Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
File: ac9a6201-fe8c-49a4-985d-5463076b397d.cer (raw, json)
Hash identifier: hUnwZBJKq3GlbtMZTzW/czLtsO7jmkXsZ27A2bbKaik=
Subject key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858487053738016333C2124F22B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 05 Jan 2025 01:45:33 +0000
Certificate not after: Sat 10 Apr 2027 00:45:33 +0000
Subordinate resources: AS: 3770
AS: 5738
AS: 6311
AS: 8120
AS: 10314
AS: 10809
AS: 11524
AS: 13536
AS: 14477
AS: 14877
AS: 15320
AS: 16425
AS: 20225
AS: 21547
AS: 27382
AS: 62929
IP: 64.17.96.0/19
IP: 64.25.208.0/20
IP: 64.140.192.0/18
IP: 66.109.32.0/19
IP: 66.152.96.0/19
IP: 66.186.160.0/19
IP: 66.211.128.0/19
IP: 66.231.192.0/19
IP: 67.217.96.0/19
IP: 68.65.124.0/23
IP: 68.70.48.0/20
IP: 68.233.160.0/20
IP: 69.24.0.0/20
IP: 69.49.128.0/19
IP: 69.84.128.0/19
IP: 69.84.208.0/20
IP: 69.168.0.0/20
IP: 72.0.128.0/19
IP: 72.12.64.0/19
IP: 72.15.0.0/19
IP: 72.55.224.0/19
IP: 74.220.224.0/20
IP: 98.159.208.0/20
IP: 162.223.16.0/22
IP: 162.223.204.0/22
IP: 162.246.192.0/22
IP: 173.242.96.0/20
IP: 173.243.160.0/20
IP: 176.115.176.0/21
IP: 206.128.96.0/20
IP: 207.136.192.0/18
IP: 208.103.188.0/24
IP: 209.94.96.0/19
IP: 209.198.64.0/18
IP: 216.27.112.0/20
IP: 216.59.64.0/19
IP: 216.107.192.0 -- 216.107.239.255
IP: 216.114.128.0/18
IP: 216.130.224.0/20
IP: 216.179.0.0/17
IP: 216.234.138.0/23
IP: 216.238.160.0/20
IP: 2001:4940::/32
IP: 2604:900::/32
IP: 2604:3f00::/32
IP: 2605:da80::/32
IP: 2606:9800::/32
IP: 2606:d780::/32
IP: 2607:3180::/32
IP: 2607:3900::/32
IP: 2607:fc58::/32
IP: 2607:fd48::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:53:73:80:16:33:3c:21:24:f2:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 5 01:45:33 2025 GMT
Not After : Apr 10 00:45:33 2027 GMT
Subject: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:d3:42:9b:63:c4:2b:85:41:e7:5b:10:1e:
56:35:9e:66:16:7b:32:69:42:5a:7c:9b:b4:48:6c:
c1:45:80:fb:aa:69:fb:d4:d1:73:36:e4:24:32:11:
0d:3e:9a:a4:46:06:1f:47:70:43:0f:f1:dd:c8:fa:
99:7c:11:6a:39:db:c0:de:b6:bc:fc:fd:f6:7e:d7:
06:20:ca:03:28:b6:65:03:38:c5:26:4c:c8:ea:2a:
56:c9:6b:26:fd:74:b0:7c:99:31:d9:77:c8:b6:d0:
59:03:26:d4:16:9d:a0:5c:bf:23:f5:5d:63:0a:9a:
f5:99:5e:d5:e1:61:9d:82:41:06:09:c5:c1:7b:0e:
ac:76:4d:68:ff:56:a7:5e:2c:8a:8f:f3:8e:9f:76:
68:bb:07:a5:7d:b5:0c:8d:f9:4b:cd:ba:57:b7:22:
5d:ee:f4:82:22:51:26:cd:0e:e3:0c:ff:a3:28:2b:
2e:d0:04:20:33:aa:33:17:2b:89:89:f2:e7:72:2d:
73:8a:d7:27:29:4b:4c:f2:f8:68:f0:2a:a8:04:4d:
6e:5b:ee:ef:c9:67:32:f8:18:ce:c3:05:7b:15:f2:
e1:88:96:f4:eb:1a:46:d6:e8:da:5c:ac:c4:87:7e:
49:6b:02:fa:af:98:be:fe:eb:b6:73:4d:4a:74:f6:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.17.96.0/19
64.25.208.0/20
64.140.192.0/18
66.109.32.0/19
66.152.96.0/19
66.186.160.0/19
66.211.128.0/19
66.231.192.0/19
67.217.96.0/19
68.65.124.0/23
68.70.48.0/20
68.233.160.0/20
69.24.0.0/20
69.49.128.0/19
69.84.128.0/19
69.84.208.0/20
69.168.0.0/20
72.0.128.0/19
72.12.64.0/19
72.15.0.0/19
72.55.224.0/19
74.220.224.0/20
98.159.208.0/20
162.223.16.0/22
162.223.204.0/22
162.246.192.0/22
173.242.96.0/20
173.243.160.0/20
176.115.176.0/21
206.128.96.0/20
207.136.192.0/18
208.103.188.0/24
209.94.96.0/19
209.198.64.0/18
216.27.112.0/20
216.59.64.0/19
216.107.192.0-216.107.239.255
216.114.128.0/18
216.130.224.0/20
216.179.0.0/17
216.234.138.0/23
216.238.160.0/20
IPv6:
2001:4940::/32
2604:900::/32
2604:3f00::/32
2605:da80::/32
2606:9800::/32
2606:d780::/32
2607:3180::/32
2607:3900::/32
2607:fc58::/32
2607:fd48::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3770
5738
6311
8120
10314
10809
11524
13536
14477
14877
15320
16425
20225
21547
27382
62929
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d3:27:35:99:80:ca:3d:05:ae:2b:1b:40:ec:3a:32:3f:b8:
63:81:c8:9c:43:10:f9:80:f5:c9:58:13:95:7d:2c:f9:83:87:
b0:6e:a7:8b:e9:8a:87:9e:c2:9a:08:22:8c:01:a6:a6:2f:36:
4d:a7:50:bf:45:0c:aa:c0:ba:2e:4c:f1:f1:8b:90:5b:b8:f4:
7e:4b:f1:e4:a5:ae:a6:63:28:43:04:b3:81:7f:61:98:ea:85:
28:ef:db:7e:a0:8e:6b:8f:82:fb:5a:78:29:60:2a:36:e0:49:
58:cb:be:08:3d:d4:47:c2:c5:39:52:0b:be:a0:c4:f6:e0:21:
d3:e1:51:ef:c0:37:48:bd:c7:61:48:33:2d:02:2f:ed:9e:a3:
51:cc:f1:6a:78:b7:21:d9:17:b4:b1:40:f1:d5:71:70:f1:28:
6e:be:ce:8e:e0:79:4f:d8:45:db:4d:5a:a7:b7:a5:ba:2b:38:
46:04:57:39:f8:73:6f:e5:83:8f:58:e8:4f:a8:9d:99:92:8d:
c4:de:57:23:18:81:d8:60:5e:81:43:8c:57:7e:94:27:ef:d9:
22:95:e5:22:ee:6f:9a:ee:d3:2f:9d:68:fb:c0:7a:bc:51:42:
9e:f6:17:9c:de:46:7c:bf:e2:d9:f0:c6:29:44:f4:77:66:19:
ef:ff:49:9d
-----BEGIN CERTIFICATE-----
MIIImzCCB4OgAwIBAgIUAQ0Mn0MoWEhwU3OAFjM8ISTyKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDEwNTAxNDUzM1oXDTI3MDQxMDAwNDUzM1owLzEtMCsGA1UEAxMk
YWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIzOTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BXTQptjxCuFQedbEB5WNZ5mFnsyaUJafJu0
SGzBRYD7qmn71NFzNuQkMhENPpqkRgYfR3BDD/HdyPqZfBFqOdvA3ra8/P32ftcG
IMoDKLZlAzjFJkzI6ipWyWsm/XSwfJkx2XfIttBZAybUFp2gXL8j9V1jCpr1mV7V
4WGdgkEGCcXBew6sdk1o/1anXiyKj/OOn3ZouwelfbUMjflLzbpXtyJd7vSCIlEm
zQ7jDP+jKCsu0AQgM6ozFyuJifLnci1zitcnKUtM8vho8CqoBE1uW+7vyWcy+BjO
wwV7FfLhiJb06xpG1ujaXKzEh35JawL6r5i+/uu2c01KdPbyAwIDAQABo4IFrTCC
BakwHQYDVR0OBBYEFL+is3XcI4v5ivZNnCur2IIYCnRUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h
YzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FjOWE2MjAxLWZlOGMtNDlhNC05
ODVkLTU0NjMwNzZiMzk3ZC9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2
YjM5N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwggFzBggrBgEF
BQcBBwEB/wSCAWIwggFeMIIBDAQCAAEwggEEAwQFQBFgAwQEQBnQAwQGQIzAAwQF
Qm0gAwQFQphgAwQFQrqgAwQFQtOAAwQFQufAAwQFQ9lgAwQBREF8AwQEREYwAwQE
ROmgAwQERRgAAwQFRTGAAwQFRVSAAwQERVTQAwQERagAAwQFSACAAwQFSAxAAwQF
SA8AAwQFSDfgAwQEStzgAwQEYp/QAwQCot8QAwQCot/MAwQCovbAAwQErfJgAwQE
rfOgAwQDsHOwAwQEzoBgAwQGz4jAAwQA0Ge8AwQF0V5gAwQG0cZAAwQE2BtwAwQF
2DtAMAwDBAbYa8ADBATYa+ADBAbYcoADBATYguADBAfYswADBAHY6ooDBATY7qAw
TAQCAAIwRgMFACABSUADBQAmBAkAAwUAJgQ/AAMFACYF2oADBQAmBpgAAwUAJgbX
gAMFACYHMYADBQAmBzkAAwUAJgf8WAMFACYH/UgwVgYIKwYBBQUHAQgBAf8ERzBF
oEMwQQICDroCAhZqAgIYpwICH7gCAihKAgIqOQICLQQCAjTgAgI4jQICOh0CAjvY
AgJAKQICTwECAlQrAgJq9gIDAPXRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADHTJzWZgMo9Ba4rG0DsOjI/
uGOByJxDEPmA9clYE5V9LPmDh7Bup4vpioeewpoIIowBpqYvNk2nUL9FDKrAui5M
8fGLkFu49H5L8eSlrqZjKEMEs4F/YZjqhSjv236gjmuPgvtaeClgKjbgSVjLvgg9
1EfCxTlSC76gxPbgIdPhUe/AN0i9x2FIMy0CL+2eo1HM8Wp4tyHZF7SxQPHVcXDx
KG6+zo7geU/YRdtNWqe3pborOEYEVzn4c2/lg49Y6E+onZmSjcTeVyMYgdhgXoFD
jFd+lCfv2SKV5SLub5ru0y+daPvAerxRQp72F5zeRny/4tnwxilE9HdmGe//SZ0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:36 2025 by rpki-client