
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02.cer
File: 846d9d67-c485-4d9c-a479-6ee876000b02.cer (raw, json)
Hash identifier: Ql4gk0iZ7snpVx6Xwak0w+lD14MpK78dhyMCUFuJfm8=
Subject key identifier: 12:36:AB:D7:EF:ED:03:0C:83:79:19:64:A0:11:87:4E:85:FC:CA:6D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858490CA9BFE0F8076A629A7FCFD0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/846d9d67-c485-4d9c-a479-6ee876000b02.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 02 Mar 2025 01:45:33 +0000
Certificate not after: Sat 05 Jun 2027 00:45:33 +0000
Subordinate resources: IP: 148.59.154.0/24
IP: 161.199.16.0/24
IP: 167.94.160.0/24
IP: 192.107.243.0/24
IP: 2602:ff1c::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:a9:bf:e0:f8:07:6a:62:9a:7f:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Mar 2 01:45:33 2025 GMT
Not After : Jun 5 00:45:33 2027 GMT
Subject: CN=846d9d67-c485-4d9c-a479-6ee876000b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:b6:e0:f6:63:7e:3b:2c:59:c2:0b:55:91:
94:ea:e3:18:b6:dc:d0:63:e7:bd:c7:e9:ff:aa:8c:
f8:68:ac:76:a9:7f:10:66:d5:47:11:b9:f8:f8:7a:
40:59:d9:e1:08:53:a6:ec:a7:b9:67:e1:71:36:aa:
c8:11:5a:a5:84:9e:95:d4:c0:f9:7f:1d:46:98:84:
b1:f7:7e:aa:9b:c1:09:3b:94:41:8f:97:67:5c:7b:
84:00:d0:91:a7:16:98:20:94:3d:57:24:fc:cb:43:
c8:d5:af:14:db:d4:c7:60:4e:eb:53:28:99:91:7c:
92:a6:c2:61:b7:d1:5d:62:6f:36:bd:d1:bc:49:f5:
80:6b:ae:b7:65:a7:69:39:63:a7:3e:47:13:3f:e0:
70:7a:30:55:8b:f5:c7:63:9b:83:93:8b:74:2c:b2:
74:84:4d:9d:00:a0:5c:cc:9f:7b:ef:58:8e:c8:8a:
2d:dc:72:50:aa:6b:aa:74:b1:78:0d:21:71:0b:96:
7a:0d:ad:c9:62:be:5f:79:e0:b4:95:b8:10:68:34:
35:67:59:9e:3d:ba:22:04:6a:de:db:60:c0:8b:12:
f5:3f:7e:09:47:84:13:5c:a9:21:ad:45:65:de:ec:
5c:ce:52:56:1c:2b:64:15:a5:e5:6f:3f:c1:34:bc:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:AB:D7:EF:ED:03:0C:83:79:19:64:A0:11:87:4E:85:FC:CA:6D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/846d9d67-c485-4d9c-a479-6ee876000b02.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.154.0/24
161.199.16.0/24
167.94.160.0/24
192.107.243.0/24
IPv6:
2602:ff1c::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:1b:a8:70:25:ea:4a:8a:cc:a0:69:87:76:22:c3:7f:11:21:
8b:e9:09:e2:67:64:aa:d0:d9:72:07:ca:dc:a6:28:f8:b3:c7:
24:e3:6e:30:01:d4:fd:3e:5e:10:e4:68:df:04:7d:e8:71:3c:
9f:60:96:3a:df:7a:51:6f:9c:06:5a:16:76:1a:c6:d4:cc:41:
c0:ca:7d:84:18:16:6d:53:90:be:4f:9b:8d:bf:3e:5f:c8:86:
48:d9:23:a7:f3:06:12:69:d3:f9:79:8d:c6:56:dd:b7:7d:5d:
e2:9e:90:9a:36:89:7c:96:07:67:e5:c7:29:bc:88:66:80:b4:
7f:44:fe:4d:47:fb:f1:9a:75:2e:33:ce:5f:93:2b:0f:32:b2:
9f:f0:ba:b3:c5:50:c5:90:c3:cd:62:25:ea:6f:f0:4b:dc:77:
10:aa:9b:46:a6:8a:84:1d:b8:8d:7c:e5:81:9d:0e:a5:8e:d7:
47:99:0b:4a:bb:e2:94:dc:f8:71:80:bb:86:09:e1:7c:cf:12:
98:89:d7:c2:bf:33:2a:f7:4c:c3:89:e5:96:38:ec:84:33:bc:
cf:25:54:09:24:9e:90:82:67:bd:89:6c:c0:07:12:fd:96:50:
3d:f4:d0:5f:e4:da:be:b6:12:e8:80:08:a7:2c:c2:91:1f:71:
db:57:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:40 2025 by rpki-client