Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer
File: dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer (raw, json)
Hash identifier: PXbOQt28XV+HixB241nbGUWukVnwURGjIBLAjq9Viqs=
Subject key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285848C413F9047FD54FAC49BDEF60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 04 Feb 2025 01:45:34 +0000
Certificate not after: Mon 10 May 2027 00:45:34 +0000
Subordinate resources: AS: 398193
IP: 23.165.112.0/24
IP: 148.59.95.0/24
IP: 2602:fd18::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:13:f9:04:7f:d5:4f:ac:49:bd:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Feb 4 01:45:34 2025 GMT
Not After : May 10 00:45:34 2027 GMT
Subject: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:a3:a4:21:33:8d:5e:70:1d:88:53:56:65:
3f:1e:22:38:7c:10:4a:0c:8a:22:17:10:f6:dc:40:
91:fe:2c:94:36:b8:9b:7b:71:13:c9:c2:f7:87:41:
14:10:eb:48:70:14:eb:17:1b:78:22:de:1f:87:eb:
26:90:7a:17:78:95:f8:4a:02:65:33:ae:7a:83:93:
da:6a:4d:08:2a:f1:da:3d:97:4c:ce:1b:38:b7:20:
de:ef:41:50:e2:69:5d:1d:54:e5:2d:3a:28:3d:a2:
ba:a4:b6:78:da:de:6b:b6:cd:a5:88:5a:09:e4:c5:
85:60:0f:e7:73:2d:b8:c3:22:e8:4a:b7:54:86:72:
c1:63:65:ce:7b:b7:c9:b7:17:f0:12:01:92:c6:12:
cd:6c:12:73:f8:09:ac:8c:21:86:05:13:e5:cf:76:
d2:4e:b9:19:a7:7d:b2:7f:7f:20:53:bd:cc:c5:4c:
ca:a0:37:9d:36:f5:e9:e0:1b:bb:c5:e1:b7:c0:4e:
f2:29:5b:b5:fd:3f:80:bb:fc:6c:24:d5:92:4f:28:
7d:9a:71:0a:16:6b:b6:e2:94:08:ff:7d:5f:d8:b9:
9e:78:8c:6c:14:d8:08:58:bb:63:58:ea:44:ec:57:
d7:c5:a1:fd:ce:bd:23:77:73:37:b1:ae:e3:ad:38:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.112.0/24
148.59.95.0/24
IPv6:
2602:fd18::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398193
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4f:3b:7a:ec:c2:77:3e:5a:45:44:a5:d7:72:80:ad:2d:85:
b9:1d:55:99:5f:d9:4f:bf:9e:ff:ce:ab:dd:a9:92:d8:72:64:
eb:ff:ba:7e:23:32:14:3d:ff:18:27:e3:69:f3:16:45:eb:6a:
ff:fa:41:3c:d8:61:0b:b0:dc:be:bb:d4:ef:a0:99:54:d9:4f:
f1:86:c1:40:21:b5:b7:07:4e:d0:dc:0f:6c:a4:42:99:9f:7e:
4c:4a:3d:06:cc:cf:c4:b6:83:c8:9b:d7:57:d2:af:3b:09:5d:
ea:45:24:cc:db:fa:ef:88:8e:22:60:fb:ad:d1:2d:8b:fa:4c:
e4:c5:29:eb:a9:63:36:43:a4:78:20:4f:2c:11:1f:5e:41:b4:
26:d7:43:7d:9c:2f:ca:6d:92:71:47:42:8f:56:98:ac:97:95:
8d:a8:71:f8:b9:0e:90:48:c6:eb:e4:ee:f2:64:a1:34:b0:66:
12:f4:b9:d3:7f:9d:e8:a8:d5:bc:49:94:96:a9:33:f8:8c:8a:
2d:c7:96:9c:c1:d5:b0:23:4b:9b:6b:ca:cf:f8:2b:4e:53:2f:
84:7e:69:66:17:b9:ca:f7:e4:7a:14:93:8c:72:35:92:91:01:
da:75:e1:06:96:8a:c3:ba:7c:93:89:95:47:fa:f5:e8:db:96:
7a:bb:ca:6d
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEjEE/kEf9VPrEm972AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDIwNDAxNDUzNFoXDTI3MDUxMDAwNDUzNFowLzEtMCsGA1UEAxMk
ZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIzM2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3KjpCEzjV5wHYhTVmU/HiI4fBBKDIoiFxD2
3ECR/iyUNribe3ETycL3h0EUEOtIcBTrFxt4It4fh+smkHoXeJX4SgJlM656g5Pa
ak0IKvHaPZdMzhs4tyDe70FQ4mldHVTlLTooPaK6pLZ42t5rts2liFoJ5MWFYA/n
cy24wyLoSrdUhnLBY2XOe7fJtxfwEgGSxhLNbBJz+AmsjCGGBRPlz3bSTrkZp32y
f38gU73MxUzKoDedNvXp4Bu7xeG3wE7yKVu1/T+Au/xsJNWSTyh9mnEKFmu24pQI
/31f2LmeeIxsFNgIWLtjWOpE7FfXxaH9zr0jd3M3sa7jrTggHQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFDV/4IAHE8CR9PdA0LpjuQro9bMRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
YWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RhZmI3YjRjLTA4Y2MtNGQ3Ni1h
ZGEyLWI1NzJhMmQyMzNhOS9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJk
MjMzYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXpXADBACUO18wDgQCAAIwCAMGBCYC/RgAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYTcTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoTzt67MJ3PlpFRKXX
coCtLYW5HVWZX9lPv57/zqvdqZLYcmTr/7p+IzIUPf8YJ+Np8xZF62r/+kE82GEL
sNy+u9TvoJlU2U/xhsFAIbW3B07Q3A9spEKZn35MSj0GzM/EtoPIm9dX0q87CV3q
RSTM2/rviI4iYPut0S2L+kzkxSnrqWM2Q6R4IE8sER9eQbQm10N9nC/KbZJxR0KP
Vpisl5WNqHH4uQ6QSMbr5O7yZKE0sGYS9LnTf53oqNW8SZSWqTP4jIotx5acwdWw
I0uba8rP+CtOUy+EfmlmF7nK9+R6FJOMcjWSkQHadeEGlorDunyTiZVH+vXo25Z6
u8pt
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:38 2025 by rpki-client