Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer
File: 3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer (raw, json)
Hash identifier: ZoxpiWzCUscxr6ml9K9O8612aANUd7tVNZX/7p33IkE=
Subject key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848E42ED5A41B3A42D404E8F200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 15 Feb 2025 13:45:33 +0000
Certificate not after: Fri 21 May 2027 12:45:33 +0000
Subordinate resources: AS: 395927
IP: 172.83.96.0/21
IP: 208.72.52.0/22
IP: 2604:f040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e4:2e:d5:a4:1b:3a:42:d4:04:e8:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Feb 15 13:45:33 2025 GMT
Not After : May 21 12:45:33 2027 GMT
Subject: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:6e:82:69:56:10:b4:c2:7f:85:eb:83:e7:
a2:a4:0c:6e:59:43:4a:c4:b3:b6:eb:1e:31:4e:7c:
09:83:3d:ce:22:31:5b:54:63:07:3a:b0:2d:61:e2:
e4:34:8e:ca:82:5a:97:a3:b9:c6:33:c2:54:1c:cc:
23:49:7e:be:77:92:6c:cc:58:6b:de:78:71:36:42:
1f:f0:b1:cd:ac:e3:40:88:21:e7:86:bc:63:0e:29:
68:c5:77:95:a0:67:2e:ad:dc:c8:ad:30:6c:af:cc:
52:46:07:b3:ea:2d:3b:db:93:23:d5:80:20:c4:53:
6b:04:7d:9a:97:20:d8:cb:d9:0f:96:98:09:93:b2:
6d:98:cf:69:b8:0e:70:86:c5:dd:7e:85:5b:71:b8:
bf:71:23:5e:c3:9a:ab:1d:87:80:48:e3:d3:09:38:
d4:39:3f:a2:51:ea:8d:08:4f:43:3e:17:a5:64:fe:
b3:99:e5:b1:a7:c9:b4:fd:68:63:42:6d:d8:5a:47:
4f:65:d2:b8:01:e8:3f:bb:ea:05:b2:31:96:b4:f9:
56:ea:2b:35:4e:af:98:8b:50:aa:8c:a8:ad:33:8d:
43:b2:8e:eb:5c:a2:f0:14:5c:80:60:e5:f2:ca:62:
d6:59:15:76:7d:19:f5:84:08:3f:ed:aa:1d:5a:a0:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.96.0/21
208.72.52.0/22
IPv6:
2604:f040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395927
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:e6:40:7f:4e:6b:b7:77:65:15:79:1e:f8:2b:e3:99:30:9b:
ee:01:40:3b:c7:99:57:78:eb:f0:17:1d:cb:16:0f:e7:60:5d:
3f:f8:bb:a1:36:47:13:47:3a:69:c3:ea:3d:4b:aa:48:a9:58:
16:fa:92:8b:07:b9:3f:77:0d:f6:61:be:93:45:78:66:b7:45:
f6:28:cf:3f:05:f4:c1:0c:0b:b9:90:15:6e:6e:5d:da:6c:22:
3d:fe:6b:d7:4d:95:65:44:36:f3:e9:65:13:bb:e8:28:70:71:
3e:ea:8c:a3:72:10:2c:e6:fc:33:7b:28:33:2b:0c:89:32:73:
77:bc:f3:1d:f0:80:d5:66:d3:0d:8c:0b:f2:c5:4c:0e:12:5a:
e9:28:0e:41:8d:59:0f:c4:e6:9e:26:cc:dd:52:90:3b:cb:1b:
02:dc:5f:02:3f:4c:fb:8d:50:ed:b4:d6:e8:ca:40:7a:91:ed:
71:71:ce:dd:6d:36:2a:63:1c:d9:81:94:b3:18:1c:06:30:5a:
18:55:56:cc:fe:ea:9e:5c:ec:9f:cf:d3:24:1e:7c:70:89:a4:
af:3d:a3:88:6d:54:56:75:01:1c:0a:95:06:17:08:fd:84:d6:
26:99:4a:be:dd:06:73:2b:38:40:ce:6a:47:ce:35:3c:7a:05:
0b:ea:77:66
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEjkLtWkGzpC1ATo8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDIxNTEzNDUzM1oXDTI3MDUyMTEyNDUzM1owLzEtMCsGA1UEAxMk
M2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0MDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkelugmlWELTCf4Xrg+eipAxuWUNKxLO26x4x
TnwJgz3OIjFbVGMHOrAtYeLkNI7KglqXo7nGM8JUHMwjSX6+d5JszFhr3nhxNkIf
8LHNrONAiCHnhrxjDiloxXeVoGcurdzIrTBsr8xSRgez6i0725Mj1YAgxFNrBH2a
lyDYy9kPlpgJk7JtmM9puA5whsXdfoVbcbi/cSNew5qrHYeASOPTCTjUOT+iUeqN
CE9DPhelZP6zmeWxp8m0/WhjQm3YWkdPZdK4Aeg/u+oFsjGWtPlW6is1Tq+Yi1Cq
jKitM41Dso7rXKLwFFyAYOXyymLWWRV2fRn1hAg/7aodWqCCXwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFIhziVvXSAeeMsN+3ue4k8iY7CwSMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z
YzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzNjNjU1YWFmLTc2ZjQtNGJhYi1i
NGY3LThmYjIzYzNkNDAxMS8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2Mz
ZDQwMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAOsU2ADBALQSDQwDQQCAAIwBwMFACYE8EAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgqXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB3mQH9Oa7d3ZRV5Hvgr
45kwm+4BQDvHmVd46/AXHcsWD+dgXT/4u6E2RxNHOmnD6j1LqkipWBb6kosHuT93
DfZhvpNFeGa3RfYozz8F9MEMC7mQFW5uXdpsIj3+a9dNlWVENvPpZRO76ChwcT7q
jKNyECzm/DN7KDMrDIkyc3e88x3wgNVm0w2MC/LFTA4SWukoDkGNWQ/E5p4mzN1S
kDvLGwLcXwI/TPuNUO201ujKQHqR7XFxzt1tNipjHNmBlLMYHAYwWhhVVsz+6p5c
7J/P0yQefHCJpK89o4htVFZ1ARwKlQYXCP2E1iaZSr7dBnMrOEDOakfONTx6BQvq
d2Y=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:50:22 2025 by rpki-client