Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer
File: ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer (raw, json)
Hash identifier: lnNJPoGkEKtDKKQG0ahVEuOnAuK6tmxXu8Fs1kyDvww=
Subject key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848D79EC2CC4437B0D118D9BE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 11 Feb 2025 01:45:34 +0000
Certificate not after: Mon 17 May 2027 00:45:34 +0000
Subordinate resources: AS: 32003
IP: 104.243.144.0/20
IP: 199.38.168.0/22
IP: 2606:780::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:9e:c2:cc:44:37:b0:d1:18:d9:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Feb 11 01:45:34 2025 GMT
Not After : May 17 00:45:34 2027 GMT
Subject: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:fa:19:43:32:81:22:e0:e6:51:fb:fd:19:
6c:33:99:49:9d:bf:f6:0a:b6:4b:e6:d5:09:e8:e5:
28:cf:6e:0e:5e:37:3b:4a:51:ef:b9:f9:34:9a:52:
18:10:fc:ed:bf:45:b5:e5:e1:84:fb:96:ad:82:39:
c1:22:89:c3:4c:cd:f7:c4:21:98:9f:65:73:55:85:
e5:9f:77:9b:7d:16:ee:d8:3f:23:f2:45:29:d4:37:
1f:bb:75:4f:05:11:0d:a2:b8:94:55:65:cc:0d:87:
dd:22:03:41:0e:76:f3:8a:8b:9f:e2:c0:c7:31:83:
29:29:c7:62:79:cd:e1:d7:33:8b:c9:51:64:99:db:
09:f4:5a:72:6d:7e:95:07:58:f9:84:db:49:66:47:
5d:eb:2f:6f:db:05:be:ef:42:b9:6a:da:35:8b:71:
bd:7e:04:28:8c:5f:a5:a4:86:51:27:8d:37:71:c9:
1f:43:6b:78:e2:e3:f5:67:52:8b:ce:4e:0d:b5:af:
be:29:79:69:3a:c5:1e:b0:be:e9:8e:02:d7:a1:9c:
be:0e:ee:20:e0:b4:00:19:c3:e4:78:fe:52:71:e7:
cc:db:78:a1:fd:33:ad:1a:d3:be:b1:12:10:62:81:
b2:33:f8:2d:07:df:2a:9b:8f:ff:03:1e:d6:45:02:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.144.0/20
199.38.168.0/22
IPv6:
2606:780::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32003
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:18:e4:b0:94:41:fe:d2:ff:1a:45:06:db:fc:00:2f:25:98:
64:47:0b:df:2b:f8:09:77:09:f0:03:97:09:53:ad:31:a8:35:
15:6a:ab:af:ba:a3:cb:14:2c:4f:ac:39:1b:71:09:40:0f:c3:
fe:51:ad:76:df:76:35:46:25:ba:3b:73:c8:88:4b:df:34:3b:
b0:62:32:e4:12:8b:cf:e1:7d:97:69:94:7e:7a:56:d9:7a:a8:
96:95:b5:74:87:f6:69:b1:6c:0a:d8:fa:8f:27:8e:9b:2e:8d:
60:e1:d1:eb:c3:58:d2:18:0a:ae:ae:7d:21:5f:7f:41:6c:4e:
30:9f:45:e8:4b:f1:ba:3f:e1:60:6f:2c:0a:46:2c:38:77:9c:
64:c8:20:79:29:8e:ab:ce:a0:ae:68:99:78:bd:a6:56:0d:86:
5b:e1:85:18:2c:ce:6b:a5:a8:ac:df:36:d7:64:e8:fd:f4:32:
50:79:40:bb:63:35:cb:10:ed:59:9c:2c:3c:4c:9b:b2:f6:a8:
a3:1d:5f:f1:2a:d7:5f:3c:74:b4:63:c9:ac:1d:3b:d7:78:3a:
78:7a:13:3f:5a:5a:18:c2:13:27:92:99:de:cd:44:e6:d3:55:
02:fc:7e:0e:ce:bb:ff:aa:e3:48:c9:47:66:25:8b:6f:68:09:
44:b6:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:43:33 2025 by rpki-client