
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
File: 3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer (raw, json)
Hash identifier: MTcAi5p+P/kCPQlXB68hx8wfccgDnV682U00nS2hZ3o=
Subject key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F432858448FF43C420C254DC1B98EECA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 Jan 2024 14:31:50 +0000
Certificate not after: Sun 19 Apr 2026 13:31:50 +0000
Subordinate resources: IP: 66.209.128.0/20
IP: 68.65.96.0/20
IP: 74.126.64.0/20
IP: 96.45.240.0/20
IP: 209.173.160.0/19
IP: 216.201.0.0/18
IP: 216.255.0.0/18
IP: 2607:fa10::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:8f:f4:3c:42:0c:25:4d:c1:b9:8e:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Jan 15 14:31:50 2024 GMT
Not After : Apr 19 13:31:50 2026 GMT
Subject: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:2f:86:fb:17:a5:23:b1:20:b0:b7:6b:5d:
9a:00:93:da:2f:d9:97:e2:da:0c:bc:ce:b1:d8:f5:
ad:4c:85:a5:78:26:13:0d:33:07:70:89:9b:fe:b9:
89:80:31:b3:e2:51:40:67:d6:9a:41:fb:52:d0:a1:
3d:6a:83:cf:03:8e:6b:50:da:3a:40:a8:95:8b:18:
ee:04:ec:46:cd:80:06:ad:43:de:f0:3d:60:06:79:
8d:2c:91:d4:00:69:00:4c:71:32:6e:1d:0d:7d:85:
f8:61:b1:fd:b0:16:a9:01:30:de:b4:ef:cd:1d:1d:
3a:40:5c:f5:93:2e:0e:63:ac:f8:d7:b2:c9:48:aa:
2b:1c:a7:29:16:12:7b:c5:76:2b:d8:1e:e2:70:ce:
38:84:71:8e:12:4f:4b:22:b1:21:11:03:18:a2:07:
27:57:30:b0:57:21:d0:30:63:e2:e3:66:9f:f2:35:
7e:9a:e9:8f:cf:25:32:b7:fb:f9:8e:fa:a1:8e:33:
5e:4b:57:da:4b:8d:c0:1b:ff:09:f0:24:d4:23:cf:
2f:9b:38:f1:e5:69:c8:f5:5e:e2:f8:99:85:e6:a6:
3a:57:25:2f:12:bc:84:d8:4d:82:d8:75:99:17:e5:
56:b4:77:7a:9f:dc:16:08:0c:3e:dc:6a:83:18:81:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.209.128.0/20
68.65.96.0/20
74.126.64.0/20
96.45.240.0/20
209.173.160.0/19
216.201.0.0/18
216.255.0.0/18
IPv6:
2607:fa10::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:df:29:80:73:31:22:7f:c4:14:f8:36:ea:0f:41:82:91:a9:
3a:5c:6f:ac:e5:9b:c9:aa:b4:a7:d7:59:4e:8c:d1:52:7c:18:
c4:89:a8:47:d8:9a:43:90:67:24:c5:72:50:9e:48:3e:d5:83:
f2:56:c8:34:63:b1:55:cd:b8:84:92:b1:32:71:84:44:71:e7:
ea:6b:8f:7e:6b:85:91:8d:80:25:c6:7e:4f:82:08:45:29:ce:
ea:d7:fc:0b:4d:a5:dc:61:5a:32:63:6c:3c:ca:33:b2:09:ce:
b1:05:98:a9:3b:2a:55:08:e6:dc:62:48:83:e7:d2:29:18:b0:
3e:06:e3:dc:5a:48:55:dc:10:72:2b:eb:00:3d:55:1a:ce:75:
14:50:3e:7a:c1:ed:7b:37:94:e4:12:40:63:d9:36:fc:c6:86:
d3:4d:b6:b0:6b:ad:0e:c7:f3:69:98:b5:79:02:3b:cd:56:5c:
4c:63:f3:b9:9b:65:6b:c5:7a:54:63:fa:0f:dd:74:4d:30:6c:
72:0f:a8:99:04:86:ab:b4:6d:60:d8:93:5c:91:78:d3:61:9d:
1c:24:3c:ba:3e:38:9f:a7:0f:81:7b:45:5a:2d:07:ee:fd:8b:
1a:c3:57:dc:4d:5c:f4:62:23:d9:95:8d:4c:67:1c:42:10:08:
f9:59:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:36:33 2025 by rpki-client