Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer
File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer (raw, json)
Hash identifier: hr6GIlk3xB130fmC5X/gpBroWBTCQTHiJDZ0AXy7gCY=
Subject key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 0D22931635221C1CE5B7458937EF40E1C3DF5BD8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 02 Jul 2025 19:28:15 +0000
Certificate not after: Wed 01 Jul 2026 19:33:15 +0000
Subordinate resources: IP: 2a05:dfc3:fd40::/44
IP: 2a09:54c7:1000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:22:93:16:35:22:1c:1c:e5:b7:45:89:37:ef:40:e1:c3:df:5b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:15 2025 GMT
Not After : Jul 1 19:33:15 2026 GMT
Subject: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:36:94:9b:d0:8b:3f:1a:23:b4:c8:e4:c5:
11:ff:f9:e9:55:8e:4d:37:3a:1a:de:51:e5:73:e0:
db:7d:17:63:2c:34:f0:f8:af:26:b3:4a:32:36:03:
c4:68:80:80:08:b6:7e:76:8d:68:93:c2:c2:f9:cc:
75:39:6b:ac:74:1b:44:41:c2:ab:ee:8b:8e:d3:d3:
07:81:d4:20:77:de:ac:ea:bd:69:f5:39:a6:9a:0f:
26:3c:ad:12:96:3b:c1:c8:e4:64:da:af:1f:08:62:
54:55:07:78:1a:f6:21:67:79:ce:6f:b2:26:28:74:
d0:5c:76:aa:cd:fa:d0:04:9d:74:52:c2:4a:f5:64:
37:1a:f4:a2:5e:ea:1a:67:f7:d9:28:91:64:45:ec:
81:d7:b9:08:3a:18:0d:47:f0:d8:92:b4:3c:8f:fe:
95:a9:56:18:df:f7:0d:71:11:ee:8c:04:c3:4a:db:
a8:8d:49:86:2c:0e:fb:85:e7:0a:96:3b:b1:29:6b:
9b:04:3b:e4:b0:22:0f:b1:ad:06:fd:7c:f7:57:58:
b3:e1:ca:86:3c:1f:34:96:cf:35:05:3a:2f:23:16:
f7:a4:e4:64:e9:cb:17:4a:8f:7d:10:64:d7:dc:3e:
6f:2e:87:a7:5b:d4:f3:e5:5d:05:03:dc:15:54:c1:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd40::/44
2a09:54c7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
84:27:f8:bc:0b:b8:26:50:fc:84:f8:ae:cf:d8:f1:fb:da:53:
f0:3a:30:76:4e:08:07:56:86:da:e5:42:4f:58:47:17:46:8e:
dc:c2:2b:7f:ee:4a:42:3d:86:0a:88:3a:16:c9:b2:13:0d:0e:
85:c5:bf:98:08:23:30:19:25:83:1a:63:ae:0e:ff:c2:7a:4f:
6d:a4:af:1d:ba:8b:f2:74:f4:52:2b:b2:b5:61:77:f4:2f:45:
b5:fc:9d:57:cc:72:dd:09:7a:10:b5:7a:f3:3e:a1:e6:09:88:
a4:56:52:96:f3:2f:99:8e:00:50:ba:68:46:56:d9:ec:6d:9c:
5c:2a:27:cd:06:26:e6:dc:b3:91:2d:87:8c:d9:bb:4d:23:99:
d4:fa:7b:e7:23:df:e5:a6:89:e4:7f:65:4d:87:8e:c0:76:08:
8d:75:06:06:9a:de:b6:08:c4:ad:80:a4:89:07:46:a3:5c:74:
2b:f4:ab:4c:da:a1:6e:ce:66:c5:8d:15:07:36:d6:3f:15:16:
70:26:ec:1a:04:36:02:98:6d:ff:da:3f:5c:7f:0b:56:a4:23:
d9:f4:3b:d4:f5:60:14:8d:66:66:0d:1c:49:bd:03:e8:55:7e:
9c:65:1c:84:ca:87:84:f5:f3:b7:cf:78:fe:cb:95:ba:c5:10:
58:60:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:57:39 2025 by rpki-client