Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
File: 4a669737-4387-4a5c-829a-5cf431c6469e.cer (raw, json)
Hash identifier: ewPVAJpAT6Wesx4ZI6PAQJiOan1SB4iFtO1Fc3DvBcc=
Subject key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F43285849031FCF2B9BC5BA02E811A580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 26 Feb 2025 15:45:20 +0000
Certificate not after: Tue 01 Jun 2027 14:45:20 +0000
Subordinate resources: AS: 393453
IP: 23.133.96.0/24
IP: 192.138.12.0/22
IP: 2620:138:4000::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:03:1f:cf:2b:9b:c5:ba:02:e8:11:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Feb 26 15:45:20 2025 GMT
Not After : Jun 1 14:45:20 2027 GMT
Subject: CN=4a669737-4387-4a5c-829a-5cf431c6469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:0f:32:9e:02:cd:e7:8c:41:40:1e:c2:b5:
64:ac:a8:27:01:c6:c4:d0:7a:4e:e1:80:f6:f7:2c:
09:d4:b0:77:e2:1f:28:06:5b:d9:df:b6:27:e2:c7:
d9:f2:59:68:ce:c0:04:e0:ed:d7:4f:12:7f:19:fd:
93:31:ba:3e:a0:23:a5:ad:8c:c3:16:91:03:f8:ec:
21:6c:24:bb:7c:57:cf:b1:7d:24:03:8e:08:34:8e:
fe:3f:65:ad:15:c2:7c:c2:ed:99:02:99:9a:16:8c:
41:ed:3f:f0:cb:35:67:4b:84:af:b4:fa:10:fc:95:
4d:55:e4:9a:0a:4a:1d:bf:a3:50:b1:7e:f5:12:43:
2e:b5:bb:31:69:06:e5:2f:00:2d:ed:f0:c5:b2:3d:
02:aa:70:f0:c3:d2:e4:2d:1e:e9:00:7d:c5:8b:0f:
a5:0b:b8:07:69:b7:d1:7d:0f:aa:33:a9:80:a3:4e:
68:9c:cc:96:97:6d:25:7a:19:65:f2:e9:e4:00:11:
c5:3c:58:cf:0e:23:f9:50:0e:8a:e0:2f:80:e8:be:
a3:83:e1:cf:b0:85:7e:be:90:28:5a:10:4e:2e:28:
16:50:84:c8:d8:d8:62:4f:31:c5:67:88:f3:83:31:
f6:c1:6b:92:f0:3e:89:dd:85:e2:eb:9f:88:d1:8e:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.96.0/24
192.138.12.0/22
IPv6:
2620:138:4000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393453
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:7b:e4:34:9a:5b:b7:27:2d:b1:61:40:31:b7:19:88:81:67:
2c:f9:65:f6:13:be:4a:2c:ea:dd:01:c9:a9:bb:9a:72:61:aa:
42:ee:4e:ae:cc:ec:68:c7:9b:3f:c4:92:04:f3:cc:5a:f9:b8:
ee:bb:bd:bc:0c:94:a2:14:f8:56:45:fe:ed:93:77:89:15:91:
c2:1f:9e:2c:fc:e5:dc:1d:f4:56:f8:ea:d4:9b:38:87:51:44:
dd:f2:d3:6d:29:6a:cc:95:fd:5c:35:05:2f:cb:1c:3a:55:ad:
ab:fa:34:62:aa:23:bf:fc:f7:2d:e2:9f:69:09:7b:15:dd:99:
26:b5:63:9a:8e:13:22:5a:6f:c1:76:25:36:af:2e:4f:db:12:
1d:b8:29:83:16:af:4d:d1:29:27:e1:a1:a6:93:61:76:89:16:
d0:05:f8:a6:50:63:69:73:c6:a3:75:3a:fe:7b:e2:5b:b5:94:
51:b8:6b:2c:5a:f9:5a:7a:34:71:80:8a:15:23:d3:9b:42:a2:
97:50:04:c0:7b:11:46:e4:be:48:39:dc:b6:37:ec:dd:5d:dd:
8d:af:7b:c3:1e:0c:f0:d1:1a:a5:00:28:2f:7c:57:06:ff:b9:
5e:13:85:86:7a:4e:c5:92:8d:ff:98:65:e6:6b:e0:0b:22:4f:
c2:a7:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:34 2025 by rpki-client