Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
File: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer (raw, json)
Hash identifier: Ce5Y5LtJV4AbSJKBonjH+/+g1qYY0TFx4XhHmGLaYG4=
Subject key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285843C28E0F36DFB4A6CD3AE6FA40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 03 Nov 2023 00:45:15 +0000
Certificate not after: Thu 05 Feb 2026 01:45:15 +0000
Subordinate resources: AS: 394449
IP: 199.68.53.0/24
IP: 2604:3dc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c2:8e:0f:36:df:b4:a6:cd:3a:e6:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Nov 3 00:45:15 2023 GMT
Not After : Feb 5 01:45:15 2026 GMT
Subject: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:e0:f0:44:d5:74:92:58:f0:62:75:e6:99:
35:82:c7:20:ff:29:5e:23:f0:bf:19:43:59:f4:e7:
b3:ec:d8:aa:c6:74:eb:75:70:2f:79:76:47:b3:d8:
16:e1:7a:a2:53:84:c8:ec:0e:2f:e0:5e:08:31:de:
ca:90:f5:5a:0e:c1:d1:fd:b5:07:69:00:45:9d:7f:
67:55:c8:cb:3e:21:ff:93:88:67:3d:e9:ed:e4:4c:
81:81:c0:7b:5d:d6:5d:d9:dc:40:05:24:4c:d2:2a:
f8:b5:85:97:dd:9f:66:f8:b2:10:8f:59:49:26:f9:
e4:8c:5e:d5:3b:72:75:f8:c0:08:75:2c:01:01:9c:
04:5a:fc:37:cc:93:3f:c0:03:aa:4a:af:35:ac:56:
82:45:24:85:76:c5:e2:23:a9:45:52:11:22:ae:66:
7d:1e:58:c0:49:6b:9e:b0:4c:db:0d:e6:7e:97:d7:
82:21:fc:1a:06:11:52:dc:cc:7e:de:c9:0e:1f:8c:
20:2d:c7:77:06:e6:29:0a:c3:e6:5c:b7:e7:38:3a:
08:e6:8f:90:cf:18:c1:1c:2b:96:d2:87:b8:d7:d8:
b2:a0:47:35:88:48:55:80:ce:93:c6:ab:5b:f5:a6:
4f:e2:fd:82:ea:30:1b:87:af:5b:d5:a4:8a:26:0c:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.53.0/24
IPv6:
2604:3dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394449
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:1c:3d:0e:cf:a7:bc:34:ea:c3:e0:2e:dc:5a:a1:59:46:45:
59:09:92:84:1c:af:01:19:d1:e4:3a:c3:8a:c2:85:c7:1f:64:
57:8a:92:ca:ef:26:09:bf:3b:42:6f:0c:ee:79:4f:4b:32:d5:
62:c6:d5:34:46:42:52:4a:21:df:19:b9:96:e4:0f:93:11:c8:
c3:0c:c0:f5:8f:16:5a:ee:cc:28:82:7c:54:17:33:14:71:4e:
a2:90:92:b2:56:6c:0e:c6:6a:59:19:4d:44:66:37:c3:7c:49:
80:88:56:5b:9b:37:d7:ea:eb:9c:39:1f:7e:76:81:dd:0a:b6:
f6:13:f4:48:a4:0a:cb:8c:33:20:e1:9d:3e:0e:b7:20:e4:d0:
42:a2:48:9d:6e:0e:45:7c:4d:15:f7:0b:e0:5a:ed:db:12:44:
80:9c:26:dc:a0:21:ce:b8:af:60:ca:05:17:60:b2:f0:1a:32:
3a:6f:e5:8a:56:12:ba:18:63:14:08:60:19:05:e2:a3:7d:a0:
40:c3:72:98:0c:86:df:06:e7:26:8f:cf:ce:f6:a3:b8:fc:1a:
1c:0a:2f:3d:bc:90:d2:4e:dc:68:40:16:8a:65:8e:99:63:a2:
cb:4f:4b:14:da:85:3e:7b:7c:b1:2d:d0:b6:41:a1:3a:f5:e7:
72:ff:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:09 2025 by rpki-client