Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d.cer
File: 44a262a0-ec38-457a-a9b1-90c85c56209d.cer (raw, json)
Hash identifier: CtO8lv9uyz5Bpf+p0Fd7XHs47VCxPnduG+u1n84GZ+Y=
Subject key identifier: 04:59:0B:80:84:4A:74:19:2D:A1:C2:12:32:89:7C:6C:CC:A5:2E:31
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584877154AA3D6CD006BF980E900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 07 Jan 2025 11:50:59 +0000
Certificate not after: Mon 12 Apr 2027 10:50:59 +0000
Subordinate resources: AS: 3612 -- 3615
AS: 7977
AS: 12257
AS: 14876
AS: 17187
AS: 23144
AS: 30614
AS: 46507
AS: 46977
AS: 53878
AS: 54701
AS: 64208
IP: 128.221.0.0 -- 128.222.255.255
IP: 132.237.0.0/16
IP: 137.69.0.0/16
IP: 143.166.0.0/16
IP: 147.178.0.0/16
IP: 152.62.0.0/16
IP: 163.244.0.0/16
IP: 168.159.0.0/16
IP: 170.90.4.0 -- 170.90.255.255
IP: 198.21.84.0/22
IP: 199.119.184.0/21
IP: 199.245.235.0/24
IP: 204.75.144.0/23
IP: 204.197.208.0/20
IP: 208.84.140.0/22
IP: 209.222.72.0/22
IP: 2605:8a00::/32
IP: 2607:f2b1::/32
IP: 2620:0:170::/48
IP: 2620:145::/36
IP: 2620:14c::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:15:4a:a3:d6:cd:00:6b:f9:80:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 7 11:50:59 2025 GMT
Not After : Apr 12 10:50:59 2027 GMT
Subject: CN=44a262a0-ec38-457a-a9b1-90c85c56209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:95:c5:00:3e:7d:64:fb:1b:f4:d8:7d:3d:6a:
c9:8f:22:83:c2:b6:52:c5:f5:64:e0:65:74:a7:0d:
8e:b3:d1:d1:1d:b2:df:88:05:ad:76:7a:95:9c:22:
98:95:a6:33:a7:76:77:18:09:a9:f3:2f:53:78:b6:
bc:a9:a3:c8:62:f8:d0:06:ab:ca:98:74:8c:6f:47:
c7:d2:3d:9d:b7:4c:9c:28:dc:5e:44:df:fd:c1:76:
01:36:ee:88:f8:eb:e8:54:84:00:5d:43:a7:15:bb:
d6:81:f6:fb:45:65:52:41:c4:19:a0:e3:15:95:8a:
36:f9:9a:a1:67:fe:bc:cb:b6:a2:c9:26:16:4d:fc:
62:09:f6:2a:7b:18:84:01:ca:76:df:78:f6:c2:a0:
ab:f6:af:e2:40:fb:ad:20:84:03:3e:d4:b4:ed:26:
da:1b:f8:e3:39:60:03:c5:fc:d6:0f:45:04:11:70:
26:51:c3:fe:24:94:d5:6f:88:f0:2c:e9:dc:92:ec:
33:47:c7:57:fd:f0:f2:5f:37:a3:f1:87:e6:6a:00:
76:19:88:f6:f3:77:8a:6d:79:4d:3d:a5:76:3b:66:
45:45:5d:a7:c0:7c:ab:71:1a:15:58:2b:42:94:54:
e6:d1:a8:d1:d0:4e:d6:63:50:52:b0:31:85:0b:44:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:0B:80:84:4A:74:19:2D:A1:C2:12:32:89:7C:6C:CC:A5:2E:31
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44a262a0-ec38-457a-a9b1-90c85c56209d/44a262a0-ec38-457a-a9b1-90c85c56209d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
128.221.0.0-128.222.255.255
132.237.0.0/16
137.69.0.0/16
143.166.0.0/16
147.178.0.0/16
152.62.0.0/16
163.244.0.0/16
168.159.0.0/16
170.90.4.0-170.90.255.255
198.21.84.0/22
199.119.184.0/21
199.245.235.0/24
204.75.144.0/23
204.197.208.0/20
208.84.140.0/22
209.222.72.0/22
IPv6:
2605:8a00::/32
2607:f2b1::/32
2620:0:170::/48
2620:145::/36
2620:14c::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3612-3615
7977
12257
14876
17187
23144
30614
46507
46977
53878
54701
64208
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:19:45:35:bc:73:5b:b7:37:5b:d5:6a:ee:aa:09:65:50:53:
17:3f:6d:2a:c8:bf:30:ff:38:9d:dd:c9:e9:4e:45:24:0c:24:
18:a2:79:39:4e:8a:5c:a7:da:aa:81:6d:56:c9:4a:9b:e6:af:
44:bb:04:8f:5f:5d:11:86:d1:d1:00:3e:dc:36:5d:dd:9d:59:
a0:f0:43:98:12:2f:b5:15:57:14:18:bb:b5:db:f6:1c:c4:7d:
3a:87:0a:7f:dd:e8:4d:a5:a6:8e:a2:c8:0c:55:fd:0b:89:4e:
98:4a:d4:e8:8d:ff:b5:af:df:24:6f:87:68:65:e5:17:92:d6:
a2:df:6f:3d:d9:eb:4d:99:74:23:42:dd:b0:04:fd:23:c2:8d:
8f:79:c2:34:8d:e6:26:5d:5a:99:50:b5:2b:6d:9a:b5:23:95:
a8:b2:bf:24:5d:d0:bf:2f:a8:3c:7f:cb:71:52:82:6a:2c:63:
3b:1c:43:05:85:62:cc:8b:89:d8:5b:e9:be:ed:89:47:2c:ca:
9d:0b:46:71:db:3e:a9:e8:1e:dc:6e:49:ab:29:7d:f3:86:18:
fc:22:fd:84:ae:27:c6:9f:32:86:c2:58:0d:24:e6:1e:59:b9:
85:ec:c1:84:92:05:8b:2a:9e:ad:04:4d:ee:08:7a:65:f6:b5:
24:b0:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:13:42 2025 by rpki-client