
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
File: 2cdca715-b3ad-4985-b6fd-0bd7308257df.cer (raw, json)
Hash identifier: KAkAI+dFohk4dtYQ2VsATCapMf/15jfdJO+SVDmhNIM=
Subject key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285844BB22C255BEB3A25D989E5500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 31 Jan 2024 01:45:20 +0000
Certificate not after: Tue 05 May 2026 00:45:20 +0000
Subordinate resources: AS: 19528
IP: 74.209.184.0 -- 74.209.188.255
IP: 2605:14c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:bb:22:c2:55:be:b3:a2:5d:98:9e:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 31 01:45:20 2024 GMT
Not After : May 5 00:45:20 2026 GMT
Subject: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:78:54:a7:1c:8e:e4:06:87:71:3c:ca:70:
db:91:bd:86:04:20:f3:f2:35:38:da:bc:b7:28:fd:
44:6d:d6:55:ee:24:e7:c9:f6:a0:1e:42:45:d3:31:
cc:c5:a4:96:3c:e7:e1:6e:95:15:8d:fa:41:e8:22:
21:e6:73:ac:4e:27:10:be:70:f2:5f:ed:e6:60:7e:
dd:53:0f:90:1d:07:85:fa:e1:22:be:93:97:7b:44:
aa:be:f8:61:73:55:2f:ad:14:ee:0d:c5:f3:7b:0b:
8d:c1:6e:c0:90:9f:44:f7:5d:3f:55:9d:61:aa:3e:
48:73:79:33:3d:3b:e1:bf:6e:76:bd:d4:b9:df:8e:
3b:04:d4:bc:39:89:06:a9:e9:79:b8:f1:0a:42:df:
01:50:f5:bf:58:aa:70:dd:e7:a0:32:58:0e:7a:5f:
3f:a9:1d:a4:05:37:5d:29:2b:48:e1:0a:77:2e:c5:
1e:41:ab:11:c6:6e:26:ba:9a:6c:b4:25:c8:d1:dd:
77:85:97:a4:8e:f8:48:a7:f3:db:2d:e5:28:ab:e7:
8b:44:ef:db:ce:84:4c:38:00:73:3d:08:8f:62:be:
6a:0c:a7:89:10:48:9d:89:7b:2c:b2:80:e8:24:45:
15:83:12:fd:99:bd:e4:3a:4b:0a:6f:26:c1:fe:48:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
74.209.184.0-74.209.188.255
IPv6:
2605:14c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19528
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:bd:bb:95:d0:3f:da:8d:bc:9c:4c:80:24:67:2d:35:b9:b6:
0c:e3:54:f3:32:cb:e5:22:b7:11:ca:f0:ab:f6:71:7f:2e:0e:
54:ec:82:db:31:08:a3:5d:16:7f:d9:55:6b:99:71:6b:1d:7c:
0c:df:59:5c:e4:c3:11:75:c2:be:b1:0d:64:58:16:46:b5:02:
e9:aa:4f:49:75:ec:18:87:8e:bb:19:f4:3b:4b:85:e3:40:23:
e8:f8:b9:19:82:f9:b5:c1:22:54:4f:e6:fe:ca:4a:05:b1:72:
8d:88:04:20:c0:60:a4:fa:66:d1:0c:bf:3f:bf:47:26:30:be:
4c:da:64:e8:f7:e0:5a:91:dc:8d:ad:b8:a8:ad:18:17:3c:5a:
37:7b:b3:b4:b5:31:da:a2:e6:33:60:22:b0:da:10:fa:5c:b1:
e3:fa:f1:94:6f:7c:4b:fa:9a:f7:9e:be:f7:c3:e2:87:a8:e3:
ca:2a:39:29:bc:77:92:90:22:08:b9:08:d8:9f:35:b1:5c:e7:
2e:e8:40:99:7b:4c:e7:d3:b4:c4:87:ba:69:02:b8:45:50:ed:
d2:af:ca:4a:8e:23:7e:9c:b8:0f:63:5d:08:45:87:4a:21:9a:
10:f9:0d:f0:1f:60:5e:ea:f4:bf:e6:e2:a4:58:59:e5:bd:a2:
e1:48:6e:df
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWES7IsJVvrOiXZieVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDEzMTAxNDUyMFoXDTI2MDUwNTAwNDUyMFowLzEtMCsGA1UEAxMk
MmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1N2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNx4VKccjuQGh3E8ynDbkb2GBCDz8jU42ry3
KP1EbdZV7iTnyfagHkJF0zHMxaSWPOfhbpUVjfpB6CIh5nOsTicQvnDyX+3mYH7d
Uw+QHQeF+uEivpOXe0Sqvvhhc1UvrRTuDcXzewuNwW7AkJ9E910/VZ1hqj5Ic3kz
PTvhv252vdS53447BNS8OYkGqel5uPEKQt8BUPW/WKpw3eegMlgOel8/qR2kBTdd
KStI4Qp3LsUeQasRxm4muppstCXI0d13hZekjvhIp/PbLeUoq+eLRO/bzoRMOABz
PQiPYr5qDKeJEEidiXsssoDoJEUVgxL9mb3kOksKbybB/khNMwIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFNRMJa+KixdRISsSPvw+BxKnuvl7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y
Y2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJjZGNhNzE1LWIzYWQtNDk4NS1i
NmZkLTBiZDczMDgyNTdkZi8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4
MjU3ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBQEAgABMA4wDAMEA0rRuAMEAErRvDANBAIAAjAHAwUAJgUUwDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJMSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApvbuV0D/ajbycTIAk
Zy01ubYM41TzMsvlIrcRyvCr9nF/Lg5U7ILbMQijXRZ/2VVrmXFrHXwM31lc5MMR
dcK+sQ1kWBZGtQLpqk9JdewYh467GfQ7S4XjQCPo+LkZgvm1wSJUT+b+ykoFsXKN
iAQgwGCk+mbRDL8/v0cmML5M2mTo9+BakdyNrbiorRgXPFo3e7O0tTHaouYzYCKw
2hD6XLHj+vGUb3xL+pr3nr73w+KHqOPKKjkpvHeSkCIIuQjYnzWxXOcu6ECZe0zn
07TEh7ppArhFUO3Sr8pKjiN+nLgPY10IRYdKIZoQ+Q3wH2Be6vS/5uKkWFnlvaLh
SG7f
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:41 2025 by rpki-client