
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
File: ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer (raw, json)
Hash identifier: jfo3JjRLfokbUQ0UEM+KO9Ip6KMaZPnOyEHQvtUGaPY=
Subject key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F43285847443F01ADBEE0CC0ECE801F60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 19 Sep 2024 14:01:52 +0000
Certificate not after: Wed 23 Dec 2026 15:01:52 +0000
Subordinate resources: IP: 192.197.90.0/24
IP: 198.96.6.0/24
IP: 198.96.24.0 -- 198.96.28.255
IP: 199.71.96.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:44:3f:01:ad:be:e0:cc:0e:ce:80:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Sep 19 14:01:52 2024 GMT
Not After : Dec 23 15:01:52 2026 GMT
Subject: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:e5:fd:9c:c1:0d:62:83:d8:8a:cf:46:42:
1a:24:d7:05:b0:a4:e4:4e:30:12:67:4b:f2:bd:94:
e6:ef:34:b9:a5:93:87:ff:d8:35:f9:5b:ec:62:9a:
fe:89:a1:94:c1:07:d6:d8:55:90:82:47:44:1b:de:
38:8c:ed:1c:30:89:13:03:63:b6:5d:3d:28:9e:1e:
83:09:a7:e7:45:3a:96:64:2a:b0:15:85:9f:67:83:
3a:f2:fa:c1:f5:88:4d:24:b3:04:5a:72:36:11:2a:
c3:77:f9:43:39:47:0f:9d:cc:1e:c0:a4:77:bf:ae:
a8:96:9c:62:72:97:45:a6:49:fe:70:c7:bb:06:92:
4d:1c:11:09:be:ea:d4:78:b0:b6:66:a1:70:e2:0b:
54:8a:b4:88:cb:0f:fd:d5:d0:8b:0b:79:9d:c2:55:
6c:8f:1f:a0:23:75:33:7e:e4:31:b6:98:23:25:d2:
a0:ac:d4:1e:5d:ce:36:21:47:7a:f4:df:3d:fc:19:
cc:12:e8:42:d3:7a:e3:c1:0e:9d:f3:82:e5:03:f1:
31:aa:ae:e0:c5:06:b8:d9:8c:49:13:4d:62:75:b0:
73:77:ca:7e:20:d0:dc:88:78:96:d6:75:a2:19:5d:
29:34:b6:bf:95:44:e6:1f:a9:b3:91:ee:e2:64:c2:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.90.0/24
198.96.6.0/24
198.96.24.0-198.96.28.255
199.71.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:81:59:f5:71:67:f0:7f:81:23:1a:7b:b4:0a:89:78:fe:e4:
35:5b:d1:5b:a9:32:32:79:81:5a:6a:1e:7a:3f:2c:c9:4e:94:
7f:1c:63:ab:14:41:1b:6b:51:c9:f0:aa:e3:a6:c5:25:66:8a:
19:66:59:b1:bb:3b:19:ae:62:11:0c:79:74:8d:fa:a6:6d:73:
ee:d1:c2:75:fd:36:b3:57:ce:bd:99:af:5e:51:f2:47:7c:f4:
2f:0b:61:48:0c:9e:34:c6:67:ef:22:74:58:cd:83:fa:6b:1b:
04:33:4f:39:d4:70:f3:1a:89:e5:0c:3e:0f:18:80:bf:1b:50:
da:40:b4:7e:ca:20:6c:a9:b8:e2:c5:3b:da:86:ba:09:56:32:
97:d2:ff:9d:e4:77:2d:15:e5:d1:18:b0:8d:e5:dc:2d:96:b2:
9f:3a:0c:e6:62:50:d8:6a:79:b2:e3:04:20:4c:b5:42:09:08:
23:a1:47:47:b2:a7:b1:41:08:d9:17:65:99:ca:59:38:91:b6:
a3:4f:3f:65:a1:ea:c5:bf:11:4c:14:a9:13:17:1c:a7:4c:b8:
91:63:10:a3:21:52:dc:a1:c0:35:9e:ff:65:be:29:69:38:40:
3a:9a:6a:4f:70:95:13:d6:64:a7:10:f4:ae:9d:b8:c3:e9:84:
21:27:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:29:39 2025 by rpki-client