Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer
File: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer (raw, json)
Hash identifier: Sow4G8rm+UQQq/xyJji8zkwHzbE7lZho9RHvfpjZPN0=
Subject key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858487BBA1601EADDFAAF9FB0D640
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 09 Jan 2025 03:46:15 +0000
Certificate not after: Wed 14 Apr 2027 02:46:15 +0000
Subordinate resources: AS: 401560
IP: 23.131.252.0/24
IP: 2602:f744::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:ba:16:01:ea:dd:fa:af:9f:b0:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 9 03:46:15 2025 GMT
Not After : Apr 14 02:46:15 2027 GMT
Subject: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:d5:29:b9:d3:fa:54:f3:d3:55:19:e8:0e:
07:21:eb:96:c3:9a:58:c1:9a:c9:24:db:5f:a5:f0:
7f:d0:1a:9d:88:ed:ca:e3:1b:08:2d:e7:c1:79:3e:
ae:4e:a2:0f:06:11:b3:0a:ee:c8:46:ca:22:a9:36:
76:ee:dd:26:06:10:21:ca:8f:2a:1f:93:50:fe:b6:
c9:41:3a:23:f7:65:52:f3:6d:9c:02:d2:71:b9:f9:
c3:2c:fc:39:53:fc:8c:fd:92:79:03:f9:3c:70:6c:
b3:55:bc:a4:54:3e:d2:1e:15:46:28:e2:9f:cb:a6:
5c:ac:c2:c0:79:e6:46:d5:41:4f:1a:5c:2d:8f:e9:
5c:0f:35:0f:e4:f5:56:d1:3b:e1:14:a3:d7:07:3c:
62:6c:c9:7d:04:f3:01:6f:4a:33:ee:fb:76:cd:6f:
5e:bc:44:cf:f9:33:c2:16:ef:b7:52:ea:41:a9:c1:
12:9b:7d:a8:63:74:12:29:50:69:ad:b0:b0:32:72:
f5:76:57:48:e7:d5:13:b3:b9:a5:06:ee:62:a6:4f:
ee:fb:81:2f:f7:60:92:da:e7:15:84:ee:dc:51:59:
3b:8d:47:39:38:67:96:1d:15:00:87:f5:89:0a:e7:
ad:7b:e0:64:7a:44:48:a2:e6:b2:4e:38:f7:82:91:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.252.0/24
IPv6:
2602:f744::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401560
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:7c:21:ac:1b:b8:87:8d:b5:af:06:bf:36:49:da:ee:d6:fc:
05:4a:dd:f4:5c:28:cd:8a:52:f9:8a:85:c0:8c:31:44:bb:84:
35:4e:de:67:e5:4b:ac:83:e7:51:b6:37:54:68:51:41:55:02:
80:3d:cf:1e:3e:c3:74:2a:d1:02:d6:a3:6b:a8:e9:4d:85:f0:
d1:c4:3b:b2:8a:60:c9:9a:a4:32:86:f1:2c:ca:c0:17:93:e4:
85:e3:66:85:f1:1e:86:e3:a9:6b:b2:19:42:92:3f:3e:cc:7e:
6a:3e:6e:ef:07:8a:b5:b7:a5:c0:28:1c:36:2e:20:a3:10:fc:
65:aa:d9:dc:4d:ed:cf:be:0a:17:89:3e:89:22:2e:6d:f2:91:
e8:35:59:71:74:71:b5:0f:8b:69:0d:cf:14:86:22:97:08:43:
27:bf:32:d9:e1:d4:2b:22:8c:02:68:84:e3:1e:a0:bd:a9:94:
19:a6:6e:08:21:d8:92:31:30:1f:f8:d1:72:ca:1b:3d:e8:69:
10:88:8f:8a:64:2b:18:47:52:3c:78:68:73:64:8c:1f:ac:a4:
30:25:c6:5f:3b:ce:d8:b6:65:df:07:b3:33:cc:09:15:da:84:
7e:d8:f2:3f:e3:e1:b3:33:3a:5e:65:c0:15:25:4c:21:ee:d1:
8b:b7:18:c7
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEh7uhYB6t36r5+w1kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDEwOTAzNDYxNVoXDTI3MDQxNDAyNDYxNVowLzEtMCsGA1UEAxMk
M2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIwY2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov/VKbnT+lTz01UZ6A4HIeuWw5pYwZrJJNtf
pfB/0BqdiO3K4xsILefBeT6uTqIPBhGzCu7IRsoiqTZ27t0mBhAhyo8qH5NQ/rbJ
QToj92VS822cAtJxufnDLPw5U/yM/ZJ5A/k8cGyzVbykVD7SHhVGKOKfy6ZcrMLA
eeZG1UFPGlwtj+lcDzUP5PVW0TvhFKPXBzxibMl9BPMBb0oz7vt2zW9evETP+TPC
Fu+3UupBqcESm32oY3QSKVBprbCwMnL1dldI59UTs7mlBu5ipk/u+4Ev92CS2ucV
hO7cUVk7jUc5OGeWHRUAh/WJCuete+BkekRIouayTjj3gpEN6QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFIU063s7fOs3LlKrkI6fy/0+ChafMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z
YjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNiNGE0NDFmLTVkMGItNDgxMy04
MzZlLTJhZWZkNTRiMGNhMS8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0
YjBjYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXg/wwDgQCAAIwCAMGACYC90QAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYgmDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVfCGsG7iHjbWvBr82Sdru1vwF
St30XCjNilL5ioXAjDFEu4Q1Tt5n5Uusg+dRtjdUaFFBVQKAPc8ePsN0KtEC1qNr
qOlNhfDRxDuyimDJmqQyhvEsysAXk+SF42aF8R6G46lrshlCkj8+zH5qPm7vB4q1
t6XAKBw2LiCjEPxlqtncTe3PvgoXiT6JIi5t8pHoNVlxdHG1D4tpDc8UhiKXCEMn
vzLZ4dQrIowCaITjHqC9qZQZpm4IIdiSMTAf+NFyyhs96GkQiI+KZCsYR1I8eGhz
ZIwfrKQwJcZfO87YtmXfB7MzzAkV2oR+2PI/4+GzMzpeZcAVJUwh7tGLtxjH
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:52 2025 by rpki-client