Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad.cer
File:                     95132f33-ebca-4c88-9c3c-8225c6a009ad.cer (raw, json)
Hash identifier:          vO29MAyyA1mXTpSMhQQGStqdw9nAmC5bh0q+QiI47Fc=
Subject key identifier:   6A:AE:2A:F9:F3:4B:EE:01:8C:01:CF:8D:46:F7:6B:37:69:58:61:08
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D339BBD74D08CF24FEDF87340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad/95132f33-ebca-4c88-9c3c-8225c6a009ad.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Mar 2022 15:10:36 +0000
Certificate not after:    Thu 11 Mar 2032 15:10:36 +0000
Subordinate resources:    IP: 2606:c140::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:9b:bd:74:d0:8c:f2:4f:ed:f8:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 11 15:10:36 2022 GMT
            Not After : Mar 11 15:10:36 2032 GMT
        Subject: CN=95132f33-ebca-4c88-9c3c-8225c6a009ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:0f:9e:08:b3:cc:c5:56:82:a5:fb:3b:9b:
                    8f:4c:af:9f:41:60:68:f2:60:86:35:48:0d:99:f6:
                    76:0e:83:f5:36:d2:e2:b4:a4:08:b1:b7:eb:9e:12:
                    77:79:c8:05:86:42:37:f4:89:75:c6:ba:06:24:0d:
                    5f:f3:19:0c:10:e5:fe:45:38:7a:72:e1:0f:0b:e3:
                    25:09:36:76:2a:a5:44:5e:22:c2:16:c8:e7:d3:cd:
                    4c:38:e4:96:90:b9:35:52:04:86:ed:cb:93:7e:60:
                    f3:57:b8:22:0a:88:17:26:1c:7c:53:51:54:27:a6:
                    ea:d1:e9:c1:aa:4c:7b:75:7f:aa:b8:cf:b6:27:79:
                    1b:98:7b:af:bd:1c:86:f8:f9:0d:79:d8:7c:a5:2e:
                    ae:fb:36:e0:09:d0:f8:6e:a7:1f:eb:5e:83:7c:5d:
                    00:05:40:6a:7f:e2:69:ec:1c:27:26:32:a8:0a:2a:
                    65:39:ba:fe:8a:ee:21:f6:69:0a:1e:ce:45:11:b5:
                    0e:f6:64:8d:e3:80:98:a9:61:f1:1f:a3:92:2a:af:
                    bf:63:85:43:8b:6d:ca:4e:56:65:38:2a:9f:de:9b:
                    da:14:65:a5:a3:5d:9a:4a:e1:65:d9:6c:d4:a1:be:
                    45:ff:38:f9:6b:8b:db:e7:5c:ac:22:be:5a:bd:9e:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AE:2A:F9:F3:4B:EE:01:8C:01:CF:8D:46:F7:6B:37:69:58:61:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad/95132f33-ebca-4c88-9c3c-8225c6a009ad.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:1c:ad:98:66:84:d0:b7:02:9a:8b:48:e0:2e:64:73:a0:
         f3:d7:72:e6:00:6c:a1:74:67:23:5c:5b:38:68:21:d3:9b:e4:
         a3:29:56:cd:8f:c3:9a:20:5d:3f:f4:d9:7c:72:64:5c:8d:17:
         b0:a8:bc:69:94:79:7e:7f:6c:b4:4c:44:a7:22:e0:ca:e3:9c:
         45:74:a2:b0:56:25:84:4b:5a:38:e6:70:25:8c:53:2c:ff:3c:
         3f:fc:83:7f:dc:6e:29:f8:6a:99:73:9b:a4:a8:2d:a0:98:fe:
         ea:ce:c8:71:55:66:d5:f7:31:b4:b7:01:96:ce:a4:9f:0c:00:
         43:3e:61:98:77:c6:5c:a0:be:79:3c:44:a1:fd:2a:13:98:6a:
         2f:23:ad:c1:de:17:db:10:64:9d:03:6e:33:64:01:4a:d3:ee:
         50:82:9b:a9:0c:76:eb:5c:4d:0f:2d:28:39:2e:dc:23:37:95:
         3d:0a:6f:bc:13:86:a3:fd:9a:37:4f:cb:14:89:72:2f:cc:ed:
         5b:e9:25:10:98:48:f0:89:d7:97:8d:59:38:b3:fd:c1:a8:a9:
         6d:e2:9f:69:6f:66:f5:1c:f4:f2:05:c5:06:9f:5f:69:56:0d:
         af:a4:12:08:b8:4b:13:1f:3b:88:a7:68:07:d0:15:a0:06:ee:
         a8:94:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----