Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
File: d6d708e8-5964-4587-8db1-e22545ec38a3.cer (raw, json)
Hash identifier: qPp360T7+o9YLBs6aAd7dmUhCPbE0rwaeuXmmZ0kvvg=
Subject key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858491C67A3B99ADFEAAEBB043C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 07 Mar 2025 17:05:17 +0000
Certificate not after: Thu 10 Jun 2027 16:05:17 +0000
Subordinate resources: AS: 11107
AS: 15331
AS: 21947
AS: 30374
IP: 64.25.128.0/20
IP: 66.109.128.0/19
IP: 69.51.64.0/18
IP: 69.165.112.0/20
IP: 192.150.152.0/21
IP: 192.225.176.0/20
IP: 199.195.120.0/21
IP: 204.11.244.0/22
IP: 209.137.224.0/19
IP: 209.200.192.0/19
IP: 216.14.224.0/19
IP: 216.47.48.0/20
IP: 2001:1940::/32
IP: 2604:300::/32
IP: 2607:f8e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:67:a3:b9:9a:df:ea:ae:bb:04:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 7 17:05:17 2025 GMT
Not After : Jun 10 16:05:17 2027 GMT
Subject: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:5b:87:ab:64:87:4a:a9:6b:fb:9e:b6:a8:
72:3f:66:4b:46:55:a4:2d:ce:b7:4f:9d:cf:e5:67:
af:49:b6:c4:b6:3e:f6:98:ff:33:ab:a5:b9:ef:f8:
32:b3:9e:b1:0c:0c:88:c2:6a:57:cd:5a:3e:90:15:
af:c5:fd:dd:8e:00:7b:e2:79:ed:d2:2a:57:39:96:
ef:90:02:1c:f4:79:09:14:6e:6f:e2:d6:3d:a4:d8:
c0:c0:79:7e:50:a3:16:6f:57:06:a1:03:89:42:ed:
97:2c:64:f0:46:ed:a8:57:c6:ea:03:68:60:08:04:
e7:bf:16:3f:9b:b8:0f:1e:89:36:22:10:d3:28:b3:
c6:ad:1d:91:ee:7b:83:eb:5e:31:59:bc:eb:c6:de:
a4:60:8f:25:35:18:53:fa:fa:76:d9:b8:5d:48:c1:
e0:ef:e3:0d:f7:d8:d0:ec:22:5b:e2:6a:25:85:26:
fa:44:c5:ed:af:19:a5:4b:1b:e6:99:8c:6c:00:69:
fd:e8:b6:b3:5c:d7:b0:71:4f:01:03:c9:f1:88:ad:
60:57:04:2a:8f:de:ac:17:a3:bb:70:29:35:18:9f:
78:2e:de:06:a8:2c:18:d6:12:00:91:fb:ce:72:d7:
8a:b4:69:39:3b:44:c5:29:fc:b7:4a:9c:fe:c4:bd:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.25.128.0/20
66.109.128.0/19
69.51.64.0/18
69.165.112.0/20
192.150.152.0/21
192.225.176.0/20
199.195.120.0/21
204.11.244.0/22
209.137.224.0/19
209.200.192.0/19
216.14.224.0/19
216.47.48.0/20
IPv6:
2001:1940::/32
2604:300::/32
2607:f8e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11107
15331
21947
30374
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:8a:3d:08:db:61:2b:07:b7:d7:0a:53:88:da:00:85:4a:01:
01:a9:39:64:de:2e:d9:fa:e7:58:22:82:36:68:8b:20:54:42:
2d:67:01:00:23:c8:82:22:5f:48:9c:81:10:46:22:f6:ba:7e:
75:64:55:01:c0:c9:29:9a:ad:9e:65:c2:63:44:fe:79:02:af:
fd:b8:5c:b1:36:f2:f3:83:b5:ef:b1:72:85:c0:c7:58:db:b1:
a0:13:ba:25:de:48:bc:af:da:e2:e5:b0:0e:eb:a8:8e:b8:76:
53:f8:2b:59:6d:0c:84:2b:7e:19:28:b0:8d:e1:ad:0a:b8:c9:
f6:e1:25:58:c3:e2:fc:3e:24:ea:9d:bf:cf:97:7f:94:1b:5c:
66:53:11:76:90:2c:89:76:2a:dc:36:a5:13:18:12:bb:db:52:
d8:d4:e1:39:f6:69:9d:ba:6d:f5:0c:86:64:dc:ad:04:18:ab:
d8:9c:97:f5:50:15:8f:6b:43:37:a7:4a:ad:89:28:d6:12:eb:
20:22:12:69:74:95:75:53:d2:2e:70:b3:6b:62:5d:01:42:5e:
86:b8:41:5a:7c:7c:75:c6:c7:b1:ab:13:e8:98:c1:3e:fa:59:
5a:46:41:df:7d:54:57:a0:d6:c9:61:7b:a5:f5:e0:9d:cc:ba:
8c:1f:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:21 2025 by rpki-client