
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
File: 9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer (raw, json)
Hash identifier: m6b061Xj6VCZig8ak7z83vQathkpo8bHQ3gOVt0RhFE=
Subject key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858446F168A082553321266CE1100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 03 Jan 2024 19:59:17 +0000
Certificate not after: Tue 07 Apr 2026 18:59:17 +0000
Subordinate resources: AS: 35870
IP: 23.144.200.0/24
IP: 2602:fac0::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6f:16:8a:08:25:53:32:12:66:ce:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jan 3 19:59:17 2024 GMT
Not After : Apr 7 18:59:17 2026 GMT
Subject: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:66:0a:8c:c2:ec:31:dc:b8:d5:bf:5b:b1:
3d:8a:1f:c1:b0:6b:37:3c:ff:a6:bb:3d:03:2d:77:
bc:c7:db:47:8d:77:f5:eb:55:9e:cf:a8:bb:7c:87:
a2:7e:f7:1f:04:aa:9c:57:3c:a6:04:6b:4c:62:09:
e9:3f:73:25:ff:24:6d:d8:a0:d1:4e:00:00:ae:1d:
aa:f2:5b:da:1d:d9:66:4c:d5:fa:b5:d1:9d:e2:3b:
cf:b7:7a:e5:e9:5f:e1:5a:ff:35:f6:40:c3:2d:9e:
57:be:8b:22:62:09:b9:09:b9:58:7b:9f:bb:69:08:
0b:3e:7f:ad:4d:6c:52:a3:a1:d4:4d:0e:c8:0b:f4:
fb:68:9a:57:53:f6:e7:8d:b5:5f:f2:e7:dd:15:fe:
0b:d5:aa:30:63:11:50:ea:99:3b:16:0a:f6:c0:aa:
f7:57:bd:f5:68:30:89:ce:ae:5a:02:9e:ff:b5:9b:
fc:d9:ab:04:8a:c6:ca:3e:1c:e9:1d:86:1b:6f:73:
5c:cb:cc:73:ca:56:a3:da:bd:a8:7a:9b:a2:ab:2c:
ad:0c:59:ab:3f:8c:49:45:7a:aa:b1:d9:21:7b:1b:
6b:72:09:00:a0:32:85:a7:1e:ac:e3:cd:2a:4f:24:
ff:74:a0:f4:06:47:fc:7f:bb:91:9f:2e:4c:31:29:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.200.0/24
IPv6:
2602:fac0::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35870
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:17:46:19:1b:88:45:dd:3e:92:8f:45:43:cd:7c:89:c4:2c:
eb:fb:a9:ed:9e:22:71:40:0b:ca:38:27:ba:5d:81:4b:72:77:
6c:bf:15:7f:c6:1c:20:4a:f8:36:11:ed:e7:5e:ad:58:39:4a:
17:6e:f3:26:7e:b6:de:ca:b8:b0:0e:78:85:4f:d9:e3:11:27:
38:d5:61:b7:e0:39:94:f5:a2:fc:39:52:39:45:b0:ab:c3:ca:
a0:88:08:c4:77:80:f7:32:9e:99:34:b2:d0:f5:3d:90:64:c9:
79:25:40:40:02:21:db:97:3d:45:9e:4f:62:ae:64:c1:ab:1b:
09:e0:d2:5b:4b:40:29:09:70:51:9c:53:9d:cd:a5:24:55:f1:
d3:f1:9a:da:9c:e9:d6:e7:1f:78:f6:70:ab:2d:a0:85:92:e7:
60:57:5b:95:77:be:66:48:e3:6a:26:1f:db:ab:d4:02:fa:7b:
68:f8:ef:90:d0:c5:57:fb:41:3a:52:38:b3:29:67:15:c1:68:
6a:d3:b4:f7:ab:82:c3:50:d1:de:b6:04:d9:8e:25:f7:3e:54:
f4:c1:eb:05:09:b0:1a:c7:59:a1:4d:31:a5:5f:4b:19:46:b0:
83:2b:d6:65:33:51:84:7a:49:b2:dd:75:9c:bd:57:2e:33:32:
3e:b6:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:38:43 2025 by rpki-client