Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
File: a29e3674-acc6-4858-b0f1-7a2daaaed119.cer (raw, json)
Hash identifier: nnp7+Dk+92MwCdinvIzl0NGVnhAbTiHlr54pjERHxG0=
Subject key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285848C6DEA6E64DA15E05D790CB00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 05 Feb 2025 01:45:33 +0000
Certificate not after: Tue 11 May 2027 00:45:33 +0000
Subordinate resources: AS: 21693
IP: 151.215.0.0/16
IP: 192.92.217.0/24
IP: 2620:18b::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:de:a6:e6:4d:a1:5e:05:d7:90:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Feb 5 01:45:33 2025 GMT
Not After : May 11 00:45:33 2027 GMT
Subject: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:35:58:89:cb:fe:b4:26:97:e4:fa:b9:93:
08:45:bd:9a:e7:35:3b:65:ca:0f:bc:f8:ec:01:77:
cf:b5:d3:04:3e:46:36:13:9c:d3:d5:ee:e4:77:a0:
81:13:5c:b3:d6:bf:0f:56:ee:36:ac:71:7d:ff:b3:
36:47:3e:d4:8e:e3:7f:6c:01:37:29:c0:15:46:00:
9a:2c:d5:81:99:c8:36:ef:ac:e4:5d:f6:0c:66:97:
c5:7d:6d:f6:c5:c9:84:ee:d9:00:a1:cb:29:96:6d:
73:1c:11:30:e4:ab:a7:d0:b3:8d:21:7f:37:84:3c:
9e:c6:0b:a5:df:05:e2:48:d9:1c:b0:4e:bb:fd:35:
ae:69:a4:8f:1d:da:95:91:ed:c2:a2:e6:10:9c:33:
c6:0e:0c:7d:2e:04:aa:6d:08:85:6f:d7:35:4e:ef:
68:09:d8:0a:ac:d3:d5:05:f5:13:d5:45:9c:b7:69:
54:31:f2:5a:c7:65:7f:ba:5d:59:da:de:2f:4b:22:
82:10:29:40:9d:a4:40:93:20:8d:94:bf:8a:78:ea:
d0:65:2d:1b:f5:8d:9f:3e:80:40:bd:11:c2:be:24:
ae:51:67:34:5a:fe:8f:80:f7:dc:82:fc:6c:60:cf:
b8:51:7b:e3:58:0f:70:60:6a:91:e7:ee:4b:e8:0a:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
151.215.0.0/16
192.92.217.0/24
IPv6:
2620:18b::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21693
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d2:b2:13:03:6f:e9:7f:c7:7d:53:0c:66:9a:af:8e:0a:7c:
f1:46:bf:a3:18:3c:6e:fb:2f:7a:b9:c0:71:d6:10:61:10:72:
bb:70:66:76:7a:e6:b9:fd:10:cf:68:d3:4c:25:a3:cf:be:43:
b0:7d:57:5f:ac:4d:87:fa:fa:8b:2a:57:8c:b6:db:99:51:76:
e2:6d:a9:f8:b9:d8:8b:6b:26:c4:f2:dc:c0:74:c4:df:86:7f:
7b:7a:e9:a3:df:30:33:22:7d:ec:a8:65:47:3e:2d:46:56:ff:
ea:9b:07:00:b0:fc:e0:66:33:19:89:c8:4c:cf:62:6d:05:8f:
49:ec:12:b4:4e:98:41:7c:89:b7:a4:71:ae:46:ab:9d:34:47:
a7:07:e9:5a:8b:4b:3e:1c:30:5f:5c:14:2c:08:3e:00:a5:06:
1f:09:71:0f:3a:75:17:03:31:ed:41:a8:be:36:d2:0d:97:e0:
f3:03:9b:04:95:40:46:f3:c2:92:9d:85:71:4a:a8:48:92:8b:
66:7e:02:f8:1e:66:9a:3d:00:77:b6:65:46:d4:fe:c6:82:6c:
3c:84:37:4b:d5:13:ce:45:ca:84:09:ae:dc:15:b2:ac:a8:2b:
17:8c:f3:90:a3:dd:e3:b8:8a:03:3c:75:cc:e6:b0:19:c8:0b:
6d:a5:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:07 2025 by rpki-client