Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91cb3505-c9e9-409f-8c45-ab6a766c9e51.cer
File:                     91cb3505-c9e9-409f-8c45-ab6a766c9e51.cer (raw, json)
Hash identifier:          /8DOkubV0JR5qR4UawMljvtOB0Q2xr36gSYvYnSYilU=
Subject key identifier:   98:25:D5:F3:F9:F2:DF:C6:C2:FD:3F:65:AD:78:67:0D:21:A1:8E:4F
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584A2E413AD275B13BE8E0D03800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91cb3505-c9e9-409f-8c45-ab6a766c9e51/91cb3505-c9e9-409f-8c45-ab6a766c9e51.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91cb3505-c9e9-409f-8c45-ab6a766c9e51/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Jun 2025 19:19:23 +0000
Certificate not after:    Thu 16 Sep 2027 19:19:23 +0000
Subordinate resources:    AS: 32591
                          IP: 23.140.52.0/24
                          IP: 2602:f633::/40
Validation:               Failed, certificate revoked on Fri 13 Jun 2025 21:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:41:3a:d2:75:b1:3b:e8:e0:d0:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Jun 13 19:19:23 2025 GMT
            Not After : Sep 16 19:19:23 2027 GMT
        Subject: CN=91cb3505-c9e9-409f-8c45-ab6a766c9e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:28:d8:3e:b9:23:9b:84:69:ad:0f:85:8a:
                    e4:8d:f2:96:83:4c:01:76:04:ee:0c:13:86:59:84:
                    86:cb:05:63:c7:20:c0:9f:5c:9a:8d:30:d6:4c:40:
                    65:8b:fa:82:98:82:f7:3a:04:7d:1c:f1:17:3d:f9:
                    fb:ae:38:14:8c:85:88:13:ea:fb:5c:2d:c7:52:47:
                    8c:74:67:a4:15:59:bc:6a:f1:fd:b8:82:dc:5b:33:
                    1b:f1:cd:0c:dc:07:6f:ea:59:ba:d0:08:9a:57:ca:
                    5b:4b:e4:cf:50:86:66:8e:c3:23:b1:50:ab:9f:64:
                    2c:81:ad:09:c6:70:40:ee:c4:4e:af:fb:83:9c:fb:
                    c4:c0:73:22:82:29:a8:57:f5:3f:fc:a2:9c:da:5c:
                    d9:62:f5:90:e4:b1:05:a6:a4:69:3d:37:12:3f:cd:
                    6a:3d:c6:64:13:5e:e0:a1:3b:a1:40:d9:22:82:f6:
                    3e:24:53:bf:e8:ab:38:ee:8a:a7:66:c3:ae:d9:3d:
                    76:9e:f2:97:ac:90:43:33:2a:ca:2a:a6:95:a1:9b:
                    53:62:b7:3e:c6:1c:45:d5:7a:de:1c:11:0d:8e:7b:
                    4d:d8:cb:f0:2a:4c:7c:3b:f3:e8:f6:74:5f:23:b8:
                    b7:17:02:e1:3c:77:a9:bc:46:4f:34:15:09:4f:5d:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:25:D5:F3:F9:F2:DF:C6:C2:FD:3F:65:AD:78:67:0D:21:A1:8E:4F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91cb3505-c9e9-409f-8c45-ab6a766c9e51/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91cb3505-c9e9-409f-8c45-ab6a766c9e51/91cb3505-c9e9-409f-8c45-ab6a766c9e51.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.52.0/24
                IPv6:
                  2602:f633::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32591

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:fc:20:81:8c:0f:09:44:92:c0:e7:80:b1:b9:5f:14:ac:
         0b:f8:2f:ab:b1:63:c7:5c:07:41:ff:f0:bd:ef:c4:ed:39:f0:
         4e:2b:9f:75:48:53:a0:8b:7a:2e:8e:96:52:f6:d9:4b:9c:68:
         75:c9:07:24:bf:93:a5:e2:dd:13:85:2c:b1:ff:d5:f3:43:bb:
         cb:bf:44:80:d8:1d:56:7d:7c:06:48:ad:4e:26:bd:82:90:ba:
         1d:39:f9:66:ce:75:9c:26:5d:ab:c7:45:88:25:83:b5:85:a6:
         45:45:d3:84:be:ea:f0:85:5f:70:96:50:bc:d1:ed:a1:ef:57:
         0d:7e:f6:78:38:d6:c8:59:63:54:fa:c0:d4:6c:f1:6f:af:ef:
         a3:93:e4:26:1e:dd:10:9e:74:d0:ab:1c:35:59:41:83:6c:41:
         46:76:f8:8c:78:d1:00:46:5e:2d:39:9c:c5:0c:0e:6e:e4:bc:
         bb:b5:61:1e:57:7d:7b:87:06:3f:91:32:af:f2:bb:29:a9:21:
         0f:17:a8:c7:6f:84:5e:98:28:1d:19:6c:1e:02:ae:90:ca:bf:
         f1:06:3a:65:8f:07:cb:58:ba:31:4e:1b:88:3e:14:40:dd:17:
         00:00:8d:4d:0e:d8:ea:3c:c0:6e:86:78:7f:56:92:02:7c:f4:
         7f:d2:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:15:44 2025 by rpki-client