Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer
File: 67b004e8-3b23-4f9d-9325-beac85825fe1.cer (raw, json)
Hash identifier: T8e2K/hNapTePOd4MO2PWPddKgmPGpp0cC+78SbFb0k=
Subject key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584819C83D05A808E5C2B4AC6600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 05 Dec 2024 01:45:33 +0000
Certificate not after: Wed 10 Mar 2027 01:45:33 +0000
Subordinate resources: AS: 22224
IP: 23.187.128.0/24
IP: 207.174.168.0/22
IP: 2602:fed6::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:c8:3d:05:a8:08:e5:c2:b4:ac:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Dec 5 01:45:33 2024 GMT
Not After : Mar 10 01:45:33 2027 GMT
Subject: CN=67b004e8-3b23-4f9d-9325-beac85825fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:e5:e7:ea:93:bc:f8:75:5d:a2:4c:b5:bc:
b9:af:a4:01:a9:79:60:d6:1d:40:43:60:91:36:ed:
96:6a:75:e5:fe:5b:04:6d:e0:a9:ce:31:6e:f6:3c:
d7:43:e9:c9:26:20:49:1b:6b:43:fb:08:24:d0:0c:
76:3b:d6:05:e1:f3:46:ce:9c:f1:2b:dc:72:80:6b:
41:25:49:9f:34:77:a8:64:2e:d1:e6:ac:a1:59:3f:
19:77:a0:43:34:5e:a2:69:c8:e7:5c:05:b9:21:20:
d0:0e:0b:b5:53:d1:a4:cf:60:a6:c6:54:a0:f6:57:
40:e9:05:a6:b1:fe:2d:40:dd:53:e9:c9:bd:ac:d2:
66:97:43:ce:73:54:3e:ef:29:43:ab:99:ed:58:e0:
4d:24:82:31:28:5c:97:ec:84:9e:48:81:91:86:06:
83:86:0d:6e:a6:24:d3:0b:d7:eb:1b:1b:e6:f1:44:
f3:fb:d5:c2:38:c4:ee:95:3c:4b:64:f2:a3:06:c4:
88:6d:1a:94:bb:67:32:02:82:82:26:28:3e:dd:dd:
93:ca:b2:01:53:ae:b5:88:a5:3d:cc:e8:dd:b8:3a:
79:f9:1c:f4:c6:1e:2b:e6:2b:2d:03:9a:76:1b:5b:
37:50:cb:91:49:1c:9a:bb:4d:4b:02:e0:99:72:d3:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.128.0/24
207.174.168.0/22
IPv6:
2602:fed6::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22224
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9a:8f:8b:22:9e:e8:f2:c7:62:3c:69:d2:e4:02:68:35:44:
ef:e5:f1:72:8e:55:2e:75:ae:07:7b:48:9b:89:e8:86:08:44:
ba:32:19:b9:25:15:0d:da:6a:43:b7:ca:58:c4:2b:56:6d:f2:
f6:59:b3:1d:f6:9d:52:44:43:96:bf:37:9a:1c:a4:3e:70:5d:
80:de:eb:22:4a:35:47:70:ba:fe:f5:e5:62:98:35:b3:77:54:
a5:37:70:27:76:e5:35:a0:15:28:e3:07:0b:9e:fd:eb:ae:20:
5c:c6:2a:28:d8:cd:93:76:b3:8d:2c:5b:1c:d6:1b:3e:08:34:
c4:f6:cc:3b:79:d3:bb:35:00:ac:df:14:a1:26:a8:c0:cc:9c:
97:07:12:d2:69:3e:f9:60:6a:6b:1f:bf:75:79:d6:67:c6:a6:
1d:14:12:e0:19:b6:a9:4f:f0:02:a5:be:4e:14:f2:8d:da:51:
72:bf:54:8a:7b:a8:83:15:06:e8:15:5b:8d:5e:99:b1:41:a2:
81:e7:e7:ba:66:92:29:15:9c:5f:3b:8a:43:9e:f1:2e:39:79:
8a:37:70:5f:c3:48:f8:d8:70:33:f0:96:d3:4f:fc:45:95:39:
2a:3f:0b:c6:c2:39:22:b8:d1:aa:a5:7e:f0:5b:8e:7c:b1:c4:
8f:9c:58:9d
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEgZyD0FqAjlwrSsZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MTIwNTAxNDUzM1oXDTI3MDMxMDAxNDUzM1owLzEtMCsGA1UEAxMk
NjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtbl5+qTvPh1XaJMtby5r6QBqXlg1h1AQ2CR
Nu2WanXl/lsEbeCpzjFu9jzXQ+nJJiBJG2tD+wgk0Ax2O9YF4fNGzpzxK9xygGtB
JUmfNHeoZC7R5qyhWT8Zd6BDNF6iacjnXAW5ISDQDgu1U9Gkz2CmxlSg9ldA6QWm
sf4tQN1T6cm9rNJml0POc1Q+7ylDq5ntWOBNJIIxKFyX7ISeSIGRhgaDhg1upiTT
C9frGxvm8UTz+9XCOMTulTxLZPKjBsSIbRqUu2cyAoKCJig+3d2TyrIBU661iKU9
zOjduDp5+Rz0xh4r5istA5p2G1s3UMuRSRyau01LAuCZctPJjwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFEBckPrArXstfrbF9LNVkPJlHP6uMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82
N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY3YjAwNGU4LTNiMjMtNGY5ZC05
MzI1LWJlYWM4NTgyNWZlMS82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4
MjVmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXu4ADBALPrqgwDgQCAAIwCAMGBCYC/tYAMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAlbQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEaaj4sinujyx2I8adLk
Amg1RO/l8XKOVS51rgd7SJuJ6IYIRLoyGbklFQ3aakO3yljEK1Zt8vZZsx32nVJE
Q5a/N5ocpD5wXYDe6yJKNUdwuv715WKYNbN3VKU3cCd25TWgFSjjBwue/euuIFzG
KijYzZN2s40sWxzWGz4INMT2zDt507s1AKzfFKEmqMDMnJcHEtJpPvlgamsfv3V5
1mfGph0UEuAZtqlP8AKlvk4U8o3aUXK/VIp7qIMVBugVW41embFBooHn57pmkikV
nF87ikOe8S45eYo3cF/DSPjYcDPwltNP/EWVOSo/C8bCOSK40aqlfvBbjnyxxI+c
WJ0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:03 2025 by rpki-client