Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
File: 8cb64613-5b0d-4968-b601-e2f2cf053f18.cer (raw, json)
Hash identifier: qZqBRoubpDMBIPhoRd1kj3qdHPrlmgAPUxKLJaewTxs=
Subject key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858490F746EFD350C0CF5DEEB9860
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 03 Mar 2025 01:45:33 +0000
Certificate not after: Sun 06 Jun 2027 00:45:33 +0000
Subordinate resources: IP: 192.146.156.0/24
IP: 198.162.20.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:74:6e:fd:35:0c:0c:f5:de:eb:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Mar 3 01:45:33 2025 GMT
Not After : Jun 6 00:45:33 2027 GMT
Subject: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:d3:8e:03:2e:38:ea:c0:72:80:28:1a:6e:
22:d5:8a:5e:87:91:03:e8:51:48:cc:41:c7:68:b5:
51:04:f5:ec:93:57:cd:5f:47:7e:6c:df:15:35:2b:
5e:90:0f:5f:5b:2f:25:94:b2:45:4e:cb:fd:88:89:
14:1c:7c:8e:74:c0:e1:e4:cb:f7:8f:6a:b9:e2:87:
eb:11:56:b4:a8:96:ea:01:74:8c:63:9a:f1:7c:23:
1c:ea:87:9c:d9:c5:98:a8:26:55:79:e7:77:4c:e6:
49:ca:50:c5:3b:f0:a2:76:52:4f:ec:e2:95:f2:70:
8e:30:23:6c:63:04:79:05:c4:f1:01:3e:f2:67:12:
38:f4:a8:0d:51:bf:19:cf:c8:0e:12:6c:52:98:0d:
f5:d5:70:96:3d:39:fa:2c:17:b4:2d:37:41:81:66:
11:f6:4b:59:a7:ca:00:b2:e0:68:b4:67:65:20:dc:
c3:50:21:c4:4e:c6:8b:de:5b:be:aa:d2:5f:92:e7:
55:53:92:96:5a:ba:8b:c7:c0:91:31:df:05:7c:46:
8a:8e:1e:a8:22:77:b3:61:aa:33:ca:2a:fa:0e:b7:
d3:a0:4c:10:f2:13:12:29:bf:c5:0f:43:d5:47:55:
db:81:e8:ce:13:bc:10:c3:13:2a:05:2d:32:5b:73:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
192.146.156.0/24
198.162.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:98:6a:14:75:49:64:c0:8e:32:c0:3f:41:f9:92:0f:4a:27:
12:2c:03:31:ae:4b:00:ce:cd:e9:71:9a:fe:a8:a3:f1:d8:18:
fc:6d:5b:91:de:83:c1:16:07:8e:41:04:7b:57:e2:ac:1b:26:
5a:52:13:74:00:92:fe:9e:de:2b:06:4d:71:7b:5f:14:4e:58:
a3:21:84:de:ba:56:8c:df:1a:35:7f:06:27:c8:ff:cb:79:ca:
dc:3d:bb:1e:e9:01:e2:82:48:0f:c6:cf:25:9b:af:76:61:97:
4c:cc:c3:29:17:e7:f7:60:21:05:8d:82:70:87:05:b2:e8:00:
0e:66:01:1c:81:82:e5:5f:a6:ce:43:da:06:2c:46:92:e1:d9:
c9:86:55:5c:b1:f5:9d:80:3e:16:aa:2b:55:2e:46:d2:ee:59:
db:fb:39:b7:5b:9b:ad:84:b5:96:be:52:68:e6:a1:d9:6e:9b:
80:35:9a:c4:20:2a:2e:eb:7a:45:9b:e4:3a:59:ed:c5:91:45:
3b:af:0a:c0:6d:50:0f:21:b5:4b:7e:7e:58:7e:9e:60:44:59:
72:21:3e:7b:69:b3:c8:ca:99:bc:11:f4:95:16:70:b6:dc:46:
c8:76:87:2b:59:b1:0f:23:be:8a:d7:17:8a:ce:8c:4a:10:df:
30:17:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:55 2025 by rpki-client