
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
File: f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer (raw, json)
Hash identifier: RxtAWokdKG1na57FB9epoxZS+OgrvXe83j+23V6iGIA=
Subject key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584867F36669C8F9CC789A0AFB00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:45:33 +0000
Certificate not after: Wed 07 Apr 2027 00:45:33 +0000
Subordinate resources: AS: 51312
AS: 51856
AS: 54681
AS: 56808
AS: 400917
IP: 23.133.248.0/21
IP: 170.205.56.0/22
IP: 2602:fba2::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:f3:66:69:c8:f9:cc:78:9a:0a:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jan 2 01:45:33 2025 GMT
Not After : Apr 7 00:45:33 2027 GMT
Subject: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:5a:15:52:cd:30:c6:11:ae:ca:d8:ed:6b:
ae:4e:75:93:26:f4:ec:d0:3d:c5:1d:94:a1:4f:a1:
ca:15:10:ea:72:06:61:55:6a:e0:4c:4d:a2:93:05:
ba:12:bc:c2:1f:b0:cf:ae:ac:85:13:68:3c:56:58:
20:8d:ed:ba:53:96:0b:ab:02:35:1f:e3:c5:e8:fd:
11:0c:38:4c:3a:5e:98:6f:d9:0d:1c:58:42:56:e6:
44:d8:20:a5:d4:7c:2b:6f:8c:9e:7d:51:64:e6:87:
9a:16:10:08:7b:03:fe:f6:a5:89:8d:05:1e:82:f6:
6c:a0:8d:0a:f2:ce:e0:26:eb:8e:db:17:5f:2a:10:
16:f8:81:b9:45:9a:1e:9a:61:28:06:c3:53:2e:05:
10:4d:00:8f:ea:97:73:1e:52:9d:d8:13:7c:18:b9:
ca:f4:a0:aa:ef:2a:ad:9c:6d:8c:52:78:5b:34:bf:
27:1a:42:e8:a6:f9:63:11:a8:9c:f4:4b:ee:3b:c3:
0a:6b:80:06:dc:7a:d9:1d:57:62:b6:d3:28:5f:5b:
c5:ef:d0:fa:43:81:7a:96:03:95:5d:15:f8:f8:77:
ee:b3:02:44:da:db:fa:7c:7a:d6:6e:3a:fc:94:84:
3b:8b:0a:f2:27:3c:e9:16:77:db:72:d6:16:12:b5:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.248.0/21
170.205.56.0/22
IPv6:
2602:fba2::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51312
51856
54681
56808
400917
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c7:57:12:7d:e1:8c:86:b9:95:08:3b:18:9a:65:b4:5a:6a:
b3:23:f6:69:8c:0a:b7:33:7a:bc:61:76:5c:64:44:67:d2:76:
6a:b0:2d:72:6a:68:af:b7:93:47:6b:46:cc:4a:c0:4a:2d:9c:
08:be:02:c9:ec:a4:d2:8d:97:f7:e1:9e:d4:e1:5d:04:83:ce:
22:57:cd:8f:27:56:70:27:30:dd:f0:30:35:9b:59:32:9a:52:
46:ca:4e:7a:10:21:d2:78:b7:fd:4c:c1:44:9a:d7:7c:97:bd:
29:73:8f:e0:89:be:97:01:21:fd:ff:e3:51:31:2e:ea:29:b3:
5b:9c:c0:d3:09:a3:09:26:61:18:6c:ac:2f:fc:f1:fd:fc:cf:
c9:b3:e5:47:11:59:84:ae:60:fb:4f:dd:60:4c:81:c0:98:98:
fe:0a:b1:75:51:44:e6:0a:37:a1:44:37:29:d3:67:61:1d:31:
aa:ed:45:a9:70:b6:bd:8f:21:ee:49:cc:58:22:f1:9b:fa:28:
8a:d7:d0:c5:7b:0b:0f:11:02:74:d4:b6:04:11:3e:3d:41:c8:
8f:e4:ec:29:08:5e:fb:3f:6c:0f:d4:7b:c4:6e:33:8b:3d:2c:
b8:82:a2:3f:54:22:e8:b4:70:35:ca:c1:ca:17:69:b1:d3:98:
9d:3e:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 22:06:07 2025 by rpki-client