Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
File: 1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer (raw, json)
Hash identifier: Y2OFulVxYZ2dUJNY9goTGRVpaCSp6HgCcorTHC3bBsM=
Subject key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848B0892ED0EA220C528D9C6F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 28 Jan 2025 01:45:33 +0000
Certificate not after: Mon 03 May 2027 00:45:33 +0000
Subordinate resources: AS: 400238
IP: 109.73.224.0/20
IP: 147.185.189.0/24
IP: 147.185.208.0/24
IP: 147.185.210.0/24
IP: 147.185.216.0/24
IP: 147.185.219.0/24
IP: 147.185.225.0/24
IP: 204.8.76.0/22
IP: 204.8.116.0/22
IP: 206.225.29.0/24
IP: 207.244.221.0 -- 207.244.222.255
IP: 209.127.100.0/22
IP: 209.145.41.0/24
IP: 216.87.35.0 -- 216.87.36.255
IP: 216.87.51.0 -- 216.87.52.255
IP: 216.87.57.0/24
IP: 216.87.59.0/24
IP: 216.87.61.0/24
IP: 216.114.68.0/24
IP: 2602:fc02::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:89:2e:d0:ea:22:0c:52:8d:9c:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jan 28 01:45:33 2025 GMT
Not After : May 3 00:45:33 2027 GMT
Subject: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:e6:2b:72:a7:30:db:44:7b:fa:3e:9b:b8:
bd:c1:97:1e:f3:15:90:d6:6d:76:77:0d:d5:b2:41:
57:b9:df:3d:d0:92:44:84:2d:28:22:34:0a:a8:3f:
bb:51:cc:96:a8:31:31:02:8f:b7:18:ed:06:48:3c:
ff:01:3e:b7:47:f9:14:d1:ad:b2:fb:57:6d:c3:26:
99:f3:cc:3c:a7:95:a9:53:6f:3d:45:ff:36:35:2f:
ae:92:25:0c:18:79:aa:bd:9a:55:d4:00:64:f5:cb:
4a:55:b1:b5:72:bc:b3:d1:99:78:bc:3a:63:7b:c7:
3e:67:2e:4b:a1:83:c6:24:6c:ce:75:9a:4a:db:25:
ad:21:f3:41:cc:26:3f:fd:89:8c:3a:d4:c3:49:d9:
46:64:9d:f1:71:8b:7f:82:55:7d:91:cc:58:02:a6:
c5:fb:45:79:91:97:eb:16:86:0f:1d:d6:df:3d:a1:
90:08:2a:c7:7e:1c:2c:38:d7:c1:12:6a:c0:9f:58:
6d:fd:7e:86:99:00:a1:f7:74:71:54:21:e4:f6:4a:
59:cb:8e:ac:57:57:c4:18:b2:9d:70:d5:e1:98:51:
fa:7b:35:3b:5c:04:a3:6f:ec:9c:bf:f9:b7:56:48:
1b:34:d9:18:34:03:e1:0c:01:d5:b4:9f:7e:f3:ce:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
109.73.224.0/20
147.185.189.0/24
147.185.208.0/24
147.185.210.0/24
147.185.216.0/24
147.185.219.0/24
147.185.225.0/24
204.8.76.0/22
204.8.116.0/22
206.225.29.0/24
207.244.221.0-207.244.222.255
209.127.100.0/22
209.145.41.0/24
216.87.35.0-216.87.36.255
216.87.51.0-216.87.52.255
216.87.57.0/24
216.87.59.0/24
216.87.61.0/24
216.114.68.0/24
IPv6:
2602:fc02::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400238
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:10:01:63:1a:35:66:e8:8b:08:39:ba:80:cb:18:74:a9:8c:
ae:62:09:8b:30:aa:8e:8d:3a:09:8d:52:54:dd:51:d1:33:d5:
ae:4b:26:82:5e:5d:f6:28:29:25:08:05:ca:b8:6c:2d:4c:6b:
ec:af:db:fe:4f:f9:0c:80:cd:cf:b6:20:29:d3:38:f2:d8:5a:
07:a3:cd:b5:96:40:3e:57:37:2c:18:1c:0d:fc:d9:bf:a7:fa:
58:3e:75:92:83:ce:b2:f7:e4:8e:70:ab:5c:90:8a:90:32:29:
2d:bf:c8:4a:8b:30:fe:38:51:fb:48:19:72:29:2c:4c:38:69:
dd:c6:c6:e0:ef:a5:dc:d1:c1:24:0f:b3:82:4b:5c:17:2e:d1:
9d:a2:b3:a3:73:6b:b0:49:45:24:3d:35:d4:89:03:26:7e:a9:
de:12:96:fb:9c:fb:0c:87:07:c8:47:9d:10:b6:e4:95:d6:4b:
56:47:5b:71:6c:c6:67:38:ec:75:25:7e:d4:b7:b8:82:9d:ea:
ac:18:93:06:38:b0:bc:98:62:19:db:04:9a:b4:41:d8:a1:c6:
37:02:60:85:ed:f1:5c:60:55:75:8a:ef:a2:d1:83:ee:6b:9a:
35:5f:49:76:e9:e5:05:be:07:d7:93:02:4a:54:c0:b6:2f:09:
62:67:aa:c7
-----BEGIN CERTIFICATE-----
MIIHojCCBoqgAwIBAgIUAQ0Mn0MoWEiwiS7Q6iIMUo2cb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk
MWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2YyYWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPmK3KnMNtEe/o+m7i9wZce8xWQ1m12dw3V
skFXud890JJEhC0oIjQKqD+7UcyWqDExAo+3GO0GSDz/AT63R/kU0a2y+1dtwyaZ
88w8p5WpU289Rf82NS+ukiUMGHmqvZpV1ABk9ctKVbG1cryz0Zl4vDpje8c+Zy5L
oYPGJGzOdZpK2yWtIfNBzCY//YmMOtTDSdlGZJ3xcYt/glV9kcxYAqbF+0V5kZfr
FoYPHdbfPaGQCCrHfhwsONfBEmrAn1ht/X6GmQCh93RxVCHk9kpZy46sV1fEGLKd
cNXhmFH6ezU7XASjb+ycv/m3VkgbNNkYNAPhDAHVtJ9+885uqQIDAQABo4IEtDCC
BLAwHQYDVR0OBBYEFOHCol3RpHAU14n+KZDluSu2u3cXMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x
ZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFmNmE2YzhlLWFhNzMtNGQ4Mi1h
MmIxLWU2MTllYjNmMmFlYy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIz
ZjJhZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgbcGCCsGAQUF
BwEHAQH/BIGnMIGkMIGRBAIAATCBigMEBG1J4AMEAJO5vQMEAJO50AMEAJO50gME
AJO52AMEAJO52wMEAJO54QMEAswITAMEAswIdAMEAM7hHTAMAwQAz/TdAwQAz/Te
AwQC0X9kAwQA0ZEpMAwDBADYVyMDBADYVyQwDAMEANhXMwMEANhXNAMEANhXOQME
ANhXOwMEANhXPQMEANhyRDAOBAIAAjAIAwYEJgL8AgAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBhtuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAD8QAWMaNWboiwg5uoDLGHSpjK5iCYswqo6N
OgmNUlTdUdEz1a5LJoJeXfYoKSUIBcq4bC1Ma+yv2/5P+QyAzc+2ICnTOPLYWgej
zbWWQD5XNywYHA382b+n+lg+dZKDzrL35I5wq1yQipAyKS2/yEqLMP44UftIGXIp
LEw4ad3GxuDvpdzRwSQPs4JLXBcu0Z2is6Nza7BJRSQ9NdSJAyZ+qd4Slvuc+wyH
B8hHnRC25JXWS1ZHW3Fsxmc47HUlftS3uIKd6qwYkwY4sLyYYhnbBJq0QdihxjcC
YIXt8VxgVXWK76LRg+5rmjVfSXbp5QW+B9eTAkpUwLYvCWJnqsc=
-----END CERTIFICATE-----
Generated at Thu Apr 3 20:03:40 2025 by rpki-client