Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
File: a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer (raw, json)
Hash identifier: UnRkXLDlDRk0rsQoM9F1zI/bMX0Bzw7OKORnoM0bjlk=
Subject key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584413A1AEECDD859D8A70AA2FD0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 02 Dec 2023 01:45:16 +0000
Certificate not after: Fri 06 Mar 2026 01:45:16 +0000
Subordinate resources: AS: 400422
IP: 104.249.160.0/22
IP: 134.65.198.0/23
IP: 2606:a440::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:13:a1:ae:ec:dd:85:9d:8a:70:aa:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Dec 2 01:45:16 2023 GMT
Not After : Mar 6 01:45:16 2026 GMT
Subject: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:4e:88:74:26:6b:01:ad:9b:90:8c:95:80:
c0:51:1a:e5:a0:68:67:da:6e:ae:3f:65:23:49:32:
54:1f:52:6e:7e:a1:6a:f3:5a:52:9e:44:16:82:f1:
91:d7:26:dd:82:55:ad:99:b9:26:ef:a6:ee:b4:a8:
47:78:26:a7:24:40:99:40:00:d2:fa:86:ef:70:69:
f1:75:4d:26:c7:4b:0a:88:ab:f7:84:84:db:b1:a0:
55:e6:c6:5a:e5:29:2b:54:fb:f0:f4:14:b3:8e:2a:
6f:7e:c0:e2:d9:5f:3b:22:9a:df:20:de:72:17:ee:
61:cb:e9:c3:95:be:c7:43:71:55:3c:d2:bd:78:51:
90:e0:27:e1:1e:f8:73:a3:63:cb:10:2c:9e:a5:52:
9a:51:d4:ad:f2:0a:b4:b0:2a:bd:fb:dc:16:1b:43:
1d:80:e0:53:66:2c:22:d2:2e:72:18:8d:34:ed:e7:
a2:cb:b4:17:53:5d:35:90:a8:bd:c0:72:2a:3f:9d:
9e:9d:ca:2a:ba:45:14:3c:35:cf:5e:64:df:62:e0:
bf:53:db:1a:93:87:e0:db:1f:eb:87:ec:b8:fc:62:
a4:38:39:0f:ee:11:84:0a:d1:ee:30:e7:5e:d2:16:
23:4e:0d:75:80:11:95:b4:9f:d7:1c:de:54:e6:c7:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.160.0/22
134.65.198.0/23
IPv6:
2606:a440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400422
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:c0:c7:55:3d:8b:42:51:c6:0b:52:2b:bf:0e:20:c4:5f:91:
a6:6d:39:dc:09:8a:de:3b:0e:91:87:6c:f9:15:ba:20:ea:fb:
37:38:90:d1:9d:13:ec:37:f9:0d:33:63:fa:a0:6d:89:b8:58:
30:6b:6a:08:d2:35:42:5b:a8:5a:56:5c:c4:4d:15:4a:4a:66:
17:15:0f:a1:34:62:75:5f:7e:30:63:8d:5d:09:49:89:5c:5c:
d6:f4:9a:44:92:e9:90:6f:2a:bf:4c:30:0c:58:3d:f9:22:99:
94:80:73:b4:24:b8:54:6a:02:d9:5b:6c:d5:df:a0:fc:ea:2d:
4c:bc:1a:e8:63:9e:2f:d1:db:7c:2e:3c:cb:b9:40:bf:11:5d:
e0:5e:62:1c:05:a2:95:87:63:28:38:b0:d9:e5:ac:b5:eb:2e:
5e:f2:24:54:7b:d7:8c:c6:60:01:d5:42:91:3b:57:63:b9:12:
53:d8:ee:82:d8:c4:ba:a5:1e:c7:d8:88:89:aa:aa:44:45:86:
28:51:32:e5:67:63:62:2a:de:6d:fd:ed:38:f7:cb:50:7a:69:
d2:9a:c5:17:2b:72:6f:04:b5:60:99:69:23:c0:78:a8:64:3c:
e7:86:6c:ef:96:de:48:bb:70:fc:4a:b8:4f:66:f6:c5:fc:c8:
0b:1b:ce:e6
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEQToa7s3YWdinCqL9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMTIwMjAxNDUxNloXDTI2MDMwNjAxNDUxNlowLzEtMCsGA1UEAxMk
YTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAwOWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSlOiHQmawGtm5CMlYDAURrloGhn2m6uP2Uj
STJUH1JufqFq81pSnkQWgvGR1ybdglWtmbkm76butKhHeCanJECZQADS+obvcGnx
dU0mx0sKiKv3hITbsaBV5sZa5SkrVPvw9BSzjipvfsDi2V87IprfIN5yF+5hy+nD
lb7HQ3FVPNK9eFGQ4CfhHvhzo2PLECyepVKaUdSt8gq0sCq9+9wWG0MdgOBTZiwi
0i5yGI007eeiy7QXU101kKi9wHIqP52encoqukUUPDXPXmTfYuC/U9sak4fg2x/r
h+y4/GKkODkP7hGECtHuMOde0hYjTg11gBGVtJ/XHN5U5sffCwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFBkMk3GdLxVNvhJxrLW8dcgDKA4rMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h
MmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2EyYjgzYWU3LTUyYjYtNDViNC05
MmM5LWMxMmY3YmIwMDlmNC9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2Ji
MDA5ZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJo+aADBAGGQcYwDQQCAAIwBwMFACYGpEAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAHAx1U9i0JRxgtSK78O
IMRfkaZtOdwJit47DpGHbPkVuiDq+zc4kNGdE+w3+Q0zY/qgbYm4WDBragjSNUJb
qFpWXMRNFUpKZhcVD6E0YnVffjBjjV0JSYlcXNb0mkSS6ZBvKr9MMAxYPfkimZSA
c7QkuFRqAtlbbNXfoPzqLUy8Guhjni/R23wuPMu5QL8RXeBeYhwFopWHYyg4sNnl
rLXrLl7yJFR714zGYAHVQpE7V2O5ElPY7oLYxLqlHsfYiImqqkRFhihRMuVnY2Iq
3m397Tj3y1B6adKaxRcrcm8EtWCZaSPAeKhkPOeGbO+W3ki7cPxKuE9m9sX8yAsb
zuY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:50:27 2025 by rpki-client