Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05.cer
File: a4bc4503-068f-4ba3-8d87-e8ebb27e3e05.cer (raw, json)
Hash identifier: Oiy4QEP+8lOShclAncnepUQPMYnovovrHczeNqiXwkw=
Subject key identifier: 8C:02:47:45:98:75:92:63:A7:F4:78:AB:32:28:34:48:4A:02:80:30
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858488A025F32BCB277871072A680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 14 Jan 2025 06:33:13 +0000
Certificate not after: Mon 19 Apr 2027 05:33:13 +0000
Subordinate resources: IP: 192.22.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:02:5f:32:bc:b2:77:87:10:72:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 14 06:33:13 2025 GMT
Not After : Apr 19 05:33:13 2027 GMT
Subject: CN=a4bc4503-068f-4ba3-8d87-e8ebb27e3e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:f0:e3:d2:45:66:29:cb:a9:a6:28:66:72:
6f:65:48:6f:ac:02:2e:2b:cc:50:f2:a1:bc:1e:c8:
f6:48:19:f5:6d:23:3f:8c:47:49:40:77:00:32:77:
91:6e:bd:13:b4:ac:93:2c:12:fc:69:65:22:0b:ff:
94:1c:19:2c:e0:4f:20:38:cd:8d:ef:a0:b0:7f:7b:
bc:1c:7b:84:f2:b8:ad:a9:f4:75:80:4a:3c:f4:39:
24:80:d9:46:d9:21:55:5e:c8:8b:ec:51:8d:a2:9c:
bb:1d:0a:41:6a:bb:23:18:d3:01:16:87:f7:9a:a9:
55:ac:55:8d:06:7e:0e:76:e7:df:cc:41:88:f5:98:
e3:5c:31:42:ae:51:0f:93:a7:65:7a:48:23:94:29:
d2:42:ca:57:f3:4a:23:c4:f0:2d:3f:cf:2c:7d:08:
d1:20:06:2e:74:0a:e2:43:fd:bd:61:b2:4a:0f:b6:
d9:ce:1a:12:39:76:b6:5d:1d:a2:71:49:db:c8:6b:
21:3f:c6:0a:5b:58:c6:39:aa:8f:49:6c:e4:93:ba:
a4:1d:5b:78:0d:b5:a4:c9:47:8e:39:a5:78:b2:8a:
7b:f9:1d:df:f7:17:ce:aa:cb:06:85:7a:06:35:07:
cb:39:cf:76:44:f1:b2:95:be:19:32:2e:91:47:84:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:47:45:98:75:92:63:A7:F4:78:AB:32:28:34:48:4A:02:80:30
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05/a4bc4503-068f-4ba3-8d87-e8ebb27e3e05.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6f:53:4c:d5:c3:2e:2f:6c:ee:d8:5e:32:2c:21:3b:45:13:
bd:ab:43:2e:cb:7a:cd:2e:c2:3a:dd:0f:41:2e:bb:09:18:1c:
3d:bb:0e:7c:9a:74:fa:54:e3:dd:5d:1f:43:db:d9:2c:e7:f2:
1a:aa:fe:3a:ef:3f:00:cb:ef:93:52:ad:cc:7b:b6:a3:39:8c:
ef:98:b8:a0:b4:df:15:ac:5e:ea:23:12:57:bc:3f:3b:78:52:
42:d4:51:68:5c:de:ba:e7:b9:50:ed:3e:c7:c5:88:0b:d7:a2:
e2:58:98:7a:e2:e9:17:0b:60:db:53:af:a7:2a:17:21:dd:21:
0a:95:82:b7:5c:29:21:69:9c:5d:db:6c:d4:d0:6e:5b:d9:cd:
b0:ab:15:8a:1b:31:65:09:67:28:e1:8d:fe:41:22:52:1d:ed:
13:92:3b:51:5f:fc:15:3e:d9:9d:de:0f:d2:80:52:f5:d9:e1:
cb:bc:8f:cb:cb:ff:6c:a1:77:ba:46:a0:ea:dd:9a:27:e5:17:
f5:d1:09:67:7e:32:7a:59:26:70:5c:a1:14:47:7d:62:c8:e9:
2d:b8:ac:49:48:42:b6:a3:5e:73:92:ce:da:df:51:96:ce:cf:
aa:71:5c:87:f1:10:9f:c6:cd:00:41:03:b7:f9:ea:d4:6c:d1:
d0:65:7d:df
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEiKAl8yvLJ3hxBypoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDExNDA2MzMxM1oXDTI3MDQxOTA1MzMxM1owLzEtMCsGA1UEAxMk
YTRiYzQ1MDMtMDY4Zi00YmEzLThkODctZThlYmIyN2UzZTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJbw49JFZinLqaYoZnJvZUhvrAIuK8xQ8qG8
Hsj2SBn1bSM/jEdJQHcAMneRbr0TtKyTLBL8aWUiC/+UHBks4E8gOM2N76Cwf3u8
HHuE8ritqfR1gEo89DkkgNlG2SFVXsiL7FGNopy7HQpBarsjGNMBFof3mqlVrFWN
Bn4OduffzEGI9ZjjXDFCrlEPk6dlekgjlCnSQspX80ojxPAtP88sfQjRIAYudAri
Q/29YbJKD7bZzhoSOXa2XR2icUnbyGshP8YKW1jGOaqPSWzkk7qkHVt4DbWkyUeO
OaV4sop7+R3f9xfOqssGhXoGNQfLOc92RPGylb4ZMi6RR4TJ4QIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFIwCR0WYdZJjp/R4qzIoNEhKAoAwMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h
NGJjNDUwMy0wNjhmLTRiYTMtOGQ4Ny1lOGViYjI3ZTNlMDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E0YmM0NTAzLTA2OGYtNGJhMy04
ZDg3LWU4ZWJiMjdlM2UwNS9hNGJjNDUwMy0wNjhmLTRiYTMtOGQ4Ny1lOGViYjI3
ZTNlMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwDAFjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFb1NM1cMuL2zu2F4yLCE7
RRO9q0Muy3rNLsI63Q9BLrsJGBw9uw58mnT6VOPdXR9D29ks5/Iaqv467z8Ay++T
Uq3Me7ajOYzvmLigtN8VrF7qIxJXvD87eFJC1FFoXN6657lQ7T7HxYgL16LiWJh6
4ukXC2DbU6+nKhch3SEKlYK3XCkhaZxd22zU0G5b2c2wqxWKGzFlCWco4Y3+QSJS
He0TkjtRX/wVPtmd3g/SgFL12eHLvI/Ly/9soXe6RqDq3Zon5Rf10QlnfjJ6WSZw
XKEUR31iyOktuKxJSEK2o15zks7a31GWzs+qcVyH8RCfxs0AQQO3+erUbNHQZX3f
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:50 2025 by rpki-client