Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
File: a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer (raw, json)
Hash identifier: FpkWc0/3SxDi+CnT4/novqZsbvm8jSpuUUYsbpbviN8=
Subject key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285848C413F947BF5C42CB10564A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 04 Feb 2025 01:45:34 +0000
Certificate not after: Mon 10 May 2027 00:45:34 +0000
Subordinate resources: AS: 30114
IP: 23.146.88.0/24
IP: 140.235.104.0/22
IP: 2602:fab0::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:13:f9:47:bf:5c:42:cb:10:56:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Feb 4 01:45:34 2025 GMT
Not After : May 10 00:45:34 2027 GMT
Subject: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:97:08:d4:f9:bf:fe:d2:ed:c3:64:6a:ad:
34:be:c9:ca:bf:35:22:82:58:28:fc:16:5f:7a:aa:
89:f7:30:6a:28:0b:4d:9e:cf:8b:2b:8c:12:3e:05:
72:c3:e6:df:14:5f:03:b2:c0:7f:b0:5c:c9:13:35:
bd:85:91:85:71:18:59:3a:ee:c5:66:ae:d3:58:e8:
e8:3a:97:87:a4:8e:ac:61:24:8e:25:36:9d:1b:2a:
89:21:bb:21:8e:99:05:7a:50:40:26:45:6d:0b:17:
3d:cf:8c:ab:f3:1c:f0:12:0d:05:9b:f6:1e:2f:c0:
ed:2f:b4:47:b1:f4:f5:6b:2f:e6:4c:d5:b5:3f:a5:
41:f4:8a:54:1d:04:4d:d4:8b:14:dc:b9:9e:95:00:
6e:6c:00:16:c4:4d:6a:2d:9c:97:08:31:43:0c:bb:
03:c7:95:e5:15:e0:82:4f:20:99:c7:f1:6f:62:44:
19:5b:3c:76:8f:c4:93:44:85:98:6f:61:cb:1e:64:
8d:3c:b0:da:10:4d:be:6d:4a:8e:37:6c:7e:bf:83:
80:c4:9f:d8:e3:a8:8a:0c:b7:bd:bc:2f:19:1c:8f:
88:95:53:e6:05:7b:b8:f3:d2:99:db:85:48:a1:1b:
51:f8:ab:1b:70:f6:be:93:9c:a3:65:c8:71:08:ba:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.88.0/24
140.235.104.0/22
IPv6:
2602:fab0::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30114
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:3d:f7:28:fa:5b:75:8f:fc:71:8d:cc:47:27:f3:cf:5b:83:
6c:44:da:48:64:37:66:88:84:9a:d2:8f:83:9b:e3:6f:43:1b:
61:92:21:79:d5:37:32:50:4f:47:9f:56:f4:e5:ad:24:e8:bb:
6b:55:21:e0:5f:76:ee:f0:ff:5c:d9:dc:52:21:bc:11:2a:3c:
1a:f7:8c:61:85:27:f9:f3:78:d4:81:7e:4c:dc:5b:f6:db:b9:
8c:3f:af:6e:3f:5a:b0:ab:ef:12:63:29:76:c4:40:c4:23:60:
e8:1c:5f:73:b9:7c:9a:29:de:eb:08:fb:0a:3e:f4:be:14:ff:
54:fa:18:76:57:ab:e8:c9:ab:78:8b:02:b1:a9:c2:08:fd:15:
34:eb:cc:08:ce:bb:2c:4a:d0:90:2d:96:5d:68:ca:b5:ff:a5:
50:ac:18:0b:6f:99:cc:2e:bf:ce:7d:e5:41:77:6f:2e:3f:2e:
b1:0d:c9:89:af:b3:ca:af:5c:10:c8:8e:f3:83:c4:39:ef:19:
bc:7d:63:09:86:cb:35:c8:e2:cc:a2:8a:77:51:e7:1a:9e:46:
9d:0c:e9:cd:fe:c5:77:dc:83:b4:ef:e0:75:89:17:3e:a7:83:
22:e8:8d:cc:55:af:5e:13:ae:c2:12:ec:d4:ee:31:66:f6:39:
1d:57:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:07 2025 by rpki-client