Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/346bdfe2-01c6-4c5d-bb48-58561ebfb94f.cer
File:                     346bdfe2-01c6-4c5d-bb48-58561ebfb94f.cer (raw, json)
Hash identifier:          tcyrPs1q3EdmCMpZNZtzVaIibvBoPBVkw0ztGGqH5gA=
Subject key identifier:   45:55:44:EF:A8:84:2C:15:D0:C2:B7:D4:87:85:AD:EE:01:3F:67:C8
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858412C55B5050B075A3081B7BD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/346bdfe2-01c6-4c5d-bb48-58561ebfb94f/346bdfe2-01c6-4c5d-bb48-58561ebfb94f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/346bdfe2-01c6-4c5d-bb48-58561ebfb94f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Mar 2023 19:46:35 +0000
Certificate not after:    Thu 12 Jun 2025 18:46:35 +0000
Subordinate resources:    AS: 393946
                          IP: 132.158.0.0/16
                          IP: 157.165.0.0/16
                          IP: 192.12.145.0/24
                          IP: 192.12.150.0 -- 192.12.153.255
                          IP: 192.26.97.0/24
                          IP: 192.48.118.0 -- 192.48.122.255
                          IP: 192.91.132.0 -- 192.91.136.255
                          IP: 192.135.124.0/22
                          IP: 192.135.221.0/24
                          IP: 192.157.177.0 -- 192.157.183.255

Validation:               Failed, certificate revoked on Wed 05 Apr 2023 19:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:2c:55:b5:05:0b:07:5a:30:81:b7:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Mar 10 19:46:35 2023 GMT
            Not After : Jun 12 18:46:35 2025 GMT
        Subject: CN=346bdfe2-01c6-4c5d-bb48-58561ebfb94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:3f:a1:f0:70:5d:0d:20:b1:37:e6:a7:aa:
                    cd:c9:a9:9a:6d:7d:12:86:c0:ff:4e:1b:76:d4:15:
                    d8:ee:fa:2e:f5:3d:e4:05:66:a8:e8:ce:09:85:29:
                    e2:16:a5:33:ea:a4:8b:5c:cb:87:01:38:22:de:72:
                    f7:3b:e8:fe:a3:47:57:97:91:c1:c8:21:be:04:15:
                    40:e6:2c:7e:68:12:73:2f:cb:ef:99:12:dc:91:19:
                    81:a0:7f:f7:95:47:8b:fa:e4:7c:85:f7:02:c3:f8:
                    fb:ff:6a:32:a2:2c:1b:c8:de:46:4d:d2:7d:65:b4:
                    ef:68:8c:af:56:81:07:65:7b:0a:dd:50:21:9d:bd:
                    ec:fa:35:7c:6e:08:06:5c:67:65:f1:a3:3a:bb:8f:
                    f5:69:4e:2e:45:08:1c:17:40:f2:05:e8:e0:3c:98:
                    a4:0c:1d:82:c5:5d:8d:7a:86:ec:20:a5:44:c0:ad:
                    74:c2:e3:04:bf:13:9c:a3:28:e8:02:ad:39:72:8b:
                    2c:0e:b7:d3:9d:38:b7:9c:b0:89:a9:72:d3:b7:f0:
                    6c:86:93:d0:54:55:82:f5:0a:c2:f5:54:6c:09:1c:
                    5e:06:63:f2:00:b1:95:de:de:f4:63:6f:c9:dc:d9:
                    b0:24:ad:65:63:8d:35:a7:ff:db:6b:1c:9f:8a:c5:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:44:EF:A8:84:2C:15:D0:C2:B7:D4:87:85:AD:EE:01:3F:67:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/346bdfe2-01c6-4c5d-bb48-58561ebfb94f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/346bdfe2-01c6-4c5d-bb48-58561ebfb94f/346bdfe2-01c6-4c5d-bb48-58561ebfb94f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.158.0.0/16
                  157.165.0.0/16
                  192.12.145.0/24
                  192.12.150.0-192.12.153.255
                  192.26.97.0/24
                  192.48.118.0-192.48.122.255
                  192.91.132.0-192.91.136.255
                  192.135.124.0/22
                  192.135.221.0/24
                  192.157.177.0-192.157.183.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393946

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:52:85:b8:ff:d7:8b:52:65:e1:b0:0f:3d:01:f5:79:8b:
         1f:82:fb:17:63:55:cb:36:0f:48:d3:bd:78:14:25:6f:bc:dd:
         58:76:bc:d4:14:13:fa:70:8b:ca:dc:71:ff:ea:6d:c6:76:ae:
         fe:5d:3d:36:ad:04:98:1a:d7:da:31:b1:66:3c:03:64:f9:5c:
         b0:51:6e:ae:a4:27:07:31:26:a7:d3:95:4e:68:e9:f5:34:70:
         4e:f1:4d:a9:3f:3d:2d:6e:63:2d:a9:0b:71:24:fb:b7:70:36:
         ad:e4:af:45:9f:fa:cd:74:82:19:17:44:a1:bb:e2:15:33:23:
         13:d4:f8:9d:79:5d:aa:52:b2:58:29:43:b4:13:51:b2:6f:09:
         95:93:26:d2:50:30:e6:43:7e:b1:75:8f:1b:13:f1:a6:98:4c:
         b6:da:e4:6d:18:e1:af:36:ab:d1:39:86:d2:73:e7:b3:30:82:
         5c:99:0d:d7:10:2a:2d:6b:40:ba:c2:a8:31:7a:fe:0e:3c:11:
         d3:0f:68:f6:5d:64:85:3d:37:d5:5f:5f:7d:3f:6c:74:db:c7:
         46:e8:2a:2e:07:02:be:e5:00:cf:1f:4e:20:f8:eb:3d:4e:76:
         d7:b1:43:ee:8c:8f:7e:5a:f7:2c:b9:16:1f:2d:64:09:d6:ac:
         f7:d9:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org