Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
File: 32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer (raw, json)
Hash identifier: s7dRUQ431lQVzoQMibBaMt3PyZntlDc9R8+T6buOGG8=
Subject key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F43285848CD9944F6DCC6D39A52491380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 07 Feb 2025 11:36:25 +0000
Certificate not after: Wed 19 Aug 2026 00:45:20 +0000
Subordinate resources: AS: 399629
IP: 64.7.198.0/23
IP: 64.52.80.0/24
IP: 64.94.84.0/23
IP: 64.95.10.0 -- 64.95.13.255
IP: 64.190.113.0/24
IP: 65.38.120.0/23
IP: 67.217.228.0/24
IP: 69.67.172.0/23
IP: 72.5.42.0/23
IP: 96.9.124.0/23
IP: 149.248.76.0/22
IP: 162.33.176.0/22
IP: 168.100.8.0/22
IP: 192.153.57.0/24
IP: 193.149.129.0/24
IP: 193.149.176.0/24
IP: 193.149.180.0/24
IP: 193.149.185.0/24
IP: 193.149.187.0/24
IP: 193.149.189.0 -- 193.149.190.255
IP: 195.85.114.0/23
IP: 206.71.148.0/23
IP: 206.166.251.0/24
IP: 206.188.196.0/23
IP: 216.245.184.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:99:44:f6:dc:c6:d3:9a:52:49:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Feb 7 11:36:25 2025 GMT
Not After : Aug 19 00:45:20 2026 GMT
Subject: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:c2:1d:af:6c:4e:a4:5d:d6:8d:e3:9d:20:
f2:85:18:cd:a8:12:c5:6a:18:e1:75:a2:34:e5:d8:
be:6d:5f:d9:e9:33:ad:49:c1:ca:d5:5f:99:85:27:
aa:be:d1:ae:e2:ec:10:b2:b8:50:e8:99:97:7e:00:
ef:9f:ba:a9:e7:45:8b:a3:5c:8f:34:6a:02:1a:a0:
27:08:90:7e:2c:a5:40:6e:f0:0c:2d:23:9b:f4:34:
39:2d:98:04:a2:22:9c:a6:d0:9d:37:31:74:31:00:
d4:ae:01:e5:52:d3:1a:57:bf:4f:ac:53:57:0e:0f:
b6:bf:db:f2:00:03:fe:2c:70:35:e0:41:e9:c1:14:
aa:5d:e4:12:ab:bf:ea:22:27:6b:6d:72:e1:0b:c5:
e8:58:c2:63:0b:a8:26:df:1b:a1:8c:4a:0c:ee:70:
7e:97:a1:a7:d7:b2:f7:e9:84:d2:b8:6a:be:c6:4c:
c9:ab:8f:e5:00:70:b6:3b:5c:5d:99:e6:11:28:b5:
a3:5b:dd:b9:e6:72:dc:df:4f:b7:a6:bd:ee:55:e2:
ef:25:65:a2:22:38:8e:6a:02:f5:fa:15:82:1d:40:
29:19:9c:55:31:c3:9c:1b:39:41:da:ce:da:ad:72:
63:9d:48:55:c4:3c:91:2c:32:8a:fb:f9:7b:f9:3a:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
64.7.198.0/23
64.52.80.0/24
64.94.84.0/23
64.95.10.0-64.95.13.255
64.190.113.0/24
65.38.120.0/23
67.217.228.0/24
69.67.172.0/23
72.5.42.0/23
96.9.124.0/23
149.248.76.0/22
162.33.176.0/22
168.100.8.0/22
192.153.57.0/24
193.149.129.0/24
193.149.176.0/24
193.149.180.0/24
193.149.185.0/24
193.149.187.0/24
193.149.189.0-193.149.190.255
195.85.114.0/23
206.71.148.0/23
206.166.251.0/24
206.188.196.0/23
216.245.184.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399629
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:37:8b:f7:5c:ba:13:99:7e:3f:b3:24:d0:9d:cf:62:08:f9:
96:4b:3d:11:e2:48:f9:a7:58:fb:ab:7a:7b:f8:be:18:b7:81:
9d:ae:34:e5:af:fd:52:bd:56:ac:b3:8b:fb:6e:4e:e1:be:68:
11:c9:b8:e8:51:0b:5c:24:86:b9:af:79:89:d1:85:55:72:2f:
37:4e:16:f6:a4:f1:ff:82:61:99:ae:32:03:cb:71:e8:e0:31:
b6:53:c4:39:4f:4a:ad:44:44:f9:1d:93:45:57:16:91:cd:ea:
9a:62:15:ae:bd:c3:d7:f5:60:95:8e:16:65:92:53:70:ed:26:
18:23:d7:f5:79:0c:47:fa:b7:fa:e9:43:42:2b:4a:10:98:51:
2e:6a:94:17:21:05:71:8f:7d:df:ac:3f:29:24:62:de:aa:c3:
48:ba:ce:7e:2c:e9:24:d9:c6:51:22:40:92:15:c2:c1:b2:26:
5d:e2:b7:8c:33:94:1f:fc:ff:ca:25:64:3b:36:6a:30:55:14:
90:0d:27:4b:e7:63:b6:89:61:ba:9d:ef:c8:57:53:48:04:c4:
aa:f9:b7:e1:80:e9:5d:20:97:ea:32:0b:f2:7c:dd:00:65:d1:
77:7d:cc:39:0f:1c:49:c5:87:33:40:7d:41:fd:05:47:a1:6f:
fd:d4:93:09
-----BEGIN CERTIFICATE-----
MIIHrjCCBpagAwIBAgIUAQ0Mn0MoWEjNmUT23MbTmlJJE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI1MDIwNzExMzYyNVoXDTI2MDgxOTAwNDUyMFowLzEtMCsGA1UEAxMk
MzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNmMTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYjCHa9sTqRd1o3jnSDyhRjNqBLFahjhdaI0
5di+bV/Z6TOtScHK1V+ZhSeqvtGu4uwQsrhQ6JmXfgDvn7qp50WLo1yPNGoCGqAn
CJB+LKVAbvAMLSOb9DQ5LZgEoiKcptCdNzF0MQDUrgHlUtMaV79PrFNXDg+2v9vy
AAP+LHA14EHpwRSqXeQSq7/qIidrbXLhC8XoWMJjC6gm3xuhjEoM7nB+l6Gn17L3
6YTSuGq+xkzJq4/lAHC2O1xdmeYRKLWjW9255nLc30+3pr3uVeLvJWWiIjiOagL1
+hWCHUApGZxVMcOcGzlB2s7arXJjnUhVxDyRLDKK+/l7+To44QIDAQABo4IEwDCC
BLwwHQYDVR0OBBYEFMJt0yTKHW4LXr2TtW8GfDNxVQnMMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z
MmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMyZjNkZGUxLTQzZGQtNGZmZC1h
ZTI0LTBjMzhjZThjZjEwMy8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4
Y2YxMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgcMGCCsGAQUF
BwEHAQH/BIGzMIGwMIGtBAIAATCBpgMEAUAHxgMEAEA0UAMEAUBeVDAMAwQBQF8K
AwQBQF8MAwQAQL5xAwQBQSZ4AwQAQ9nkAwQBRUOsAwQBSAUqAwQBYAl8AwQClfhM
AwQCoiGwAwQCqGQIAwQAwJk5AwQAwZWBAwQAwZWwAwQAwZW0AwQAwZW5AwQAwZW7
MAwDBADBlb0DBADBlb4DBAHDVXIDBAHOR5QDBADOpvsDBAHOvMQDBADY9bgwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhkNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHs3i/dcuhOZfj+zJNCd
z2II+ZZLPRHiSPmnWPurenv4vhi3gZ2uNOWv/VK9Vqyzi/tuTuG+aBHJuOhRC1wk
hrmveYnRhVVyLzdOFvak8f+CYZmuMgPLcejgMbZTxDlPSq1ERPkdk0VXFpHN6ppi
Fa69w9f1YJWOFmWSU3DtJhgj1/V5DEf6t/rpQ0IrShCYUS5qlBchBXGPfd+sPykk
Yt6qw0i6zn4s6STZxlEiQJIVwsGyJl3it4wzlB/8/8olZDs2ajBVFJANJ0vnY7aJ
Ybqd78hXU0gExKr5t+GA6V0gl+oyC/J83QBl0Xd9zDkPHEnFhzNAfUH9BUehb/3U
kwk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:21 2025 by rpki-client