Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
File: 4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer (raw, json)
Hash identifier: LgwRrWCzDmqQlB4hjKoIkGcK49rLdVGatH5NKUUF6Wo=
Subject key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848A293C50B213548F4B71CB280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 23 Jan 2025 01:45:34 +0000
Certificate not after: Wed 28 Apr 2027 00:45:34 +0000
Subordinate resources: AS: 174
AS: 2149
AS: 4550
AS: 6259
AS: 6299
AS: 6494
AS: 6496
AS: 7061
AS: 7458
AS: 10768
AS: 11024
AS: 11220
AS: 11526
AS: 12207
AS: 16631
AS: 19164
AS: 22099
IP: 64.4.192.0/19
IP: 64.17.48.0/20
IP: 64.202.0.0/19
IP: 64.254.192.0/19
IP: 66.28.0.0/16
IP: 66.71.224.0/20
IP: 66.102.96.0/19
IP: 66.132.0.0/17
IP: 66.250.0.0/16
IP: 206.183.224.0/19
IP: 207.152.0.0/18
IP: 207.230.0.0/19
IP: 207.234.0.0/17
IP: 207.254.144.0/20
IP: 209.17.96.0/20
IP: 209.41.192.0/18
IP: 209.115.0.0/17
IP: 209.146.0.0/17
IP: 216.28.0.0/15
IP: 216.55.80.0/20
IP: 216.168.64.0/20
IP: 216.177.96.0/19
IP: 216.229.128.0/20
IP: 2001:500:2::/48
IP: 2001:506:9::/48
IP: 2001:550::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:93:c5:0b:21:35:48:f4:b7:1c:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jan 23 01:45:34 2025 GMT
Not After : Apr 28 00:45:34 2027 GMT
Subject: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:18:59:64:9a:da:8d:56:99:db:72:56:74:
61:fd:f5:78:eb:4c:04:bf:16:e8:0c:ca:f8:3c:f8:
bf:a5:07:5e:cb:cd:c3:60:87:2e:1b:ec:65:1f:a8:
20:cb:88:b1:8b:ff:24:47:3b:45:aa:9c:80:69:e1:
cc:46:76:83:cf:6f:40:26:dc:fb:35:76:e8:c3:1a:
27:95:5e:85:f4:13:68:ec:1f:46:78:d0:1f:e1:2f:
43:de:10:4b:82:96:1e:51:be:c3:a0:96:ca:38:39:
df:89:f7:8a:ac:4c:df:d0:99:c8:25:40:fe:4d:c1:
00:17:f0:6b:a8:a7:7b:f3:98:53:14:df:83:ae:4a:
2e:8b:b2:52:0e:df:e3:63:ad:4c:95:c2:5e:73:b8:
99:8a:66:f7:0b:b3:43:37:f3:53:05:73:78:ff:22:
a1:d3:fb:bd:a4:f5:b2:08:fa:c9:2b:90:c9:b2:05:
6c:9f:4e:ea:41:7e:0d:47:99:fa:1e:26:ef:d6:90:
d9:ff:d7:6d:82:9b:80:f8:e1:ac:2d:08:79:fc:52:
b2:0e:99:49:3e:da:3e:cd:32:00:f6:60:c3:63:48:
be:f6:75:9c:1f:0c:f2:54:34:19:7e:5b:14:cf:9c:
9d:d8:a5:af:9c:16:6c:bb:ec:85:cf:20:d3:30:a0:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.192.0/19
64.17.48.0/20
64.202.0.0/19
64.254.192.0/19
66.28.0.0/16
66.71.224.0/20
66.102.96.0/19
66.132.0.0/17
66.250.0.0/16
206.183.224.0/19
207.152.0.0/18
207.230.0.0/19
207.234.0.0/17
207.254.144.0/20
209.17.96.0/20
209.41.192.0/18
209.115.0.0/17
209.146.0.0/17
216.28.0.0/15
216.55.80.0/20
216.168.64.0/20
216.177.96.0/19
216.229.128.0/20
IPv6:
2001:500:2::/48
2001:506:9::/48
2001:550::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
174
2149
4550
6259
6299
6494
6496
7061
7458
10768
11024
11220
11526
12207
16631
19164
22099
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:81:3e:07:ed:5a:64:fd:9e:26:94:c2:6a:6e:a9:36:ed:de:
71:03:63:1f:4e:9d:ac:3a:c2:38:32:bf:f3:1d:ef:6e:ea:c4:
4c:f2:8f:61:bd:94:ca:00:94:8b:e8:db:44:95:6a:24:40:8e:
09:ea:7e:a0:d8:6f:39:56:98:dd:8f:ba:8f:ff:1d:40:61:c2:
e3:6b:18:2d:41:0d:75:53:e3:fb:bd:e0:8d:4a:f5:d3:fd:ff:
8a:4d:ea:eb:26:13:1d:bd:8e:4c:36:9a:c7:6e:79:50:14:2f:
28:91:2b:4c:f2:7c:a2:36:76:e3:2b:69:c7:2a:d3:ea:bb:c5:
02:b7:8f:56:55:8f:db:f7:e1:e6:82:57:97:57:20:24:62:8f:
14:d9:70:d6:0f:7f:97:c8:d8:3b:47:25:66:91:e2:be:8e:a1:
af:73:11:e6:25:8a:a7:df:17:f9:5e:72:65:0f:0f:8f:44:16:
f7:85:f8:ab:fc:5c:8f:89:55:71:96:6e:e3:4b:9a:6f:bc:24:
41:b7:e4:ce:26:6e:aa:63:c3:0f:a4:12:fb:3c:c8:64:5b:87:
89:c6:7c:b1:13:35:89:54:ae:e1:68:05:0f:1b:8d:06:1f:68:
f5:ef:6c:39:b2:45:e3:f5:11:b2:ee:2f:74:ab:0b:db:bc:93:
b3:b9:cf:1a
-----BEGIN CERTIFICATE-----
MIIH7zCCBtegAwIBAgIUAQ0Mn0MoWEiik8ULITVI9LccsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDEyMzAxNDUzNFoXDTI3MDQyODAwNDUzNFowLzEtMCsGA1UEAxMk
NGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0MDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OoYWWSa2o1WmdtyVnRh/fV460wEvxboDMr4
PPi/pQdey83DYIcuG+xlH6ggy4ixi/8kRztFqpyAaeHMRnaDz29AJtz7NXbowxon
lV6F9BNo7B9GeNAf4S9D3hBLgpYeUb7DoJbKODnfifeKrEzf0JnIJUD+TcEAF/Br
qKd785hTFN+Drkoui7JSDt/jY61MlcJec7iZimb3C7NDN/NTBXN4/yKh0/u9pPWy
CPrJK5DJsgVsn07qQX4NR5n6Hibv1pDZ/9dtgpuA+OGsLQh5/FKyDplJPto+zTIA
9mDDY0i+9nWcHwzyVDQZflsUz5yd2KWvnBZsu+yFzyDTMKDTIwIDAQABo4IFATCC
BP0wHQYDVR0OBBYEFGnUJh9q/lqtjxLVWBqmtgszvasDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80
YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRhMDdhZjJlLWNkYmItNDhkNi05
ZjVhLTZkN2RkMGVhNDAyNC80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBl
YTQwMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgcUGCCsGAQUF
BwEHAQH/BIG1MIGyMIGOBAIAATCBhwMEBUAEwAMEBEARMAMEBUDKAAMEBUD+wAMD
AEIcAwQEQkfgAwQFQmZgAwQHQoQAAwMAQvoDBAXOt+ADBAbPmAADBAXP5gADBAfP
6gADBATP/pADBATREWADBAbRKcADBAfRcwADBAfRkgADAwHYHAMEBNg3UAMEBNio
QAMEBdixYAMEBNjlgDAfBAIAAjAZAwcAIAEFAAACAwcAIAEFBgAJAwUAIAEFUDBZ
BggrBgEFBQcBCAEB/wRKMEigRjBEAgIArgICCGUCAhHGAgIYcwICGJsCAhleAgIZ
YAICG5UCAh0iAgIqEAICKxACAivUAgItBgICL68CAkD3AgJK3AICVlMwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAWYE+B+1aZP2eJpTCam6pNu3ecQNjH06drDrCODK/8x3vburETPKPYb2UygCU
i+jbRJVqJECOCep+oNhvOVaY3Y+6j/8dQGHC42sYLUENdVPj+73gjUr10/3/ik3q
6yYTHb2OTDaax255UBQvKJErTPJ8ojZ24ytpxyrT6rvFArePVlWP2/fh5oJXl1cg
JGKPFNlw1g9/l8jYO0clZpHivo6hr3MR5iWKp98X+V5yZQ8Pj0QW94X4q/xcj4lV
cZZu40uab7wkQbfkziZuqmPDD6QS+zzIZFuHicZ8sRM1iVSu4WgFDxuNBh9o9e9s
ObJF4/URsu4vdKsL27yTs7nPGg==
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:51 2025 by rpki-client