Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
File: a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer (raw, json)
Hash identifier: +f0LQGiAmkzhc2SJWoBquB4r0mfIU2PfITVixgExuJk=
Subject key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858440A304D66C60F68A8B6598C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 28 Nov 2023 16:34:33 +0000
Certificate not after: Mon 02 Mar 2026 16:34:33 +0000
Subordinate resources: AS: 398564
AS: 398655
AS: 398774
IP: 204.108.174.0/23
IP: 204.108.188.0/23
IP: 204.235.172.0/23
IP: 209.250.192.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:0a:30:4d:66:c6:0f:68:a8:b6:59:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Nov 28 16:34:33 2023 GMT
Not After : Mar 2 16:34:33 2026 GMT
Subject: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:81:14:88:fa:a8:69:ea:80:0d:f5:82:e0:
1d:57:6e:71:e4:2b:a5:95:02:2f:27:33:65:82:1c:
54:9b:f9:90:a3:04:b3:41:7d:3f:82:17:3d:39:fa:
8f:63:90:11:f7:76:6a:a8:28:98:ac:a0:50:ae:46:
47:0f:07:c9:db:e3:95:fc:0d:db:e8:a3:9d:f4:9e:
8c:85:30:23:9d:e2:7c:2e:9f:a3:c9:77:96:17:ab:
16:c6:a7:f1:cb:fe:2a:8a:74:b6:ed:f2:73:7e:53:
7d:cc:d0:29:33:15:94:74:92:96:5f:34:f4:34:9c:
07:95:06:d2:14:fc:d5:38:bd:bb:db:6f:e6:c0:8d:
2f:92:0d:03:83:fb:3d:f1:27:98:6c:7e:18:6c:d0:
2c:4b:d5:83:bf:27:7d:b4:42:19:44:83:0f:fe:d7:
cd:c8:f2:e7:e6:01:d3:51:1c:94:1d:de:12:e6:82:
31:d3:33:3e:5a:9a:95:40:10:aa:cd:1e:33:1d:10:
42:65:2b:a7:f2:9c:41:a8:5e:0c:ab:75:52:7b:69:
f5:72:9b:c9:af:47:37:06:72:90:0a:27:44:17:67:
6d:93:86:63:75:cd:c4:96:01:ff:7b:03:9e:7d:17:
f4:f1:e0:66:aa:7c:05:6b:e8:db:6e:0b:2f:c5:af:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.174.0/23
204.108.188.0/23
204.235.172.0/23
209.250.192.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398564
398655
398774
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f5:c9:77:c5:7e:59:db:84:f2:29:4a:94:02:85:c3:ef:31:
15:48:51:3e:cf:d5:95:15:db:46:40:b9:bb:96:b9:0e:7b:55:
e2:61:83:95:10:a0:bf:2d:e4:3d:02:33:e4:27:da:d1:3b:eb:
10:f7:54:4b:ec:2a:52:ee:27:80:0c:40:93:c5:78:d3:dc:ce:
8b:28:78:1c:1e:69:b4:c8:83:0b:88:c8:78:e0:8d:09:c2:48:
b8:b3:33:eb:80:3a:28:55:82:ca:f6:ed:fb:d6:0e:03:b7:3a:
20:03:24:02:4e:8b:67:40:8b:d2:28:5a:28:06:49:80:62:63:
b3:44:d1:ed:5a:d9:01:d7:fb:49:df:37:0e:77:c2:7a:12:ae:
d7:5b:4a:19:e8:44:46:ec:c4:4f:21:4f:08:42:82:51:7c:5d:
38:52:6c:a6:41:13:b0:b0:01:0f:17:04:05:09:26:99:89:6b:
0a:8a:3a:b1:98:5c:3a:b2:cb:43:c1:50:18:32:c1:60:36:f8:
43:de:3b:c2:87:61:fe:4f:78:8b:14:04:20:90:50:2e:e1:09:
07:80:1a:54:50:02:ea:1d:84:50:52:f3:c2:6c:98:09:2b:21:
8d:87:d4:f2:62:29:27:c7:28:ad:1a:e7:a4:a8:ca:89:37:42:
bd:39:82:e7
-----BEGIN CERTIFICATE-----
MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEQKME1mxg9oqLZZjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTEyODE2MzQzM1oXDTI2MDMwMjE2MzQzM1owLzEtMCsGA1UEAxMk
YTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2ODNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFSBFIj6qGnqgA31guAdV25x5CullQIvJzNl
ghxUm/mQowSzQX0/ghc9OfqPY5AR93ZqqCiYrKBQrkZHDwfJ2+OV/A3b6KOd9J6M
hTAjneJ8Lp+jyXeWF6sWxqfxy/4qinS27fJzflN9zNApMxWUdJKWXzT0NJwHlQbS
FPzVOL2722/mwI0vkg0Dg/s98SeYbH4YbNAsS9WDvyd9tEIZRIMP/tfNyPLn5gHT
URyUHd4S5oIx0zM+WpqVQBCqzR4zHRBCZSun8pxBqF4Mq3VSe2n1cpvJr0c3BnKQ
CidEF2dtk4Zjdc3ElgH/ewOefRf08eBmqnwFa+jbbgsvxa+NXwIDAQABo4IENzCC
BDMwHQYDVR0OBBYEFGi7rGaoB4uF5u2cAT3CNb3Sp6vzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h
MWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ExZmZjMTkyLWQ0YTgtNDE4OS1i
YWIyLWNlN2EzN2VhNjgzYy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdl
YTY4M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMQYIKwYBBQUH
AQcBAf8EIjAgMB4EAgABMBgDBAHMbK4DBAHMbLwDBAHM66wDBAXR+sAwJAYIKwYB
BQUHAQgBAf8EFTAToBEwDwIDBhTkAgMGFT8CAwYVtjBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK9cl3xX5Z
24TyKUqUAoXD7zEVSFE+z9WVFdtGQLm7lrkOe1XiYYOVEKC/LeQ9AjPkJ9rRO+sQ
91RL7CpS7ieADECTxXjT3M6LKHgcHmm0yIMLiMh44I0Jwki4szPrgDooVYLK9u37
1g4DtzogAyQCTotnQIvSKFooBkmAYmOzRNHtWtkB1/tJ3zcOd8J6Eq7XW0oZ6ERG
7MRPIU8IQoJRfF04UmymQROwsAEPFwQFCSaZiWsKijqxmFw6sstDwVAYMsFgNvhD
3jvCh2H+T3iLFAQgkFAu4QkHgBpUUALqHYRQUvPCbJgJKyGNh9TyYiknxyitGuek
qMqJN0K9OYLn
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:25:45 2025 by rpki-client