Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer
File: 35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer (raw, json)
Hash identifier: rYeKGgXtfA3+xp54xnKnaZ4aByDbiRvv8VA3wfJhvEc=
Subject key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858484E10E7E9360AE4EA159BADE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 23 Dec 2024 19:14:00 +0000
Certificate not after: Sun 28 Mar 2027 18:14:00 +0000
Subordinate resources: AS: 3402
IP: 64.239.32.0/22
IP: 64.239.116.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:10:e7:e9:36:0a:e4:ea:15:9b:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Dec 23 19:14:00 2024 GMT
Not After : Mar 28 18:14:00 2027 GMT
Subject: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:d1:64:a7:2d:4e:56:bc:89:6a:a9:3d:41:
45:d6:37:c7:87:8b:bc:62:33:c0:24:ad:9c:d1:d5:
6d:d8:bb:88:5c:d0:30:9d:c8:0e:84:2d:e2:54:cf:
08:72:2f:32:e1:37:9c:6c:cf:0a:e5:d9:db:e6:36:
12:25:4d:38:8d:8e:a9:0a:a6:6a:bd:2a:34:18:2e:
a1:09:2f:d1:7c:f5:ea:e8:cb:49:f8:80:e5:2b:fe:
2e:b1:fd:d4:a8:7e:b8:7a:55:b6:84:f6:e9:63:5c:
88:0b:29:60:35:49:7d:7a:93:69:c0:fa:1c:05:19:
1e:0a:db:d2:db:3e:f1:76:76:7e:43:f9:b6:1b:bd:
45:e8:27:73:00:ac:e8:1f:e7:b0:70:52:6e:e6:ae:
e6:f6:ec:cc:49:e1:c3:08:ed:76:68:dc:8a:38:e1:
09:98:38:e2:d6:18:96:e0:f2:fe:e5:d8:6a:b9:9c:
5b:f7:3b:db:f4:11:03:0d:77:ae:9d:7e:b9:64:34:
7e:65:f8:80:05:a2:20:f2:61:c9:0b:d8:21:56:3e:
5a:82:e6:34:24:88:d3:bd:37:d8:16:12:b1:70:a8:
08:b7:05:77:bb:8c:34:9c:5f:47:4a:5f:67:b2:3a:
26:ef:eb:40:81:9f:24:8c:49:80:a8:b5:ad:bb:e2:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.32.0/22
64.239.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3402
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:3a:5c:34:78:8c:25:7e:1b:38:07:37:bf:db:8b:d4:ce:4b:
fb:5c:68:39:8a:a2:ff:30:f4:dd:e9:6c:2e:27:21:10:a2:35:
ae:e7:49:d0:dc:09:1d:62:09:6b:c0:b5:9b:dc:76:aa:4b:91:
8f:ea:e7:08:5b:59:3d:d4:fb:7d:e4:e0:d8:de:71:a9:e1:79:
07:8e:1c:8d:31:b2:2c:f5:4d:a8:23:25:4c:cf:bf:34:ea:bc:
26:e7:17:58:42:b6:2e:74:23:e6:51:cc:f3:e7:db:a0:7d:26:
ba:ea:23:d8:e2:fc:2a:34:78:93:7f:d5:be:b5:57:c6:4d:ca:
e5:0a:a8:e0:45:da:67:49:a8:0a:8f:02:60:24:e6:3b:ee:74:
a1:bf:92:ea:c4:00:6f:82:63:83:be:7b:e1:8e:20:b3:45:2a:
4a:6d:1b:d3:4d:d9:d8:b4:4f:2a:b7:81:9d:46:12:f3:18:11:
ea:1b:86:23:96:67:b9:48:ba:6d:17:79:4c:90:00:f2:df:3a:
47:b4:41:8c:03:f1:4b:57:ef:d5:c5:a8:35:47:8c:e9:64:e8:
d7:36:db:96:db:c8:0b:47:4e:94:35:79:85:d6:6e:08:d2:4b:
b0:68:ca:3f:fb:75:b4:0a:04:f4:4d:a2:fa:53:52:fd:80:9e:
e3:41:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:13 2025 by rpki-client