Unable to use a single CRL on BIG-IP rSeries tenant (works on BIG-IP VE)

Hello everyone,

I'm experiencing an issue with CRL validation on the BIG-IP tenant. I have a single CRL file (approximately 35 MB) downloaded directly from our CA. The CRL imports successfully into BIG-IP (either .pem or .crl format) without any errors.

However, when I assign this CRL to a Client SSL profile configured for client certificate authentication, an error occurs. The following message is logged in /var/log/ltm:
"Profile /Common/<clientssl_profile> - cannot load <CRL file> CRL file error: Unknown error."

After that, as expected, access to the application published through this Client SSL profile no longer works correctly.
The same CRL imports successfully on a BIG-IP VE running the same TMOS version.

Has anyone experienced similar behavior or knows whether this could be a platform-specific limitation or a known issue? Any suggestions would be appreciated.

Thank you.