
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
File: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer (raw, json)
Hash identifier: MBDbBzLENTIk/Oaoyw/HJolaLV8hJmb4LFJ8fnZPwVo=
Subject key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F432858476DD410B02C462054691AB9B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Oct 2024 11:30:21 +0000
Certificate not after: Thu 24 Dec 2026 15:23:32 +0000
Subordinate resources: AS: 396500
AS: 401368 -- 401371
IP: 23.187.152.0/24
IP: 2602:f82d::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6d:d4:10:b0:2c:46:20:54:69:1a:b9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Oct 4 11:30:21 2024 GMT
Not After : Dec 24 15:23:32 2026 GMT
Subject: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:e0:38:a6:4c:cb:9d:e3:6d:f1:94:66:5c:
70:ee:47:e9:92:84:50:85:25:ea:9e:ee:d0:48:9a:
c1:5f:09:36:44:cd:e6:2a:8d:62:04:60:7b:1d:b5:
68:2e:71:1a:45:24:33:43:69:33:dc:9d:0a:c2:5d:
f8:8b:bb:2d:ad:17:ec:e5:ad:d4:13:c0:09:79:e0:
31:03:d8:6b:40:95:83:c4:26:fc:9c:af:06:70:c0:
1e:d8:20:25:5a:97:17:47:f9:ea:b3:bb:b8:e1:9d:
ce:53:5f:50:03:7b:85:cc:18:56:b3:46:4b:16:53:
dc:51:be:0c:3a:c9:de:bb:4b:10:46:20:fd:a3:0d:
66:a5:e9:30:d3:5b:8c:83:ed:16:24:ef:6c:09:04:
4a:68:de:88:11:c2:79:51:ed:de:d4:d8:70:b9:ba:
3a:85:70:2d:f5:b8:b2:8a:e2:0d:18:5a:58:a2:b1:
bb:0d:f3:89:75:0b:f9:27:27:ea:7b:6f:2b:92:2b:
af:fb:23:60:7d:e2:fd:6e:a0:d4:e9:cc:74:f2:43:
61:e4:19:9f:9c:b0:91:28:f2:c1:0f:1a:6c:8f:bb:
9a:c7:c0:ef:b4:7c:71:93:71:bb:56:ae:08:27:b7:
13:1e:18:b2:46:5a:4a:e3:d5:a7:48:2b:6b:43:e7:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.152.0/24
IPv6:
2602:f82d::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396500
401368-401371
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:1e:fd:bc:77:3b:b0:b4:d1:84:29:e0:e6:31:97:d5:81:64:
0c:aa:3f:e4:83:6b:94:b5:c8:2b:87:b3:d6:a5:9f:21:4c:c3:
06:ad:41:8c:98:1e:b7:59:9e:f6:e7:39:ea:b2:64:22:93:2d:
1a:47:9c:45:1e:d7:a8:0f:ca:62:28:4e:67:7f:91:68:f4:d0:
f5:01:f8:67:98:df:47:33:96:40:5e:60:3b:0b:ea:a2:4d:8a:
da:96:3e:6f:de:6b:8d:6e:45:9b:73:bd:68:15:82:42:60:4d:
62:e7:b0:db:d2:f6:e1:4d:76:2a:10:e7:1b:1f:b2:7d:5a:50:
a4:69:5d:a2:fc:14:bb:00:06:67:59:f8:03:64:ac:7c:5e:9b:
ca:50:af:03:eb:61:de:c9:37:e8:27:52:c1:03:99:8e:40:af:
f6:8c:1b:62:37:07:33:ce:d1:c1:61:5d:4a:36:71:b1:98:98:
15:31:7d:a6:2f:95:4e:83:ab:13:11:68:fb:0d:26:fa:84:ec:
7f:54:f3:07:2b:db:84:9c:e2:74:bc:c6:c0:a8:26:57:5b:52:
2d:c0:75:f8:13:39:a5:10:0b:a8:eb:b7:71:3a:8d:32:a8:3c:
b8:55:cf:e5:da:22:a5:b5:85:43:35:aa:d9:4a:a1:1d:a9:2b:
ed:f9:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 02:11:34 2025 by rpki-client