
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
File: 43290c87-c43c-46a1-8633-9c4624dc1aaf.cer (raw, json)
Hash identifier: HjobzGnDZ5ZKZmqzMZQ4rKNk0BuZbShaeRCtE2k+rxU=
Subject key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F43285848CF3EB496156B7AD121B66980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 08 Feb 2025 01:45:33 +0000
Certificate not after: Fri 14 May 2027 00:45:33 +0000
Subordinate resources: AS: 15301
AS: 53708
AS: 395492
IP: 52.129.64.0/19
IP: 74.121.28.0/22
IP: 2620:c8::/48
IP: 2620:10a:c000::/44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:3e:b4:96:15:6b:7a:d1:21:b6:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Feb 8 01:45:33 2025 GMT
Not After : May 14 00:45:33 2027 GMT
Subject: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:f9:a3:87:a3:23:71:aa:88:39:2d:d1:6c:
ee:c8:2a:0a:af:fb:49:2b:ba:65:be:9e:dc:8a:ea:
67:72:7a:af:32:66:99:c9:39:45:d7:53:b8:ee:83:
df:53:9a:7c:b5:ce:16:9a:ef:9a:7c:62:10:1d:b0:
55:19:0f:cf:01:4d:28:aa:65:a4:e8:76:c5:90:2f:
95:e3:18:82:ae:91:95:7e:83:bd:41:86:5a:70:1f:
4f:d1:05:1a:36:88:0b:39:14:51:ce:f4:58:d4:de:
62:2a:8f:4f:01:ac:f8:4b:c0:a3:fc:9f:90:1a:f5:
3c:30:50:cb:79:7f:24:66:3d:a5:27:dd:a5:aa:80:
04:60:8d:d2:92:81:3f:56:f3:f9:fe:08:a0:2e:57:
52:6c:f9:6e:24:09:ba:a3:dd:f0:cc:78:3b:a4:78:
cd:54:51:4c:6d:be:03:ef:00:50:5b:be:56:8e:26:
f9:a5:de:58:43:04:36:3a:85:a6:37:73:e5:d2:16:
0b:e3:2b:6b:ae:0b:13:fe:0f:af:cd:62:85:d3:09:
0a:fe:10:96:40:d2:be:1b:67:da:e3:b0:de:51:08:
99:e0:e4:b3:50:6e:9f:e1:9a:45:12:af:d9:d4:ee:
18:7b:bf:f7:c7:f9:94:9f:4c:0c:17:69:67:05:a2:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.64.0/19
74.121.28.0/22
IPv6:
2620:c8::/48
2620:10a:c000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15301
53708
395492
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:c4:be:d7:b3:7a:24:9a:1f:6e:b3:26:6f:82:d8:f7:6f:09:
74:84:66:92:b8:fc:6b:c9:ad:59:a3:a8:ff:48:89:e8:74:a0:
a7:b3:e7:ce:4d:31:6e:9e:09:1d:6d:38:bf:4a:65:1f:8c:a0:
d1:af:14:7e:5d:35:88:83:af:65:89:bc:4a:b9:3a:35:f3:8c:
0f:90:d9:24:29:e0:1f:d7:f3:8b:74:3c:27:e7:95:45:87:56:
75:ca:c1:c5:b2:98:21:44:e5:9b:61:7b:71:3b:6d:5c:96:ba:
6c:72:fe:1a:f6:d6:c1:13:1b:5b:33:f3:24:ac:1b:7d:c0:30:
a2:f6:bb:46:34:b4:76:d2:a2:04:d2:76:16:26:b9:8a:dd:29:
08:53:81:f3:6e:43:a2:56:29:ab:13:02:d1:fa:cb:5d:e5:6a:
ff:63:c1:c3:61:97:e4:84:71:fa:c4:41:b6:a1:47:17:d9:2c:
a3:37:02:6e:bd:f5:8c:9b:c1:27:bb:18:31:d1:dc:ba:7d:43:
87:a8:f9:32:dd:9d:c1:10:3b:bf:5e:24:4a:63:75:f8:c9:14:
d0:8f:b3:d9:e9:fe:04:b9:97:b5:c8:b0:70:fb:0d:83:16:37:
05:e5:a4:24:db:39:aa:d1:24:30:ee:43:9e:3b:45:d6:ca:37:
51:18:4c:5d
-----BEGIN CERTIFICATE-----
MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEjPPrSWFWt60SG2aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI1MDIwODAxNDUzM1oXDTI3MDUxNDAwNDUzM1owLzEtMCsGA1UEAxMk
NDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMxYWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y35o4ejI3GqiDkt0WzuyCoKr/tJK7plvp7c
iupncnqvMmaZyTlF11O47oPfU5p8tc4Wmu+afGIQHbBVGQ/PAU0oqmWk6HbFkC+V
4xiCrpGVfoO9QYZacB9P0QUaNogLORRRzvRY1N5iKo9PAaz4S8Cj/J+QGvU8MFDL
eX8kZj2lJ92lqoAEYI3SkoE/VvP5/gigLldSbPluJAm6o93wzHg7pHjNVFFMbb4D
7wBQW75Wjib5pd5YQwQ2OoWmN3Pl0hYL4ytrrgsT/g+vzWKF0wkK/hCWQNK+G2fa
47DeUQiZ4OSzUG6f4ZpFEq/Z1O4Ye7/3x/mUn0wMF2lnBaJKYwIDAQABo4IERDCC
BEAwHQYDVR0OBBYEFG78vQZvl3voghHGII7D5zpBEtd4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80
MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQzMjkwYzg3LWM0M2MtNDZhMS04
NjMzLTljNDYyNGRjMWFhZi80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRk
YzFhYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwPwYIKwYBBQUH
AQcBAf8EMDAuMBIEAgABMAwDBAU0gUADBAJKeRwwGAQCAAIwEgMHACYgAMgAAAMH
BCYgAQrAADAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgI7xQIDANHMAgMGCOQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAesS+17N6JJofbrMmb4LY928JdIRmkrj8a8mtWaOo/0iJ6HSgp7Pnzk0x
bp4JHW04v0plH4yg0a8Ufl01iIOvZYm8Srk6NfOMD5DZJCngH9fzi3Q8J+eVRYdW
dcrBxbKYIUTlm2F7cTttXJa6bHL+GvbWwRMbWzPzJKwbfcAwova7RjS0dtKiBNJ2
Fia5it0pCFOB825DolYpqxMC0frLXeVq/2PBw2GX5IRx+sRBtqFHF9ksozcCbr31
jJvBJ7sYMdHcun1Dh6j5Mt2dwRA7v14kSmN1+MkU0I+z2en+BLmXtciwcPsNgxY3
BeWkJNs5qtEkMO5DnjtF1so3URhMXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:32:58 2025 by rpki-client