
                  155.35.233.0-155.35.255.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6126

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:d7:65:5e:5d:df:03:48:16:9a:09:c3:a2:48:13:15:f6:
         23:a1:b1:04:fe:e2:ad:75:da:44:60:81:35:3e:2c:bb:75:ae:
         f0:43:21:65:a4:c0:06:c9:f1:51:14:71:88:7f:e0:fa:da:78:
         ef:fd:71:fd:bf:b4:de:70:71:72:df:40:61:41:34:09:46:41:
         f1:be:26:c5:96:ff:28:f2:2a:8a:4c:4c:fb:7b:26:34:90:8d:
         ce:a1:6b:f5:e3:41:68:87:47:21:78:51:d1:ad:f2:0f:13:76:
         b0:f4:af:71:71:be:c9:93:c0:ea:fe:43:7d:52:18:cb:f3:a9:
         0b:09:59:8c:a4:b8:71:ca:31:91:c9:d0:50:ca:81:d9:3a:7d:
         cc:96:08:40:67:60:e6:dc:27:b9:a4:b0:81:e8:67:78:2a:3a:
         5c:f3:5c:d8:8a:87:15:0c:c8:d2:24:89:6a:8b:25:49:e4:02:
         75:14:dd:03:df:0c:d7:4c:4f:19:82:a7:d8:e2:b4:9a:fd:af:
         8e:51:2b:e9:c7:91:d4:ed:04:b7:6f:87:98:21:77:cd:af:dc:
         24:48:02:00:d7:66:3b:b2:36:e4:3e:bd:d2:01:76:a0:71:c2:
         35:d6:50:5f:ee:b6:33:b6:d7:0d:53:f4:eb:be:a8:1e:eb:a9:
         d3:40:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org