Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72.cer
File: a17da6e4-914e-42ef-9d06-8048ae444a72.cer (raw, json)
Hash identifier: 87k7c8NB4WX0U/UNizBxIaNhU5Pk/MAORXVvRcaER/g=
Subject key identifier: 39:35:F3:D6:61:0A:FA:4C:4D:F3:59:1B:58:7F:D4:1A:AC:2F:57:8E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858491554444B4139F57F491ED300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 05 Mar 2025 04:15:35 +0000
Certificate not after: Tue 08 Jun 2027 03:15:35 +0000
Subordinate resources: AS: 13848
AS: 14466
AS: 53807
IP: 216.109.96.0/20
IP: 2620:ec:8000::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:54:44:4b:41:39:f5:7f:49:1e:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 5 04:15:35 2025 GMT
Not After : Jun 8 03:15:35 2027 GMT
Subject: CN=a17da6e4-914e-42ef-9d06-8048ae444a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:af:1a:c2:d8:71:9c:3d:b4:3a:e0:e4:c5:
47:bb:77:b0:bd:12:38:52:a9:18:00:50:92:18:cd:
6a:ba:34:53:d9:5e:d0:18:52:98:ed:dc:1d:75:5c:
b4:ac:2c:47:f1:be:07:37:8c:18:18:bb:ef:87:d9:
b5:bd:6e:b4:ad:5e:b5:ab:01:93:43:7f:38:48:cd:
be:15:3d:3b:d2:61:33:5e:3b:27:04:51:ce:c7:27:
fe:35:12:7c:6c:94:ae:0a:3c:7d:d1:c4:30:fb:c0:
db:9a:e3:9a:fb:ed:96:68:fa:51:77:77:f2:10:a1:
13:59:12:cc:1d:b3:e0:00:3e:54:39:84:a7:d4:6b:
62:40:91:f5:bb:cf:71:ba:26:6e:c3:2d:d7:a2:8f:
3c:38:04:ba:5a:ad:83:79:1e:ad:10:dc:89:f6:66:
06:f2:e0:bf:54:da:13:a9:3c:63:7a:be:74:69:46:
b0:8e:e0:ee:75:51:22:b8:40:fc:9e:7b:ca:b7:c3:
70:04:10:2e:fa:81:7d:7a:99:72:40:ef:5f:e0:fd:
1b:6c:c5:c2:ff:6f:7e:c8:59:a4:21:dd:97:61:d2:
3a:6b:01:6e:27:00:b2:2c:6a:04:42:49:94:72:7d:
ff:f4:62:9e:b4:6b:b3:b6:2c:6d:3b:8e:d8:d3:68:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:F3:D6:61:0A:FA:4C:4D:F3:59:1B:58:7F:D4:1A:AC:2F:57:8E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a17da6e4-914e-42ef-9d06-8048ae444a72/a17da6e4-914e-42ef-9d06-8048ae444a72.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.109.96.0/20
IPv6:
2620:ec:8000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13848
14466
53807
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:31:ff:41:14:b9:fe:3e:52:23:ce:22:ac:49:c6:ba:72:d0:
29:48:e7:4b:d0:a7:a2:ba:e8:f3:40:1b:4a:9e:f5:bd:2f:73:
a3:64:6a:9d:50:d5:21:ea:f1:a4:33:26:eb:9c:9f:99:56:21:
ef:11:cc:5b:b0:cb:fc:6e:1e:45:99:be:c3:fb:65:8f:36:48:
8e:e2:b1:cd:64:ba:db:dd:a2:78:0a:fc:04:d1:4f:cc:a6:fa:
ac:9a:57:42:e9:8c:f3:44:1d:82:14:ac:56:24:f7:c5:d3:3f:
21:51:41:ae:ad:3b:ea:46:f0:2a:0b:e3:5c:d6:59:e2:15:c8:
b5:83:2b:ae:13:0e:c0:e2:fc:db:58:fe:53:f2:da:a5:d2:97:
5d:c1:3f:dc:cc:b6:3e:9f:15:33:17:88:16:0c:f7:3e:75:de:
d7:3f:95:e0:4d:46:83:67:e7:67:a2:ad:58:0f:38:5c:8d:56:
af:ab:d5:b0:6c:c5:ce:85:01:b8:37:f4:46:42:cc:37:16:17:
86:c5:d7:a5:b9:4f:67:42:76:2c:56:58:55:2b:c6:78:5e:0e:
15:26:3a:8a:f2:05:f5:0f:29:b2:12:f4:1c:6b:92:53:42:e5:
0b:3f:3b:74:23:3a:78:a4:e6:9e:83:65:95:7d:e2:72:32:60:
c3:3e:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:45 2025 by rpki-client