
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da.cer
File: 35108378-f5ea-460b-b05b-51d13b62a6da.cer (raw, json)
Hash identifier: MMuztDuF/Hd3LvjeGvkY1aawhQ3vEwPZk4mhnrdTrUo=
Subject key identifier: 61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F432858458F30F944B43692F21133F598
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 16 Apr 2024 00:45:20 +0000
Certificate not after: Mon 20 Jul 2026 00:45:20 +0000
Subordinate resources: AS: 16876
AS: 20144
AS: 23518
AS: 26299
AS: 26710 -- 26711
AS: 27500
AS: 40528
IP: 192.0.32.0/20
IP: 199.4.28.0/22
IP: 199.4.138.0/24
IP: 199.7.81.0 -- 199.7.83.255
IP: 199.7.94.0/23
IP: 199.43.132.0/22
IP: 199.91.192.0/21
IP: 199.253.182.0/23
IP: 208.77.188.0/22
IP: 2001:500:3::/48
IP: 2001:500:11::/48
IP: 2001:500:86:: -- 2001:500:89:ffff:ffff:ffff:ffff:ffff
IP: 2001:500:8c::/46
IP: 2001:500:9c::/46
IP: 2602:800:9000::/44
IP: 2620:0:2d0::/48
IP: 2620:0:22b0::/48
IP: 2620:0:2830::/48
IP: 2620:0:2ed0::/48
IP: 2620:0:2ee0::/48
IP: 2620:f:8000::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:8f:30:f9:44:b4:36:92:f2:11:33:f5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Apr 16 00:45:20 2024 GMT
Not After : Jul 20 00:45:20 2026 GMT
Subject: CN=35108378-f5ea-460b-b05b-51d13b62a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:fd:c7:41:f6:ae:cc:4a:03:ab:60:fb:f9:
2f:11:a7:ab:67:02:94:0a:90:3f:49:81:55:25:53:
f0:e6:fc:12:17:89:9e:f3:b0:61:cf:22:be:2b:04:
82:9b:74:54:d3:6d:86:be:66:0c:30:bb:8c:80:57:
4e:dc:29:22:46:31:3c:20:26:f2:d1:42:38:8d:2b:
90:e0:eb:70:13:db:f2:14:bb:5a:45:23:17:cb:9e:
23:f0:77:59:5b:78:a0:26:d3:08:51:a8:fe:b4:f4:
b6:c0:31:12:c6:3e:2e:28:53:49:a0:c3:0a:10:17:
93:b2:4a:50:f9:8d:1c:38:e5:9e:29:11:a8:5f:12:
7a:ee:3e:19:db:7f:32:fe:eb:f2:71:dc:a9:bc:b0:
00:cf:59:c5:db:f3:1b:76:91:6a:f1:2e:a9:1e:59:
13:d7:ce:88:c3:76:d3:b9:be:d6:c8:1c:62:e8:47:
7d:f5:b5:ba:df:50:73:ea:84:32:3b:9a:eb:76:8e:
09:7b:56:f1:3f:e4:e2:3b:b7:51:26:56:1a:70:68:
5c:ff:40:4a:3b:95:8a:32:16:2c:96:d9:0f:fa:2f:
bc:8d:65:98:ce:e2:9a:63:b5:51:e7:59:8e:26:dd:
86:89:6d:4d:eb:d4:fd:e2:d7:7c:d8:48:f0:ce:f7:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
192.0.32.0/20
199.4.28.0/22
199.4.138.0/24
199.7.81.0-199.7.83.255
199.7.94.0/23
199.43.132.0/22
199.91.192.0/21
199.253.182.0/23
208.77.188.0/22
IPv6:
2001:500:3::/48
2001:500:11::/48
2001:500:86::-2001:500:89:ffff:ffff:ffff:ffff:ffff
2001:500:8c::/46
2001:500:9c::/46
2602:800:9000::/44
2620:0:2d0::/48
2620:0:22b0::/48
2620:0:2830::/48
2620:0:2ed0::/48
2620:0:2ee0::/48
2620:f:8000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16876
20144
23518
26299
26710-26711
27500
40528
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b9:2c:b7:30:31:e6:7c:4b:70:42:20:63:3b:95:cd:29:89:
03:05:eb:6f:2a:9d:69:ba:66:3d:9a:bf:6c:55:f9:dc:90:1e:
55:7f:9d:48:88:a1:7b:78:67:97:3b:8d:09:d8:a4:9f:27:5f:
eb:3e:8e:27:66:70:33:1d:df:b6:28:65:27:d4:ae:a8:64:8b:
44:bc:41:43:7b:38:a2:07:8b:58:73:c4:b8:11:b9:ed:f5:7d:
8f:98:7d:35:5a:a1:78:25:46:02:d0:1b:08:1c:09:6c:11:c4:
ee:ea:88:9a:2e:e8:79:ff:54:84:2d:3f:e0:e1:a2:fd:3d:41:
4e:bc:9c:98:24:89:84:6a:73:6e:91:de:6c:29:af:4e:72:ca:
c7:3d:b0:a8:97:4c:37:a4:a7:7c:e6:a0:0c:2c:3a:14:26:cd:
e4:ef:64:ef:1f:ac:c3:bc:04:20:ce:fe:50:b8:03:14:d1:ce:
bd:9a:20:47:75:ba:be:d0:e9:d0:c2:8d:d5:92:fd:8c:0d:c2:
8e:d6:d5:eb:b5:8b:88:42:de:a5:6a:58:1c:ec:6e:44:60:d8:
09:f8:22:fd:c1:d2:b3:ac:a8:a2:62:41:38:15:5a:4b:3d:3d:
22:bf:31:3e:a5:ae:4c:43:be:66:5f:f0:88:30:bc:e6:79:4b:
6e:24:08:c9
-----BEGIN CERTIFICATE-----
MIIH4TCCBsmgAwIBAgIUAQ0Mn0MoWEWPMPlEtDaS8hEz9ZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MDQxNjAwNDUyMFoXDTI2MDcyMDAwNDUyMFowLzEtMCsGA1UEAxMk
MzUxMDgzNzgtZjVlYS00NjBiLWIwNWItNTFkMTNiNjJhNmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBD9x0H2rsxKA6tg+/kvEaerZwKUCpA/SYFV
JVPw5vwSF4me87BhzyK+KwSCm3RU022GvmYMMLuMgFdO3CkiRjE8ICby0UI4jSuQ
4OtwE9vyFLtaRSMXy54j8HdZW3igJtMIUaj+tPS2wDESxj4uKFNJoMMKEBeTskpQ
+Y0cOOWeKRGoXxJ67j4Z238y/uvycdypvLAAz1nF2/MbdpFq8S6pHlkT186Iw3bT
ub7WyBxi6Ed99bW631Bz6oQyO5rrdo4Je1bxP+TiO7dRJlYacGhc/0BKO5WKMhYs
ltkP+i+8jWWYzuKaY7VR51mOJt2GiW1N69T94td82EjwzvcLXQIDAQABo4IE8zCC
BO8wHQYDVR0OBBYEFGGYOp2BsScYvZuattYR6uXVvHnOMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8z
NTEwODM3OC1mNWVhLTQ2MGItYjA1Yi01MWQxM2I2MmE2ZGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzM1MTA4Mzc4LWY1ZWEtNDYwYi1i
MDViLTUxZDEzYjYyYTZkYS8zNTEwODM3OC1mNWVhLTQ2MGItYjA1Yi01MWQxM2I2
MmE2ZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgdgGCCsGAQUF
BwEHAQH/BIHIMIHFMEQEAgABMD4DBATAACADBALHBBwDBADHBIowDAMEAMcHUQME
AscHUAMEAccHXgMEAscrhAMEA8dbwAMEAcf9tgMEAtBNvDB9BAIAAjB3AwcAIAEF
AAADAwcAIAEFAAARMBIDBwEgAQUAAIYDBwEgAQUAAIgDBwIgAQUAAIwDBwIgAQUA
AJwDBwQmAggAkAADBwAmIAAAAtADBwAmIAAAIrADBwAmIAAAKDADBwAmIAAALtAD
BwAmIAAALuADBwAmIAAPgAAwOAYIKwYBBQUHAQgBAf8EKTAnoCUwIwICQewCAk6w
AgJb3gICZrswCAICaFYCAmhXAgJrbAIDAJ5QMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGa5LLcwMeZ8S3BC
IGM7lc0piQMF628qnWm6Zj2av2xV+dyQHlV/nUiIoXt4Z5c7jQnYpJ8nX+s+jidm
cDMd37YoZSfUrqhki0S8QUN7OKIHi1hzxLgRue31fY+YfTVaoXglRgLQGwgcCWwR
xO7qiJou6Hn/VIQtP+Dhov09QU68nJgkiYRqc26R3mwpr05yysc9sKiXTDekp3zm
oAwsOhQmzeTvZO8frMO8BCDO/lC4AxTRzr2aIEd1ur7Q6dDCjdWS/YwNwo7W1eu1
i4hC3qVqWBzsbkRg2An4Iv3B0rOsqKJiQTgVWks9PSK/MT6lrkxDvmZf8IgwvOZ5
S24kCMk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:15 2025 by rpki-client