
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
File: 3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer (raw, json)
Hash identifier: 8ELv2rS8hkHVbnEFzgwgOlkHpgjaOQs4ZGEyBt17zh4=
Subject key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858489FC9141040F7F7336B095500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 22 Jan 2025 01:45:33 +0000
Certificate not after: Tue 27 Apr 2027 00:45:33 +0000
Subordinate resources: AS: 14228
IP: 162.249.60.0/22
IP: 2620:d5:4000::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:c9:14:10:40:f7:f7:33:6b:09:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jan 22 01:45:33 2025 GMT
Not After : Apr 27 00:45:33 2027 GMT
Subject: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:6a:65:62:35:d7:8e:80:65:e4:39:54:05:
54:07:9f:35:80:7d:1a:7f:73:72:97:43:40:5f:52:
ab:5d:d6:66:8b:e1:90:da:e2:b6:ad:66:1f:51:25:
71:5a:b7:af:bc:f7:3f:88:8e:3f:a3:1f:cf:3a:6c:
df:e0:4e:fe:88:7c:64:ea:96:1f:9b:5d:8b:2a:cd:
10:76:5f:1d:6e:03:6f:69:b0:f1:e3:bb:1a:fd:91:
d1:ab:35:37:94:25:b9:06:a9:31:b8:6c:a5:b5:56:
79:ee:31:f5:10:c0:4b:82:47:2e:c3:e8:4a:7b:57:
13:c6:0c:52:c8:0e:12:04:dc:bc:ad:18:32:a2:e6:
85:84:bb:55:fb:55:b6:4a:85:9f:85:e7:a6:40:d1:
ce:b6:bd:19:c2:d8:bd:94:ca:4b:01:19:e3:01:67:
3b:af:b9:a8:27:2b:d8:c0:3e:41:2b:28:79:df:f4:
6e:ed:89:42:86:6d:d6:ab:3b:72:0e:c2:c4:a6:8e:
61:76:60:97:b3:ff:91:c7:33:77:f3:75:10:b0:2a:
1a:a9:06:44:9d:0f:c0:0c:44:e5:f6:b4:75:e7:76:
c7:1e:21:8f:29:8c:ab:af:be:4c:59:e2:07:6a:3e:
b0:13:89:9c:8d:0c:7e:10:da:a9:82:37:52:61:f6:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.60.0/22
IPv6:
2620:d5:4000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14228
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:9f:da:3d:ac:c7:69:78:7e:fb:58:a9:8a:18:07:16:6d:f0:
72:94:28:26:b8:91:1a:19:5c:b5:3b:5f:62:ca:f8:99:2c:db:
bb:e0:87:31:e1:8a:b7:e9:23:58:1d:06:0e:d4:df:28:67:ea:
76:ad:93:50:01:af:a9:c2:ef:64:61:b7:ec:17:a7:21:8b:e2:
bb:ab:85:49:14:55:62:42:0a:39:fe:cc:02:f8:5a:3a:98:2e:
eb:8b:2e:23:a7:ea:f1:ac:54:b8:c2:6a:d8:66:d0:90:1a:83:
8e:e8:32:5e:56:12:e8:56:11:3c:63:60:cc:59:a9:dc:68:e9:
c6:9a:8e:f0:57:ff:a0:70:1e:3a:25:7c:04:78:ee:a2:96:10:
83:b6:d3:2a:88:64:15:d7:e7:db:e7:2b:5e:3a:a8:3d:ed:f1:
9f:ea:d2:bf:c6:8b:ec:be:f4:e7:82:77:4b:83:88:9c:de:28:
5f:93:a0:44:91:c7:1e:24:a4:66:b6:87:6b:4d:a8:ec:b7:74:
80:25:3f:2a:25:19:17:ca:f7:bb:0a:59:d5:aa:df:be:c3:4a:
1b:3e:29:f2:1f:9b:72:74:e2:2b:a3:d3:27:04:62:d9:de:7c:
46:a5:7d:75:89:63:51:38:6b:64:8e:da:8b:b6:2e:5e:81:a1:
73:43:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:51 2025 by rpki-client