Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f114076e50271f1c77a990de203cb8438ca4f952db.cer
File:                     e8741ac4f114076e50271f1c77a990de203cb8438ca4f952db.cer (raw, json)
Hash identifier:          jRsXIASPxIEkDtnUeSdN4DUeKeh0lOZdiK8mkjF38Bs=
Subject key identifier:   A1:A1:36:9F:AB:16:91:02:94:6A:DF:DB:39:BD:92:24:8B:11:8A:17
Authority key identifier: 06:E8:C1:8C:A5:28:23:FA:D6:75:CC:16:D3:19:00:4F:64:9E:95:93
Certificate issuer:       /CN=4e962717-1138-4d2b-9442-0332e9060132
Certificate serial:       010D0C9F43285849FC863FAB4A7129B02FDEA6C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A91301EE0000/0/A1A1369FAB169102946ADFDB39BD92248B118A17.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A91301EE0000/0/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Mon 26 May 2025 23:48:01 +0000
Certificate not after:    Sun 29 Aug 2027 23:48:01 +0000
Subordinate resources:    AS: 401682
                          IP: 23.137.236.0/24
                          IP: 2604:ca0::/32
Validation:               Failed, certificate revoked on Tue 27 May 2025 02:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:86:3f:ab:4a:71:29:b0:2f:de:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e962717-1138-4d2b-9442-0332e9060132
        Validity
            Not Before: May 26 23:48:01 2025 GMT
            Not After : Aug 29 23:48:01 2027 GMT
        Subject: CN=e8741ac4f114076e50271f1c77a990de203cb8438ca4f952db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:b0:64:ff:87:a0:5d:dd:78:34:a7:12:21:
                    bf:34:a6:d1:6a:d7:3e:b0:2c:3c:af:05:84:95:33:
                    7e:29:bc:25:33:27:40:ec:9e:4b:aa:da:1f:60:6d:
                    e0:89:7f:f5:e8:4c:49:3b:50:08:74:fa:c9:19:c6:
                    57:45:7a:14:2c:2a:ba:84:b3:0f:dd:76:09:d5:70:
                    43:5a:9a:4e:f8:d5:49:26:c0:b0:18:f9:34:c4:f5:
                    83:70:4d:97:6b:e6:90:7e:e8:e8:9a:47:06:18:6c:
                    a6:5e:35:c4:04:58:78:cf:73:57:93:34:4e:8a:e1:
                    1a:f5:21:1b:f7:7d:a3:1f:d1:94:ce:bd:ca:2e:e5:
                    df:c4:4c:0a:31:13:e4:29:d5:98:5e:43:11:c5:e3:
                    4b:f2:fd:c9:71:37:3b:0d:a7:4a:d7:2c:8c:38:e5:
                    9e:08:43:46:67:31:1d:5d:64:4d:4a:69:6c:4b:ee:
                    ab:d2:61:eb:45:ae:11:ee:83:20:11:4b:70:a7:14:
                    9c:7c:da:31:d2:36:98:db:e5:c4:02:a5:49:cb:53:
                    5a:d8:d5:94:f7:19:a4:f9:25:24:f4:14:5d:95:aa:
                    e8:f5:78:96:86:17:00:b0:f0:9f:b1:4b:e9:36:33:
                    0d:a4:25:2b:af:2d:92:dd:ca:71:3c:b1:7c:dc:58:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A1:36:9F:AB:16:91:02:94:6A:DF:DB:39:BD:92:24:8B:11:8A:17
            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91301EE0000/0/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91301EE0000/0/A1A1369FAB169102946ADFDB39BD92248B118A17.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl

            X509v3 Authority Key Identifier:
                keyid:06:E8:C1:8C:A5:28:23:FA:D6:75:CC:16:D3:19:00:4F:64:9E:95:93

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.236.0/24
                IPv6:
                  2604:ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401682

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:82:94:a8:c5:8f:49:ca:92:f2:90:c4:2a:59:7f:8b:05:d7:
         3c:1c:87:e4:1d:cf:5e:f4:3a:6f:25:21:31:8a:8f:05:2c:5e:
         c1:55:04:b8:f5:16:51:0f:04:27:a0:2a:0a:eb:86:83:b5:74:
         b1:02:1b:a7:26:e8:5c:9e:42:26:8a:94:01:0a:85:86:7c:87:
         4a:48:58:53:aa:82:9e:1a:c3:bb:ba:94:db:5f:9e:3e:aa:7a:
         7c:f2:a8:4b:27:51:38:70:1c:2b:02:90:1c:92:6a:b3:eb:6b:
         fb:1b:6d:14:52:ee:89:eb:e3:90:9e:95:d3:0e:f9:f7:ec:52:
         c0:2c:01:dd:ca:dd:32:51:76:40:b5:5d:a4:9c:f0:5b:3b:c1:
         b8:6d:d1:a8:c9:33:f8:b2:e9:57:22:c3:2c:8f:a5:1e:dd:88:
         d7:13:ad:6a:f6:2d:97:f3:18:93:32:dc:95:03:ab:d5:7e:db:
         8a:b3:b7:71:72:a3:60:4a:e9:5f:04:20:f3:8e:6f:94:1c:6b:
         0d:4f:80:c3:c5:6d:45:3f:f3:33:8f:b2:8e:50:16:76:b4:c8:
         d9:3c:49:a3:fc:bc:50:7a:4f:49:3c:2c:7d:f5:14:6c:71:44:
         b4:c2:77:02:c7:92:23:ef:ce:79:e1:fe:11:b6:9b:eb:0f:f7:
         46:f0:b9:86
-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIUAQ0Mn0MoWEn8hj+rSnEpsC/epsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NjI3MTctMTEzOC00ZDJiLTk0NDItMDMzMmU5MDYw
MTMyMB4XDTI1MDUyNjIzNDgwMVoXDTI3MDgyOTIzNDgwMVowPTE7MDkGA1UEAxMy
ZTg3NDFhYzRmMTE0MDc2ZTUwMjcxZjFjNzdhOTkwZGUyMDNjYjg0MzhjYTRmOTUy
ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSrBk/4egXd14NKcS
Ib80ptFq1z6wLDyvBYSVM34pvCUzJ0Dsnkuq2h9gbeCJf/XoTEk7UAh0+skZxldF
ehQsKrqEsw/ddgnVcENamk741UkmwLAY+TTE9YNwTZdr5pB+6OiaRwYYbKZeNcQE
WHjPc1eTNE6K4Rr1IRv3faMf0ZTOvcou5d/ETAoxE+Qp1ZheQxHF40vy/clxNzsN
p0rXLIw45Z4IQ0ZnMR1dZE1KaWxL7qvSYetFrhHugyARS3CnFJx82jHSNpjb5cQC
pUnLU1rY1ZT3GaT5JST0FF2Vquj1eJaGFwCw8J+xS+k2Mw2kJSuvLZLdynE8sXzc
WIKJAgMBAAGjggOnMIIDozAdBgNVHQ4EFgQUoaE2n6sWkQKUat/bOb2SJIsRihcw
gfsGCCsGAQUFBwELBIHuMIHrMEEGCCsGAQUFBzAFhjVyc3luYzovL3Jwa2kuc3Vi
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTMwMUVFMDAwMC8wLzBtBggrBgEFBQcw
CoZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEzMDFF
RTAwMDAvMC9BMUExMzY5RkFCMTY5MTAyOTQ2QURGREIzOUJEOTIyNDhCMTE4QTE3
Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnN1Yi5hcG5pYy5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8EgdQwgdEwgc6g
gcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZTk2MjcxNy0xMTM4LTRk
MmItOTQ0Mi0wMzMyZTkwNjAxMzIvNGU5NjI3MTctMTEzOC00ZDJiLTk0NDItMDMz
MmU5MDYwMTMyLmNybDAfBgNVHSMEGDAWgBQG6MGMpSgj+tZ1zBbTGQBPZJ6VkzAO
BgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggrBgEFBQcwAoaB
oHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNi
Yy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQy
LTAzMzJlOTA2MDEzMi5jZXIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAAX
iewwDQQCAAIwBwMFACYEDKAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBiESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKClKjFj0nKkvKQxCpZf4sF1zwch+Qdz170Om8lITGKjwUsXsFVBLj1
FlEPBCegKgrrhoO1dLECG6cm6FyeQiaKlAEKhYZ8h0pIWFOqgp4aw7u6lNtfnj6q
enzyqEsnUThwHCsCkBySarPra/sbbRRS7onr45CeldMO+ffsUsAsAd3K3TJRdkC1
XaSc8Fs7wbht0ajJM/iy6VciwyyPpR7diNcTrWr2LZfzGJMy3JUDq9V+24qzt3Fy
o2BK6V8EIPOOb5Qcaw1PgMPFbUU/8zOPso5QFna0yNk8SaP8vFB6T0k8LH31FGxx
RLTCdwLHkiPvznnh/hG2m+sP90bwuYY=
-----END CERTIFICATE-----
Generated at Wed Jun 11 04:34:07 2025 by rpki-client