Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer
File: f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer (raw, json)
Hash identifier: NSTd9ljuLQ2yha8CDKIN15Uh7uQFsQifYFayHpSNSlc=
Subject key identifier: D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F43285848A84D93FDCA7F83D8CCEDF1DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 25 Jan 2025 02:59:00 +0000
Certificate not after: Fri 30 Apr 2027 01:59:00 +0000
Subordinate resources: AS: 401447
IP: 96.9.98.0/23
IP: 216.181.20.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:4d:93:fd:ca:7f:83:d8:cc:ed:f1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 25 02:59:00 2025 GMT
Not After : Apr 30 01:59:00 2027 GMT
Subject: CN=f7cd42e0-760c-4a8e-a7a9-074b638e2eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:d7:df:6f:69:13:f0:fa:16:a8:1b:3e:e4:
90:7c:f5:ec:14:2b:ba:b2:1c:19:2e:9e:0a:92:d0:
bf:3d:6f:f3:cc:e6:90:7e:1c:9f:ec:71:a2:f5:dd:
20:89:6c:72:d6:83:33:81:f3:bb:12:00:5f:07:f9:
dc:65:53:63:66:76:bb:79:48:26:32:29:df:c0:97:
03:a4:d0:6b:3e:c9:ab:1c:1e:c1:a5:df:1f:92:16:
9a:70:2c:8d:ad:4f:35:91:fa:88:e6:48:86:35:8b:
21:1d:8a:8f:31:ac:de:df:90:73:24:2b:9e:ad:52:
fc:d3:d4:35:fb:0a:3c:fb:9a:b8:b5:5e:ef:9d:5b:
7c:81:80:48:c9:59:c2:8d:cc:62:f7:fd:ff:3d:a2:
8c:b0:8c:de:66:be:d2:fe:81:0d:63:9f:1f:07:13:
c5:c8:7f:38:3e:f3:9c:de:ae:e3:66:5b:6e:56:6c:
7c:e7:9f:90:0f:99:e4:d1:91:19:9c:7d:eb:a8:45:
60:ac:90:c5:93:e7:e8:7e:26:41:76:7c:6a:a6:f4:
21:d7:44:a3:b8:b7:42:ed:3b:12:57:b5:6f:90:86:
99:a2:7b:8d:0c:c5:a6:4a:6b:28:54:38:c6:cb:11:
35:14:85:53:4f:02:ca:56:0d:d9:d3:af:9a:39:6f:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
96.9.98.0/23
216.181.20.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401447
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:17:47:65:47:0f:cd:38:9a:00:19:21:ac:9b:a8:e7:84:b3:
2b:d9:63:7e:10:ec:a5:87:6e:0f:68:43:3f:d0:eb:37:23:ce:
e4:25:48:7e:64:10:44:30:2b:e8:c6:a3:7d:2c:93:16:58:7a:
83:fc:5a:e8:11:fb:c1:a6:b0:c4:b6:c2:9e:46:94:1f:62:2e:
c3:72:4f:ec:d4:8b:e5:1c:a3:ff:48:e7:01:4e:a3:63:be:0f:
69:dd:45:f4:2d:0e:6a:73:16:7d:c0:fe:5f:8c:bf:3a:1a:bb:
3a:f2:5d:0b:b9:f0:1e:d5:b9:f6:4d:a4:83:c5:41:0e:a5:8d:
b9:43:8c:da:e3:9d:31:d5:27:cf:59:6b:ed:66:51:46:37:62:
de:63:1a:94:01:4b:70:42:bb:2f:c9:1b:b9:a9:24:16:82:58:
47:f0:e7:18:0f:0e:33:0c:48:55:71:e5:e7:f7:71:60:59:47:
c5:b2:4c:27:d0:07:33:9b:04:4e:47:db:61:67:4a:29:e6:bd:
cc:6b:7d:ad:9c:cf:32:ed:0c:b8:8e:a5:27:2e:09:e5:74:95:
2a:d0:dc:2b:06:c9:d2:73:4c:7b:8f:1c:81:4d:3c:77:46:20:
55:77:9f:4e:2f:69:9a:ba:46:98:5e:68:06:c4:b2:3e:f5:a5:
f6:e3:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:58:06 2025 by rpki-client