Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
File: 7b407ffa-7fa7-4255-8a63-77381712e9e8.cer (raw, json)
Hash identifier: cTBBmKa2/NbvXQLyFS6pONK9aQgVfQbZj8pIea9+7/E=
Subject key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584940E7CE4B82A05B459BC3C0C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 20 Mar 2025 18:52:37 +0000
Certificate not after: Wed 23 Jun 2027 18:52:37 +0000
Subordinate resources: AS: 21827
AS: 33111
AS: 397318
AS: 397650
IP: 64.136.96.0/23
IP: 192.35.85.0/24
IP: 192.52.228.0/24
IP: 192.111.8.0/21
IP: 199.71.142.0/23
IP: 2620:13d:d000::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:e7:ce:4b:82:a0:5b:45:9b:c3:c0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 20 18:52:37 2025 GMT
Not After : Jun 23 18:52:37 2027 GMT
Subject: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:dc:6d:20:62:19:94:fe:5b:b8:9a:69:ed:
33:4a:35:1c:c4:37:5d:35:f4:a8:32:42:53:9d:eb:
c2:96:70:25:c5:07:55:fa:41:98:36:c7:50:a0:2e:
cb:bf:03:ce:f5:d1:f2:ea:26:5e:e9:0f:43:9b:a0:
e9:47:32:75:c2:ec:6c:19:99:e6:c4:ae:be:8f:43:
35:04:90:85:fa:25:8f:27:22:b4:0f:b1:67:1e:ad:
81:c2:c9:f5:06:1b:57:60:35:35:d6:77:22:a9:c5:
44:a7:dd:7b:d8:46:74:6b:6a:7c:86:c0:7c:8a:3c:
70:9e:01:11:72:cf:dc:54:2b:3b:4c:46:d8:54:e6:
29:df:f7:eb:27:6f:15:98:c0:4e:49:49:8c:0d:cf:
0c:b1:90:b1:5a:e5:23:fd:cc:52:70:f6:ca:df:1c:
73:e1:68:33:6e:97:e3:2d:0f:cf:82:1e:74:63:e0:
1d:fb:36:8f:3d:85:e3:87:22:43:4d:d0:e1:0f:c2:
d3:12:9a:67:91:fb:78:f9:71:ae:3b:78:b2:dc:58:
14:1a:fc:5e:a0:dc:a0:3a:12:95:4e:cd:48:ec:80:
fd:2a:17:36:b4:29:15:1c:ba:f0:42:67:ca:9b:ae:
c3:c7:9c:d1:09:92:db:66:87:cd:eb:ab:a3:91:66:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.136.96.0/23
192.35.85.0/24
192.52.228.0/24
192.111.8.0/21
199.71.142.0/23
IPv6:
2620:13d:d000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21827
33111
397318
397650
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:1a:cc:5a:5d:31:f6:e4:49:1e:d4:10:e3:8c:98:3b:8c:13:
d2:95:6f:79:49:e7:f3:6a:3c:ec:f8:3c:2f:da:ce:f3:27:9e:
6a:84:2a:39:a3:4d:6a:c1:e5:95:ae:3b:1f:c8:e1:2e:00:81:
c8:12:85:fd:43:f7:ce:0e:e1:4c:f2:c1:4d:b4:35:9d:1f:b1:
c0:43:b1:59:c7:67:3c:79:d9:1a:27:7a:a6:17:8f:69:f7:d9:
de:0c:0a:90:60:3b:b4:21:4c:f4:35:89:23:02:4c:f6:bf:a8:
0d:75:c9:83:a0:39:f8:95:a3:c8:9a:be:1d:87:98:7d:4b:e3:
28:a1:68:ca:60:f0:1a:5b:6e:00:ea:42:50:fd:f7:dc:cc:30:
57:39:63:93:d0:d2:c8:de:59:2a:8b:cb:42:c4:e4:91:ac:00:
03:79:0b:19:6b:cf:9e:00:61:f9:77:ca:0d:da:2c:84:5c:d6:
de:72:09:4a:46:a7:8d:15:f2:cb:3e:1d:59:97:1f:13:5d:ba:
25:66:e4:1b:b5:b7:21:2e:28:8b:33:a6:df:7e:51:a4:4f:a3:
a6:5b:40:90:60:47:17:81:49:cd:40:40:d2:a5:94:71:39:68:
8b:84:f9:15:e5:4b:01:00:9b:c1:40:a3:c7:25:bd:22:7d:32:
f0:f4:d9:33
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWElA585LgqBbRZvDwMgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDMyMDE4NTIzN1oXDTI3MDYyMzE4NTIzN1owLzEtMCsGA1UEAxMk
N2I0MDdmZmEtN2ZhNy00MjU1LThhNjMtNzczODE3MTJlOWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uDcbSBiGZT+W7iaae0zSjUcxDddNfSoMkJT
nevClnAlxQdV+kGYNsdQoC7LvwPO9dHy6iZe6Q9Dm6DpRzJ1wuxsGZnmxK6+j0M1
BJCF+iWPJyK0D7FnHq2Bwsn1BhtXYDU11nciqcVEp9172EZ0a2p8hsB8ijxwngER
cs/cVCs7TEbYVOYp3/frJ28VmMBOSUmMDc8MsZCxWuUj/cxScPbK3xxz4Wgzbpfj
LQ/Pgh50Y+Ad+zaPPYXjhyJDTdDhD8LTEppnkft4+XGuO3iy3FgUGvxeoNygOhKV
Ts1I7ID9Khc2tCkVHLrwQmfKm67Dx5zRCZLbZofN66ujkWbi8wIDAQABo4IEUTCC
BE0wHQYDVR0OBBYEFMJzzXJBGwQwm3v0qEFl/kaAh2IhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83
YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcxMmU5ZTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdiNDA3ZmZhLTdmYTctNDI1NS04
YTYzLTc3MzgxNzEyZTllOC83YjQwN2ZmYS03ZmE3LTQyNTUtOGE2My03NzM4MTcx
MmU5ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwRwYIKwYBBQUH
AQcBAf8EODA2MCQEAgABMB4DBAFAiGADBADAI1UDBADANOQDBAPAbwgDBAHHR44w
DgQCAAIwCAMGACYgAT3QMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAlVDAgMAgVcC
AwYQBgIDBhFSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAH0azFpdMfbkSR7UEOOMmDuME9KVb3lJ5/NqPOz4
PC/azvMnnmqEKjmjTWrB5ZWuOx/I4S4AgcgShf1D984O4UzywU20NZ0fscBDsVnH
Zzx52RoneqYXj2n32d4MCpBgO7QhTPQ1iSMCTPa/qA11yYOgOfiVo8iavh2HmH1L
4yihaMpg8BpbbgDqQlD999zMMFc5Y5PQ0sjeWSqLy0LE5JGsAAN5Cxlrz54AYfl3
yg3aLIRc1t5yCUpGp40V8ss+HVmXHxNduiVm5Bu1tyEuKIszpt9+UaRPo6ZbQJBg
RxeBSc1AQNKllHE5aIuE+RXlSwEAm8FAo8clvSJ9MvD02TM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:59 2025 by rpki-client