
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8.cer
File: 35a0be33-3824-4039-8e56-d16e5d2199a8.cer (raw, json)
Hash identifier: QV2k7ijAkyYrsd2fkICtWJCuCspEC5FW8RwGoIlxG4M=
Subject key identifier: 0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858482A262FBF897A41FDB31F0A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 10 Dec 2024 22:27:47 +0000
Certificate not after: Mon 15 Mar 2027 21:27:47 +0000
Subordinate resources: IP: 174.128.185.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:26:2f:bf:89:7a:41:fd:b3:1f:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Dec 10 22:27:47 2024 GMT
Not After : Mar 15 21:27:47 2027 GMT
Subject: CN=35a0be33-3824-4039-8e56-d16e5d2199a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:f9:c2:c4:19:ed:ea:9d:51:66:53:2a:4a:
ff:10:2f:df:2b:3c:bd:3a:bd:dc:e4:c6:a9:fc:ab:
65:7e:ba:ce:dc:1e:75:45:c8:69:31:23:fc:55:96:
a7:8d:34:01:49:a6:05:e6:07:31:4e:70:90:f9:e3:
b5:3d:78:16:c1:04:9b:37:4d:c9:95:3c:be:aa:92:
aa:c4:be:c8:86:86:dd:45:f2:01:8c:c9:95:66:94:
34:ea:db:08:04:77:13:c6:ad:44:f8:f5:eb:e0:7b:
4d:97:93:bb:5b:63:fc:e5:a6:23:48:38:d9:17:45:
32:2d:3a:11:d3:88:da:28:46:1e:dc:71:64:ec:b4:
18:9d:c0:c5:39:a0:fa:2b:dd:0a:20:46:06:33:4b:
95:d3:db:a6:6f:96:99:44:68:a4:b3:d0:ce:43:e5:
b1:2e:2d:d6:24:ae:e2:1b:99:7d:90:f6:b4:c3:f5:
00:3b:16:79:43:e3:2f:9e:d2:85:5c:2b:c9:24:db:
76:af:d9:09:07:3e:6e:96:03:7d:66:0d:75:a7:de:
e4:fd:2d:cd:f7:64:4e:d9:61:b2:d2:0a:4b:cb:48:
ce:75:e1:e3:60:68:f6:be:80:29:03:a3:e8:3b:53:
d8:ca:04:6a:88:32:4a:2d:1e:97:68:11:ff:6d:f0:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
174.128.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:d6:99:3a:a7:33:b5:43:ac:c6:1a:d4:b6:fd:5e:9a:22:e6:
a0:b6:09:54:fe:47:e1:a7:15:7f:2b:26:1c:ab:7f:9f:f5:25:
7c:d7:f4:57:ce:b5:f6:bc:38:4c:a1:5b:4c:f8:8b:eb:4d:b5:
71:29:69:27:7b:07:55:a5:68:22:05:b8:4a:dd:34:3e:23:0c:
00:92:98:00:f5:04:d5:d4:1c:c3:0a:63:1b:24:b4:00:b2:8a:
eb:74:eb:ee:9e:92:4a:20:bf:4f:9a:ec:b7:ea:2e:a5:49:17:
57:b4:26:fb:0b:8e:07:64:2d:ba:6e:da:72:5b:e5:20:ce:2f:
e1:2c:a7:0b:26:5e:19:02:3f:d8:38:24:2e:3e:8f:c9:90:ed:
d0:d4:60:68:91:a5:46:2d:61:03:26:9f:e9:d6:6b:65:ca:53:
53:00:22:10:37:d3:97:f5:f4:f8:3f:1b:2a:d2:e8:2e:c7:ad:
df:85:8f:e1:c2:a4:be:10:a1:ef:4f:6b:23:93:d5:20:b7:0b:
6c:9e:14:24:15:c3:57:f6:86:7c:a3:e3:67:3a:f0:25:5c:07:
35:5a:65:c3:15:81:66:8e:c7:bc:c6:d2:65:11:b3:5e:bd:c3:
fd:cd:7f:59:27:ad:85:47:12:5b:f1:69:c5:09:e7:57:ab:cd:
3a:1f:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:53:39 2025 by rpki-client