
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
File: 9df74e6e-da16-4cba-a854-ee087e767113.cer (raw, json)
Hash identifier: mEx6vQ8jhVtwOXU5szxj6Q+ffWnFVDPZanWrfDxBoQM=
Subject key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584478224FDC2A7FDFD3D72009B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 07 Jan 2024 01:45:16 +0000
Certificate not after: Sat 11 Apr 2026 00:45:16 +0000
Subordinate resources: IP: 132.206.0.0/16
IP: 132.216.0.0/16
IP: 142.157.0.0/16
IP: 192.197.121.0/24
IP: 198.168.128.0/18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:78:22:4f:dc:2a:7f:df:d3:d7:20:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 7 01:45:16 2024 GMT
Not After : Apr 11 00:45:16 2026 GMT
Subject: CN=9df74e6e-da16-4cba-a854-ee087e767113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:4b:1e:bb:a7:f1:d1:97:38:86:7a:ed:b9:
67:a4:90:d8:bc:72:5a:37:a4:a2:2a:0a:2f:00:6e:
8d:83:00:93:cf:5d:fa:f7:2d:af:53:da:19:e4:af:
72:51:08:65:75:0b:f0:77:7e:dc:77:b3:b5:37:24:
5c:39:0c:55:61:5b:0c:d3:21:fd:d4:57:d3:53:cd:
9e:d9:b0:ba:7b:d6:1a:30:8d:82:25:6e:d9:22:c3:
a0:cb:2c:19:84:97:34:64:69:00:3c:70:7a:61:be:
30:94:f3:ef:56:b1:ed:ef:93:99:26:f8:24:75:c9:
ac:76:d9:c7:ca:de:3d:cd:a9:34:1c:ba:6c:96:c6:
92:2c:f7:0c:6a:c2:89:6a:af:d1:43:fd:79:07:39:
4f:cb:96:23:e8:a0:ce:15:9a:29:50:12:bb:31:0e:
89:c2:1c:aa:48:7c:ff:9f:72:70:b3:b5:23:80:e9:
f0:8f:4e:3d:a2:00:c5:b0:fa:a4:28:28:65:a4:9b:
3d:4f:eb:76:be:2c:e7:9a:ba:81:85:c8:b9:6e:c4:
3c:65:93:1d:11:21:f1:3b:fd:b9:6f:08:88:b6:f2:
f6:be:f3:16:eb:23:c9:7c:ff:80:7e:ee:cd:2c:7b:
7d:de:c2:62:c2:f9:d0:70:a2:30:b7:a2:05:a7:35:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
132.206.0.0/16
132.216.0.0/16
142.157.0.0/16
192.197.121.0/24
198.168.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:77:4b:68:cd:ac:0e:3c:d8:5f:02:cd:03:47:d5:54:cd:10:
35:13:7c:36:48:20:78:60:3b:f2:5c:61:4d:83:22:bb:8e:5c:
ab:6b:a9:f6:90:a1:50:f7:50:15:4e:40:3c:a3:b1:b2:dd:0c:
74:f1:bd:40:84:23:61:7f:2b:e3:c9:e1:ea:89:99:93:ff:f0:
f0:97:89:3e:e3:fd:fb:b9:00:7b:f0:7b:0f:c2:db:71:7d:a7:
3b:04:f5:17:d3:99:70:f6:c3:58:75:74:7a:fc:13:6b:42:ea:
70:0e:ef:9a:4a:9b:ef:43:7f:24:38:4a:95:ed:81:79:db:4b:
1e:3c:5e:67:08:6c:15:f7:c6:ba:4a:77:d5:a7:81:08:ec:5b:
92:8c:25:22:2c:8a:a5:22:7e:f1:fa:23:54:90:fa:62:29:ea:
4a:f6:4b:76:de:e9:77:3a:47:0e:e7:c5:d9:ab:85:66:51:43:
ec:a7:cc:a5:b9:72:d6:e8:51:ea:30:ab:bd:ab:76:ec:8b:dd:
71:92:80:98:14:3a:fe:9c:cd:d4:5d:05:4c:13:b1:d2:5c:41:
f9:af:44:6a:0f:ed:db:a8:25:02:b3:d2:32:3b:5d:9a:be:0a:
ec:ce:81:bb:2f:e8:1c:80:d2:6f:c4:6c:33:8a:52:7c:8a:c2:
e1:b1:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:41:30 2025 by rpki-client