Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer (raw, json)
Hash identifier: HZ43DSOuK2Dwu07ebfWF4OcVrReTID4KX2wjrFSu8oM=
Subject key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 6D34298AC1A9B0642392AAA6097F7FFA335B4D7D
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 02 Jul 2025 19:28:15 +0000
Certificate not after: Wed 01 Jul 2026 19:33:15 +0000
Subordinate resources: IP: 2a0a:6044:7c00::/40
IP: 2a0a:6044:8000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:34:29:8a:c1:a9:b0:64:23:92:aa:a6:09:7f:7f:fa:33:5b:4d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:15 2025 GMT
Not After : Jul 1 19:33:15 2026 GMT
Subject: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:97:07:06:45:33:24:dc:59:c0:5c:60:1d:
25:4c:08:41:79:bd:08:6f:67:ad:04:2d:eb:56:10:
12:ef:a2:6c:a9:56:a3:f1:30:fa:ab:4a:a4:03:79:
55:8d:60:55:2f:26:ca:11:01:6d:d3:6c:39:d6:39:
9d:c9:7e:53:5c:50:b0:d4:ae:43:57:86:42:a3:72:
aa:b3:80:ba:0f:49:7a:9c:f8:8b:1e:c5:4b:ef:c6:
84:85:df:94:97:12:d0:bd:55:17:58:72:c6:3e:d6:
a1:72:f9:d5:e7:d9:62:46:71:95:2f:0d:e8:82:a4:
1b:88:00:e3:29:da:98:24:51:0c:a8:ab:2a:01:60:
e2:74:8f:0f:e4:6d:2b:53:9a:2c:65:8c:c6:ba:7c:
38:7a:92:b0:87:3e:b5:d9:be:02:e2:56:cc:8b:9f:
80:5c:1f:f7:94:42:36:09:3d:94:67:1b:c5:c5:bf:
bf:fe:13:7b:23:b1:c4:15:bd:12:79:1a:1e:af:9c:
09:13:c9:a5:ef:6e:91:d0:74:0b:06:ef:fd:95:b3:
4e:5f:53:56:35:3b:b2:70:e3:4d:1e:19:d2:34:96:
c9:6d:7b:0c:6b:82:0b:6b:51:b6:3b:d1:60:33:2c:
cc:e8:36:07:2b:ea:4c:8e:42:45:9b:a1:cb:3b:9f:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:96:eb:14:40:d4:32:94:ef:9a:77:09:bd:50:9a:26:13:68:
d7:28:5b:71:67:2f:7e:86:a8:f8:cd:5b:36:75:6a:cd:a3:88:
74:d3:8c:09:05:a7:14:e6:e0:a0:64:a6:a5:cc:aa:89:66:c4:
89:5f:81:97:9a:8c:12:fb:89:28:93:3e:50:89:a9:16:c0:a0:
bd:17:4a:d1:73:96:57:70:ce:57:d6:34:1d:c2:db:d9:bd:d3:
55:f6:ed:1a:bd:48:81:1c:80:aa:b6:19:fb:37:5f:2a:48:2f:
0f:60:bb:f5:02:77:01:97:92:bd:0c:89:78:a8:63:71:3a:a8:
06:0f:25:75:aa:88:7d:f6:ef:6f:2b:65:10:95:f0:8b:f1:74:
f2:ee:51:b7:b6:1c:39:7d:ec:e4:7e:43:c6:d8:7b:71:bd:20:
1a:5c:60:5a:68:ff:9f:44:c7:d1:a1:67:ae:ff:7f:9f:b3:20:
6d:f1:59:d5:a8:16:83:b3:c1:a4:27:10:3d:bc:31:47:bc:c4:
d0:a0:47:78:31:7f:17:fc:ee:71:ba:95:5f:29:e2:9c:63:1d:
6e:55:5d:b4:7c:05:25:26:18:17:ca:65:7d:1a:d6:5e:c4:21:
c3:39:d7:60:4c:9a:8c:29:54:a4:a1:74:ba:a7:89:67:7a:e4:
c2:e6:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:14:09 2025 by rpki-client