Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer
File: db131796-a27d-48da-80e5-76b8e7c0cbd3.cer (raw, json)
Hash identifier: hpJzlb5qzIicvGF811zkLPf2udzF8aFXDs07Z2/WzaY=
Subject key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285848B8E93C89D8B0FA9E5DA6AD80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 31 Jan 2025 01:45:33 +0000
Certificate not after: Thu 06 May 2027 00:45:33 +0000
Subordinate resources: AS: 2902
IP: 129.72.0.0/16
IP: 192.65.143.0/24
IP: 192.84.113.0/24
IP: 192.160.49.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:e9:3c:89:d8:b0:fa:9e:5d:a6:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jan 31 01:45:33 2025 GMT
Not After : May 6 00:45:33 2027 GMT
Subject: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:d5:f3:c0:5a:ff:5d:86:42:ed:93:5a:ff:
ed:0f:46:e9:52:19:33:6a:b7:8c:b0:85:47:2a:10:
ef:93:d6:20:a5:73:84:c3:62:d8:3e:5c:2b:40:cf:
09:e5:6f:18:ab:c8:10:f6:e9:77:3c:f7:66:bf:aa:
6c:ea:61:c1:81:a7:54:f7:6c:78:e0:64:f4:4b:5c:
f2:16:b6:26:dd:ad:50:19:79:ea:17:66:0b:eb:59:
22:71:11:7f:8e:1f:73:6d:25:e5:17:47:81:1c:3f:
77:b7:c7:60:8f:d3:9e:32:da:6b:a6:6d:a8:36:e0:
4e:14:d7:f8:df:1a:26:c5:05:2a:8c:47:65:58:73:
1f:51:fe:df:d7:00:08:78:e6:21:c5:b2:a2:15:f8:
bd:3e:e3:6e:68:56:be:82:b5:fb:60:06:0c:b4:dd:
da:9a:d7:a6:fa:48:1b:55:56:68:e0:7c:73:8a:ba:
80:5b:88:5f:af:2d:9a:2d:28:00:e9:3b:31:5d:51:
64:9d:9e:93:84:20:67:67:6b:28:c9:19:82:99:3e:
37:db:ae:23:b5:d5:77:5c:ce:39:d0:3c:65:a2:37:
5d:b4:60:f6:cf:a4:6f:95:c1:d1:2a:1c:66:c1:05:
2d:77:c3:ae:9e:fb:62:12:14:bb:45:9b:c5:fe:78:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.72.0.0/16
192.65.143.0/24
192.84.113.0/24
192.160.49.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2902
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:52:59:c8:c8:98:94:2f:3f:7b:1a:36:f6:f0:59:e4:82:0d:
75:ae:c7:66:13:ba:55:9a:60:6f:25:84:50:74:62:05:4a:ba:
70:b9:88:2c:04:6a:c6:9a:cd:a3:22:94:78:07:c2:99:06:c8:
fb:3a:c8:a2:00:b9:a9:63:66:cb:66:ac:25:19:bb:a5:72:91:
f2:11:d6:c0:8d:44:3b:40:fe:e4:02:50:5b:17:d3:21:df:b1:
4e:51:27:e5:5e:15:e9:e5:a3:2a:74:fb:de:92:be:2d:aa:60:
b9:70:e7:99:34:7d:3c:9a:ca:26:79:87:c4:79:08:2c:41:1b:
21:52:62:7d:39:f3:c0:84:70:2c:e7:f6:fe:d1:80:61:30:2e:
6f:27:a2:ba:ca:81:03:72:98:20:bf:e0:cd:44:84:d8:2b:b9:
b9:46:d7:b2:fb:7c:ad:5b:cf:37:cd:cc:5f:55:8a:7d:34:f5:
76:89:b0:ec:66:d8:94:82:66:05:3a:a7:5b:32:06:ad:fc:77:
46:93:95:61:63:7a:36:18:fa:df:05:f0:97:73:1b:e9:cc:6d:
bd:a6:d9:6f:a3:87:87:df:40:58:3c:52:d8:92:16:69:ef:8e:
c8:5d:7a:85:a1:ff:06:5c:f3:23:8c:1d:f3:6b:8c:5d:e4:db:
d5:c8:44:cc
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEi46TyJ2LD6nl2mrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MDEzMTAxNDUzM1oXDTI3MDUwNjAwNDUzM1owLzEtMCsGA1UEAxMk
ZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBjYmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p7V88Ba/12GQu2TWv/tD0bpUhkzareMsIVH
KhDvk9YgpXOEw2LYPlwrQM8J5W8Yq8gQ9ul3PPdmv6ps6mHBgadU92x44GT0S1zy
FrYm3a1QGXnqF2YL61kicRF/jh9zbSXlF0eBHD93t8dgj9OeMtprpm2oNuBOFNf4
3xomxQUqjEdlWHMfUf7f1wAIeOYhxbKiFfi9PuNuaFa+grX7YAYMtN3amtem+kgb
VVZo4HxzirqAW4hfry2aLSgA6TsxXVFknZ6ThCBnZ2soyRmCmT43264jtdV3XM45
0DxlojddtGD2z6RvlcHRKhxmwQUtd8OunvtiEhS7RZvF/ngtmwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFLntyt6pB1KJVfar4BWInvdzEfaVMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k
YjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RiMTMxNzk2LWEyN2QtNDhkYS04
MGU1LTc2YjhlN2MwY2JkMy9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdj
MGNiZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMB0EAgABMBcDAwCBSAMEAMBBjwMEAMBUcQMEAMCgMTAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgILVjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVUlnIyJiULz97Gjb28Fnkgg11
rsdmE7pVmmBvJYRQdGIFSrpwuYgsBGrGms2jIpR4B8KZBsj7OsiiALmpY2bLZqwl
GbulcpHyEdbAjUQ7QP7kAlBbF9Mh37FOUSflXhXp5aMqdPvekr4tqmC5cOeZNH08
msomeYfEeQgsQRshUmJ9OfPAhHAs5/b+0YBhMC5vJ6K6yoEDcpggv+DNRITYK7m5
Rtey+3ytW883zcxfVYp9NPV2ibDsZtiUgmYFOqdbMgat/HdGk5VhY3o2GPrfBfCX
cxvpzG29ptlvo4eH30BYPFLYkhZp747IXXqFof8GXPMjjB3za4xd5NvVyETM
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:37 2025 by rpki-client