Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer
File: 7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer (raw, json)
Hash identifier: Lhf6rBCxlQm3ce/NGDfHdKykSr1SLwBdUsmtyjTXFL4=
Subject key identifier: CE:AB:69:B8:E4:70:3B:19:7D:E7:C2:E9:8A:3E:57:6E:3D:7C:1E:83
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858486528B7045E19067FEDB21700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:45:33 +0000
Certificate not after: Tue 06 Apr 2027 00:45:33 +0000
Subordinate resources: IP: 199.249.224.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:28:b7:04:5e:19:06:7f:ed:b2:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jan 1 01:45:33 2025 GMT
Not After : Apr 6 00:45:33 2027 GMT
Subject: CN=7a399323-7b1b-4575-b54c-0fca76ac3dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:c9:ac:62:3e:16:48:bb:9a:e2:ec:fd:a5:
16:04:49:d3:ea:d5:22:be:5f:db:d1:56:36:d0:fd:
55:b6:82:00:4b:28:43:c6:d6:96:69:92:63:76:06:
15:0a:e7:81:17:0d:b9:38:2d:83:92:03:8c:f0:fc:
84:b9:13:5b:ce:72:65:23:26:e8:e3:ac:ba:64:46:
9b:6b:e2:6c:39:df:78:66:6d:f9:e8:49:f0:4e:f9:
94:dc:72:cf:bf:9c:4d:ed:d8:49:75:5a:ea:3b:ef:
be:f4:1f:7f:8d:1c:a3:8b:b9:23:a1:38:fa:68:04:
d7:44:df:98:00:3c:05:a5:29:e0:b6:75:6a:30:35:
ec:d9:cc:74:51:f7:e2:a1:13:13:14:f1:ba:53:cf:
63:0f:cb:5b:f4:a4:38:3e:3a:c8:c3:c5:c5:8d:13:
c7:79:ee:53:c4:7b:7c:4c:b4:b9:01:ed:62:bd:b3:
59:99:50:6d:71:19:18:2a:63:d8:f6:9e:76:30:1a:
3c:00:30:43:8c:79:ff:60:86:98:ac:9b:9f:83:08:
9c:8b:04:e5:a6:9f:40:b9:d8:5f:f6:b2:bb:f0:f6:
14:82:3d:76:8f:e0:9d:c9:f2:e9:90:b9:1d:6b:bb:
5b:c4:f5:53:d3:93:c5:a4:cd:c4:86:ab:a2:60:3a:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AB:69:B8:E4:70:3B:19:7D:E7:C2:E9:8A:3E:57:6E:3D:7C:1E:83
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:a9:d2:cb:34:16:5d:2b:e7:97:1a:24:2f:bf:9d:f2:5b:4a:
a2:72:c1:a7:2a:8e:30:a6:d2:5a:b2:85:9f:5d:59:7f:eb:7e:
8b:a1:6f:7e:72:5d:c5:19:fd:44:97:cb:04:60:8f:a3:34:88:
3f:b0:4e:76:bc:b5:49:0d:00:bf:72:63:7a:81:3b:f1:ba:0f:
0d:6f:0b:e0:e3:b6:26:8a:ea:5a:41:f4:04:fd:a8:99:4a:68:
05:53:7a:82:7e:04:96:7e:83:9f:e6:8b:64:05:21:95:1b:52:
77:77:bd:80:6b:ec:7d:57:fb:f9:a6:f7:8d:d4:15:ef:52:07:
22:0c:85:72:b9:90:80:26:24:0d:2e:28:7d:03:bb:f9:c9:bf:
36:4a:31:ba:42:27:2a:04:ef:06:58:57:55:aa:e3:44:28:b1:
5f:f6:2e:83:5b:4e:fb:57:44:ea:02:70:65:90:e6:6b:9e:18:
79:50:d0:c0:3b:f7:d6:0e:fb:e8:30:c2:e4:d8:ef:bf:e0:dc:
0e:68:9c:dd:d8:af:e2:2d:b7:eb:2b:0c:bf:b6:24:2b:e3:14:
0c:87:16:72:73:ff:15:40:6c:61:60:58:26:7a:7c:68:4a:d1:
4e:d7:0a:f4:a6:49:1b:93:09:55:5e:e2:0a:20:54:3a:e2:82:
dd:c0:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:51 2025 by rpki-client