Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
File: 4746a92d-5f69-4264-863f-81298a3d93ed.cer (raw, json)
Hash identifier: H4gdUbLahaGpQ6GEyG2GF+m/5t8rxGZJ8DQ0u3YvCes=
Subject key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858487AE4C415A7B30B45CC02B980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 08 Jan 2025 20:36:26 +0000
Certificate not after: Wed 10 Jun 2026 00:45:20 +0000
Subordinate resources: AS: 36114
AS: 53340
AS: 62956
IP: 72.46.128.0/22
IP: 76.164.192.0/22
IP: 76.164.206.0/23
IP: 76.164.234.0/23
IP: 104.128.70.0/23
IP: 104.143.0.0/23
IP: 104.143.10.0/23
IP: 104.225.134.0/23
IP: 104.225.250.0/23
IP: 162.249.226.0/23
IP: 162.251.232.0/21
IP: 172.93.0.0/23
IP: 192.228.96.0/23
IP: 192.228.100.0/23
IP: 192.228.105.0 -- 192.228.109.255
IP: 199.19.76.0/23
IP: 199.47.208.0/22
IP: 199.127.56.0/22
IP: 199.241.142.0/23
IP: 204.77.0.0/22
IP: 204.77.6.0 -- 204.77.9.255
IP: 204.77.14.0/23
IP: 2604:2280::/32
IP: 2605:6f80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:e4:c4:15:a7:b3:0b:45:cc:02:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 8 20:36:26 2025 GMT
Not After : Jun 10 00:45:20 2026 GMT
Subject: CN=4746a92d-5f69-4264-863f-81298a3d93ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:a3:5f:f3:14:1b:7b:df:07:e7:d3:dc:35:
b0:c0:f6:f4:d4:e1:bf:87:54:1d:fd:8a:1c:60:9a:
86:0e:b7:84:39:8c:fd:59:c8:1f:49:fa:91:d4:10:
13:e1:ae:b1:e5:e7:7f:b1:93:cf:82:86:34:15:42:
aa:74:4b:ae:81:20:2c:ae:b7:00:55:61:cc:8e:21:
c5:e9:5c:b2:af:ca:4c:cd:8f:9c:ce:f0:a5:26:c1:
f3:59:ef:e2:cf:d0:4e:43:7a:3b:c1:23:7d:73:57:
f1:75:ba:de:53:8c:14:6c:03:38:56:48:1a:b0:f2:
92:18:73:96:4c:ed:ea:82:a8:b1:2e:16:02:f1:ed:
84:e9:42:cb:56:5a:ce:44:5c:e2:93:19:e1:a5:1f:
f6:4c:f2:80:7f:c1:41:00:96:41:12:bb:2e:24:e7:
da:dd:3c:2c:d6:e6:c9:c7:9d:15:b7:57:89:ae:eb:
a8:fe:95:3c:37:36:f6:92:91:ee:13:90:07:4e:74:
d4:c9:7a:88:bb:a8:a1:42:0c:64:56:c3:fa:f7:1b:
f9:88:d1:b4:62:f4:80:55:1f:29:7b:03:93:c4:d6:
0c:63:e8:51:5c:13:da:34:69:15:f2:f6:c6:99:8a:
71:28:6d:bf:0c:d5:f6:93:78:10:22:8d:6e:92:c2:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
72.46.128.0/22
76.164.192.0/22
76.164.206.0/23
76.164.234.0/23
104.128.70.0/23
104.143.0.0/23
104.143.10.0/23
104.225.134.0/23
104.225.250.0/23
162.249.226.0/23
162.251.232.0/21
172.93.0.0/23
192.228.96.0/23
192.228.100.0/23
192.228.105.0-192.228.109.255
199.19.76.0/23
199.47.208.0/22
199.127.56.0/22
199.241.142.0/23
204.77.0.0/22
204.77.6.0-204.77.9.255
204.77.14.0/23
IPv6:
2604:2280::/32
2605:6f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36114
53340
62956
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:c3:e3:73:f9:c4:6d:89:db:0a:b5:6f:3c:f6:dd:89:e7:57:
55:51:75:27:5f:da:8b:1a:4d:95:32:e5:b2:70:87:2b:36:ca:
30:1c:97:51:48:5a:c9:73:63:f4:8b:bb:4d:ad:57:e9:25:35:
1d:f6:41:e2:dc:f7:a2:90:4b:c5:f0:a1:31:41:3d:5e:91:ee:
3a:0e:07:4a:4a:57:a4:6b:c8:d0:6c:61:70:ff:7c:e5:3b:e7:
dd:cc:91:0d:02:20:ed:c3:10:ff:a2:ca:b9:10:5c:a8:c2:37:
78:c6:17:15:90:95:e9:b9:10:da:25:d4:51:40:b0:f9:9c:73:
cc:37:9b:67:a3:21:9b:39:e2:80:ed:49:93:d3:ec:dd:43:f1:
60:54:ce:46:bd:e9:d6:c7:4c:55:95:9d:61:be:4d:de:08:f4:
5a:4a:b4:8f:c7:7c:ca:9d:5d:16:05:06:af:04:1c:d8:96:8d:
51:89:62:be:8f:12:60:96:57:92:13:89:c6:fb:53:33:78:98:
96:9f:69:a9:80:29:60:8b:f8:81:db:dd:0c:61:79:b4:7e:7d:
dc:1c:dd:90:af:4c:d4:34:1c:16:65:6d:61:e9:0c:52:1f:c8:
78:f8:e5:2c:4d:d2:42:90:f3:ba:fe:00:97:39:bb:03:98:d1:
63:16:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:29:07 2025 by rpki-client