Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer
File: 2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer (raw, json)
Hash identifier: QWfaYrp5NZxkYV4CbqvE0CcfZe/yOOV9QC580aC2vj4=
Subject key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858443762C8AD03850B8456E52900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 14 Dec 2023 21:07:38 +0000
Certificate not after: Wed 18 Mar 2026 20:07:38 +0000
Subordinate resources: IP: 199.101.8.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:37:62:c8:ad:03:85:0b:84:56:e5:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Dec 14 21:07:38 2023 GMT
Not After : Mar 18 20:07:38 2026 GMT
Subject: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:36:7e:9a:a4:79:f3:5b:5b:ee:43:e5:90:
48:e0:68:e9:f4:35:e2:01:27:ae:a3:0f:b1:37:e8:
70:f7:3b:c8:4c:e0:10:e6:ee:da:49:21:76:58:eb:
22:dc:19:df:61:27:81:85:51:31:67:2f:7a:f2:da:
89:c3:36:29:93:61:4e:0e:ae:2b:69:d9:c7:37:59:
21:c2:6b:a4:2a:d7:3b:85:13:4f:5e:51:ad:ab:5b:
73:eb:da:24:d0:cc:b2:f2:41:85:36:d4:4a:0b:51:
0a:6d:6c:52:55:dc:55:86:09:ec:1d:f7:96:1a:a6:
a3:1a:99:c1:71:c9:2e:73:bc:63:d7:cc:44:59:83:
24:08:bd:79:3b:85:06:22:70:8a:63:ca:55:de:97:
38:47:6b:8f:45:7b:76:b1:ea:e3:66:a9:75:f1:6d:
e1:f0:b1:df:20:ad:6c:23:3b:1e:44:f9:65:60:85:
c5:eb:fe:07:83:aa:c3:59:64:da:ad:0a:e8:7b:43:
95:93:b9:78:75:45:79:d4:bc:be:08:4b:87:b2:a1:
44:06:2e:47:69:b7:21:bc:7b:fe:60:a6:73:0f:aa:
d5:ac:b8:34:68:b0:81:81:d8:b3:39:82:5d:cd:b9:
73:cf:1d:15:d3:c5:dd:f4:d5:5f:12:f7:3b:10:2f:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ab:13:50:e2:d0:34:f4:d4:d9:8e:91:21:fa:c5:8e:32:72:
28:b2:46:ca:d4:db:5e:e4:d7:37:66:a4:23:74:4b:7d:1e:1d:
c0:c4:e6:cc:94:26:dd:bb:b8:db:78:f7:fa:c9:7c:ee:d4:fb:
63:4b:22:9d:7a:6a:01:54:2d:52:f8:94:3f:1c:3f:3d:8b:50:
55:78:a2:24:0c:63:18:c9:d5:bd:41:20:34:03:e9:6d:13:db:
c4:5b:06:8b:75:85:52:2c:2e:34:6c:6a:15:fc:16:a3:0c:f7:
95:05:b7:b5:41:3d:61:3f:c2:7d:ea:c7:9f:46:e4:6b:1d:ae:
af:53:cf:48:01:84:dd:3d:68:10:87:e9:5d:60:d8:a5:b5:80:
09:6e:37:6f:15:9c:bf:c1:6e:80:e1:6e:f0:fe:81:46:6d:76:
8c:7f:b9:43:b5:dd:77:b1:16:72:e1:ec:7d:81:bb:99:ac:c8:
25:5a:c5:6a:3d:67:73:c4:c0:41:d3:4d:ea:ce:10:a8:d5:79:
cb:fa:77:36:f1:63:d0:7c:75:da:fd:96:b3:a5:01:5c:7d:7f:
7f:1a:b4:5c:9b:45:7b:e8:94:d9:25:8b:91:b8:8a:7f:7c:20:
2f:04:e9:88:17:cc:92:00:2b:76:bb:79:17:3b:4c:9b:d0:ba:
c8:94:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:03 2025 by rpki-client