
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer
File: 0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer (raw, json)
Hash identifier: /hgXascsvVIKxUyMbMcmBvS5s78Qgb28JLjFumHrlqk=
Subject key identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858463C475FA66156648A1F12EE40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 17 Jun 2024 00:45:19 +0000
Certificate not after: Sun 20 Sep 2026 00:45:19 +0000
Subordinate resources: AS: 396507
IP: 23.129.64.0/24
IP: 23.190.144.0/24
IP: 2620:18c::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3c:47:5f:a6:61:56:64:8a:1f:12:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jun 17 00:45:19 2024 GMT
Not After : Sep 20 00:45:19 2026 GMT
Subject: CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:58:5d:83:9e:66:ec:7a:6b:11:47:8c:38:
d3:b7:ac:66:76:68:82:30:43:65:fa:30:06:55:7d:
db:4a:6f:99:1d:9b:0e:e6:40:4f:9a:db:56:3d:54:
04:16:c5:03:cb:d9:d6:03:1c:80:3d:98:cf:d0:c4:
18:5b:4b:c0:e6:3d:f8:1c:76:a4:d9:65:8e:b7:e6:
16:cc:48:12:75:ac:7c:d0:dd:b4:76:63:a2:b9:bf:
31:70:07:81:d8:b3:83:ae:87:35:c5:37:aa:d7:a4:
a6:c5:1d:cd:75:87:25:fe:19:22:5d:64:e7:9a:2e:
75:a8:e1:a1:1b:2b:f8:58:bc:75:0c:cb:eb:f6:93:
91:b0:bd:07:45:87:29:6e:12:88:af:02:e2:a6:f2:
af:fd:c4:68:68:d1:7d:35:ad:07:13:7c:79:8e:38:
c6:e3:fa:cc:56:f8:15:e7:5e:f0:b2:13:34:bf:06:
89:64:81:63:a7:29:b9:66:5c:54:3d:3b:c4:bf:bf:
2a:04:aa:7a:c1:f6:e0:e9:4a:a0:7f:19:2b:ff:ed:
8d:e1:12:c4:b5:77:70:65:bc:be:84:66:2d:13:b8:
30:60:ae:5f:e6:65:c2:2e:34:48:a9:9f:5c:38:01:
e7:c8:ca:a9:82:02:59:e2:43:54:0f:b8:1d:48:7e:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.64.0/24
23.190.144.0/24
IPv6:
2620:18c::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396507
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a4:dc:9a:4c:29:57:4e:5e:8f:b6:43:2a:85:ea:20:2e:99:
9a:61:99:ad:0d:75:c0:72:43:b6:45:4e:dc:ec:5a:30:5a:95:
3d:cd:4d:22:e2:bf:e9:92:7c:3c:4e:bb:47:db:c9:b0:b6:fd:
0e:78:4b:f2:2e:d9:29:a4:c5:9d:92:3d:1b:2c:9f:78:01:b8:
d8:d8:03:68:ca:fd:ba:e6:3c:0e:03:18:41:88:cc:86:0a:67:
75:f4:95:fd:35:de:aa:1e:40:e1:77:fb:06:a8:27:62:0e:c0:
1a:5a:5f:ef:7d:a7:42:4d:de:e8:7c:2b:e0:ad:a7:d2:19:92:
f7:f9:00:ba:78:c9:7f:c9:71:67:7a:39:b5:05:06:ad:9a:11:
6e:5e:69:61:16:82:79:cd:fe:11:d7:32:b9:06:c2:b9:be:c2:
3b:66:8b:1a:e5:f4:4e:3c:25:a8:7c:21:84:ee:17:81:3d:ad:
71:d8:0c:17:8e:20:93:65:64:b0:e8:35:9c:e5:5e:25:4f:c3:
79:ac:d1:4e:58:14:c9:f5:27:22:da:45:42:9d:58:44:ae:d2:
e7:0c:bc:77:25:bd:23:77:33:a2:46:b7:9c:06:2b:5e:85:3d:
14:4e:d9:df:38:15:0e:50:79:a2:0e:87:59:9a:e8:e6:5b:12:
ec:de:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:28 2025 by rpki-client