Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
File: 9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer (raw, json)
Hash identifier: A8KamDwtXcAnjPpMz86uAftTcJR/RDY7LfK7tyny0ro=
Subject key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858489A33B3F0F9BA4BBCBA89EB00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 20 Jan 2025 01:45:32 +0000
Certificate not after: Sun 25 Apr 2027 00:45:32 +0000
Subordinate resources: AS: 11573
AS: 15043
IP: 66.181.96.0/20
IP: 69.4.32.0/20
IP: 2605:82c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:33:b3:f0:f9:ba:4b:bc:ba:89:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jan 20 01:45:32 2025 GMT
Not After : Apr 25 00:45:32 2027 GMT
Subject: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:c6:3b:b9:4e:3f:d6:96:ce:8e:3e:8f:73:
bc:2e:2c:cc:0d:70:1c:de:02:36:2b:f0:a4:17:1c:
a8:22:10:a9:0c:ce:9a:ac:f5:0e:67:ec:17:25:67:
02:39:e5:de:f2:fa:69:f6:58:c4:59:11:3d:37:c9:
49:50:3d:c4:7a:d2:12:57:0c:be:1b:ad:5c:1f:82:
93:5c:7a:c9:55:09:75:2c:c5:91:82:4b:4d:df:36:
8a:7a:4c:d9:e4:e6:69:9c:f3:23:c9:c3:2a:35:cf:
12:a3:e2:b3:d6:8b:3c:da:12:68:7e:a8:44:52:db:
2e:c0:c1:4f:37:ff:68:c5:1e:25:04:04:18:06:98:
0e:8b:35:9b:88:56:aa:d3:68:3f:70:c6:0f:10:63:
62:d7:35:a7:a7:5d:a5:f3:d3:08:83:6f:d1:e3:80:
71:9a:c5:db:1e:e6:d7:d5:37:4b:c2:a6:bc:f3:74:
83:4c:49:e1:d9:7a:08:ab:af:cb:a6:cf:5f:07:58:
bf:74:15:99:c2:fa:88:f0:4e:5d:4d:c3:c1:1f:69:
49:1d:0e:1b:a7:1b:54:80:00:31:4f:5a:7e:61:3e:
75:eb:49:b4:a5:89:36:fc:fd:1d:dc:c7:91:06:37:
41:cc:df:96:6c:36:0b:80:54:7d:9e:5f:f2:63:26:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
66.181.96.0/20
69.4.32.0/20
IPv6:
2605:82c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11573
15043
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:ff:3a:b6:df:47:3e:ee:23:6a:1e:dc:77:c5:70:ba:a3:08:
94:bf:be:6b:6d:ef:e2:c1:f7:67:b0:00:50:11:78:51:c2:19:
8d:55:c2:2b:b5:54:53:00:37:88:86:ad:4f:03:af:af:b9:96:
ff:9b:68:a7:20:3e:4f:99:92:ef:c9:24:63:fb:94:d6:73:0c:
3a:09:ae:df:4c:c0:50:31:cf:1e:7f:42:d8:0f:ee:30:82:a4:
ca:09:5f:a0:61:92:89:9a:7b:bb:69:4b:d4:8a:b7:04:67:dc:
97:99:d5:b1:4b:b0:70:33:1f:c6:eb:d8:b7:99:dd:36:cd:32:
b8:a4:0a:94:83:24:97:d5:4e:5e:7a:95:ac:ee:47:30:38:f3:
a4:91:d9:da:83:da:30:ec:00:4b:25:29:47:dd:e0:28:25:b9:
31:86:e1:de:1b:5f:42:09:ab:5a:8d:38:04:da:0a:29:d6:f1:
c8:f4:e3:a4:0f:82:b2:30:48:24:31:f8:db:33:e5:ab:e4:b8:
e0:bf:51:24:61:35:0c:37:4f:80:0b:e7:96:b1:08:2f:61:4f:
1f:c4:42:43:27:a3:d3:60:2d:53:fb:4d:4b:fb:f0:77:b2:c6:
16:94:7c:37:0e:a5:9f:77:0e:b8:4b:fc:4f:4e:f4:19:be:5e:
e4:2b:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:50:23 2025 by rpki-client