
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
File: c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer (raw, json)
Hash identifier: Jq1W0OnWQlDZzy0juDbqJrYcrUWzZbv8O9PrQbu32Gc=
Subject key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F432858470548AF008D12886E2AEC2700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 28 Aug 2024 00:45:26 +0000
Certificate not after: Tue 01 Dec 2026 01:45:26 +0000
Subordinate resources: AS: 10967
IP: 151.140.0.0/16
IP: 165.130.0.0/16
IP: 207.11.0.0/17
IP: 2601:e000::/24
IP: 2620:105:a000::/44
IP: 2620:1be::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:05:48:af:00:8d:12:88:6e:2a:ec:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Aug 28 00:45:26 2024 GMT
Not After : Dec 1 01:45:26 2026 GMT
Subject: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:fd:c0:45:40:72:71:8d:0e:c1:72:0d:29:
ee:82:e8:83:bb:b9:4c:f8:2c:7b:ef:6c:37:a7:3d:
f0:68:06:e5:c7:4a:6a:15:08:8c:80:fd:6d:c8:5e:
80:bf:d6:e2:7a:b2:d9:55:9e:93:d5:84:1e:ff:ff:
73:ad:54:bf:bd:be:5c:04:cd:77:87:08:a7:a0:6b:
be:63:4a:36:6e:ea:0f:21:0a:1c:1d:74:b5:84:05:
48:35:2f:b0:8a:02:e8:04:8a:46:88:6c:b2:c9:a3:
ac:84:b5:6c:2a:78:d8:1b:a8:18:18:27:5e:16:f5:
55:a5:21:b0:7a:f2:58:e9:1d:95:29:b4:3b:3d:93:
31:50:25:08:11:15:91:66:5a:a0:a5:10:64:6c:f9:
8b:0e:db:ff:5f:bd:e9:d8:fd:24:7a:d9:0a:13:d7:
b3:53:23:b1:28:74:f6:de:de:cb:22:37:71:f2:24:
b1:14:4e:17:94:21:c2:f9:75:44:76:d6:75:b4:ab:
21:20:8d:69:ca:fe:00:41:91:98:5a:ef:4a:d5:39:
5a:6a:84:95:bd:35:c0:a1:30:ce:8f:ea:fd:9d:a6:
87:b5:b3:55:69:3d:4b:6b:5c:1d:65:c4:bc:1c:fb:
27:a5:3c:c9:8c:1e:8a:94:07:17:e7:de:24:7c:2a:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
151.140.0.0/16
165.130.0.0/16
207.11.0.0/17
IPv6:
2601:e000::/24
2620:105:a000::/44
2620:1be::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10967
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:05:ce:c3:ee:49:05:c7:f8:51:f6:e3:4f:b5:6a:db:df:7e:
b8:23:18:64:63:6e:70:f6:45:55:dc:12:1b:0a:d5:f3:c6:08:
77:ad:f4:43:1c:48:d2:76:e0:a4:11:dc:eb:ce:63:df:c2:04:
f2:e0:3b:e8:51:3f:bd:af:24:be:74:2f:5f:57:44:da:aa:d9:
74:79:5b:ec:a9:a5:c4:8c:e2:b8:30:14:64:4b:9e:54:3f:a1:
55:28:c7:65:fd:bd:38:25:46:e3:e0:3a:f7:33:21:79:ae:92:
83:0f:9a:4d:40:e9:6d:b8:60:d1:78:29:de:ec:25:36:3e:1b:
d3:c6:4a:ea:63:f1:ce:d4:97:bb:a6:fb:a7:79:c0:5c:c6:3e:
44:9d:8c:b0:61:4e:65:71:b1:f4:60:97:d4:ea:c5:40:34:37:
bb:a9:b8:81:c4:45:ba:98:f9:7b:12:1f:25:9a:85:6e:fb:57:
72:d4:86:f5:15:af:0c:38:28:92:40:d9:d4:e7:c7:42:ab:33:
8b:af:c5:17:11:4e:2c:3d:7a:c4:ad:59:39:35:82:e7:b0:19:
9f:17:8c:10:ee:0c:4d:30:c4:1e:3f:ed:43:0c:ea:f2:9e:6a:
b7:33:d5:40:73:16:ce:e0:a2:02:f5:5a:b8:e7:7b:fe:94:aa:
8d:c2:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:05 2025 by rpki-client