
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer
File: af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer (raw, json)
Hash identifier: kvNX5oonFfJOQK8qYLjZsXRsxTb5JLxtd6jMo6BdB6Y=
Subject key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F432858468D3D3781EF53073BC5BAF000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 16 Jul 2024 00:45:20 +0000
Certificate not after: Mon 19 Oct 2026 00:45:20 +0000
Subordinate resources: AS: 30323
IP: 23.174.96.0/24
IP: 173.195.97.0/24
IP: 2620:66:a000::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8d:3d:37:81:ef:53:07:3b:c5:ba:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jul 16 00:45:20 2024 GMT
Not After : Oct 19 00:45:20 2026 GMT
Subject: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:53:d5:62:17:e7:b4:45:db:43:40:e5:f3:
23:3c:57:11:e6:f8:31:5a:33:39:e9:ee:11:69:37:
3f:f0:24:6c:c1:99:31:85:52:d8:22:ae:c7:c9:e3:
87:d8:6a:60:ad:49:c7:bb:48:bb:ca:6e:3a:2d:f2:
23:cd:1a:68:7a:0d:04:85:c5:18:fd:f3:83:e7:f1:
47:ec:69:73:01:1d:68:7e:25:cd:1c:a8:17:40:a2:
1e:ba:a2:fe:56:dd:7f:bb:0a:cb:39:8c:97:fc:1b:
6a:8a:75:3e:8b:fe:36:00:d7:93:cb:ac:be:96:02:
f2:74:cb:8e:df:0c:d6:da:db:5e:aa:1e:c9:e4:87:
1c:fa:90:b3:fb:d0:94:7d:c6:38:9c:ec:0f:84:f2:
42:fa:65:9d:28:55:71:d2:49:3b:b2:7e:85:f9:7f:
0c:b3:b1:58:b2:6c:17:bc:04:48:0b:42:ab:8d:a7:
9f:3d:00:d0:0e:91:e5:33:66:5f:90:0f:63:49:86:
0c:50:77:73:54:25:3a:c4:48:dc:40:cf:6d:f5:7c:
0f:99:1c:82:a2:c1:64:d5:bc:c0:6c:c2:9c:9f:98:
cb:9e:58:ea:1e:7e:12:c3:6e:10:8a:47:22:bd:f4:
76:86:da:7d:05:b7:12:65:36:ad:94:d2:d0:75:9d:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.96.0/24
173.195.97.0/24
IPv6:
2620:66:a000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30323
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:3d:c8:59:dc:53:39:62:cb:00:d2:ae:6b:ee:b5:0b:46:46:
f1:f4:42:8b:21:f9:8a:3a:cc:be:c8:5d:76:c2:f5:d6:b5:a7:
e9:4a:d7:bd:88:4b:30:4c:f4:2a:37:c8:f2:87:62:cf:b4:ec:
36:26:6d:92:6c:c2:ea:64:8a:87:1c:e6:15:dc:f6:3b:78:5e:
14:c9:72:eb:79:9b:a6:1b:82:58:66:4b:16:64:5e:09:1d:27:
f6:66:d7:11:c3:ac:d2:55:aa:ca:35:2e:a3:ce:7a:54:cc:c5:
a4:be:37:d6:3c:b5:fd:98:00:e5:fd:50:85:64:77:b7:84:f8:
61:e3:4b:1d:45:f6:40:aa:ce:45:b5:e7:e1:79:cc:f4:05:dc:
67:e3:f1:06:23:6e:c3:c0:fc:50:74:3c:a1:9a:fd:a2:16:aa:
14:35:07:58:7a:c1:e6:b6:36:99:46:16:7d:51:29:81:be:e8:
6f:32:8c:2e:f4:2d:55:e0:72:55:86:62:16:05:4f:31:de:70:
f2:d0:45:cd:e1:2e:fe:36:67:5c:c8:d7:6d:52:e2:94:98:d2:
b2:53:7c:8c:46:fc:07:de:5f:d0:a4:25:df:bc:bd:0a:10:0d:
77:38:e1:02:6a:57:25:a0:34:c0:0d:f8:f8:c8:62:1d:b3:65:
40:e4:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 22:29:31 2025 by rpki-client