Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
File: 8a8a1a2d-c949-4896-93b9-71f917048e79.cer (raw, json)
Hash identifier: cTuqAhqtFsL/ZdKQHhS2f36TFSmSu0gvMDeCfsxJUow=
Subject key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584445E1FD1FEF0096D1AB1B37A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 20 Dec 2023 01:45:15 +0000
Certificate not after: Tue 24 Mar 2026 00:45:15 +0000
Subordinate resources: AS: 399804
IP: 66.187.4.0/22
IP: 158.51.124.0/22
IP: 2606:65c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:45:e1:fd:1f:ef:00:96:d1:ab:1b:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Dec 20 01:45:15 2023 GMT
Not After : Mar 24 00:45:15 2026 GMT
Subject: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:e9:02:fd:d5:ad:72:fb:cf:14:a3:09:60:
70:f1:d6:fe:47:4f:0e:52:cb:87:6a:8f:6c:e9:ae:
c0:4b:2b:a8:9a:06:d9:1e:8b:be:f4:4e:ed:f8:18:
e1:7f:f7:2c:99:d2:c3:6f:8d:1c:72:11:3d:eb:89:
92:4f:6e:00:91:8d:cb:07:00:2c:cd:cd:ca:ab:52:
96:7e:5c:da:82:39:22:ee:be:97:5b:27:b8:53:a1:
06:a8:ce:72:e0:89:39:a2:12:63:67:b4:db:bf:d8:
7e:ed:55:e5:48:ed:81:00:01:86:be:3c:a0:24:fe:
aa:ea:5e:b8:a9:11:b7:ab:71:fa:10:6c:49:8c:82:
06:42:4d:d9:f2:ed:72:5f:6d:fc:d8:a3:44:8d:ac:
5f:5c:1c:f0:0e:42:a9:7a:a3:36:55:53:93:2b:78:
a6:2e:1d:ab:09:e7:08:c2:0d:b7:35:1b:38:c7:87:
4c:2f:5c:31:98:d3:7a:e5:0b:f0:a2:ed:86:de:43:
ee:48:67:d3:e4:b0:66:8a:2d:0d:a8:02:ed:09:39:
84:0e:b7:bf:4d:a7:41:d6:11:59:1c:65:e2:72:02:
44:1e:7c:49:5d:c4:34:49:27:41:0e:a5:c0:c5:e8:
1b:e3:6c:9e:fe:93:ff:16:79:22:18:2c:67:7b:86:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.4.0/22
158.51.124.0/22
IPv6:
2606:65c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399804
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:8d:e0:8d:70:3d:ed:ac:71:c3:3a:ce:93:4c:11:fb:ab:04:
fb:e1:78:5e:3a:ce:64:44:c5:e7:57:65:81:da:94:de:0a:4d:
c1:b3:93:26:7f:0d:35:c7:a4:67:ff:f4:18:39:c1:04:a6:8c:
a0:ea:7a:ae:fb:23:e1:00:d1:4f:e1:f1:d3:d8:ae:62:ea:d8:
f6:92:f5:bc:53:bd:0a:1f:14:10:d0:0b:b1:8d:e5:81:91:d7:
73:d4:95:f0:73:d1:0f:a7:2c:84:dc:5b:23:ef:9a:5c:32:20:
38:d1:e8:ef:4e:d4:24:9f:6b:8b:03:28:c4:1b:06:43:f6:28:
a6:62:7f:12:ad:de:01:cc:ff:c6:b5:20:0d:d4:ad:4f:77:c4:
20:bd:56:82:72:f4:bb:33:df:ab:a5:2b:c4:00:17:a4:11:c9:
b6:02:7d:00:a6:87:0e:54:78:1b:87:d1:72:eb:fc:bd:86:b8:
e5:3c:67:34:03:c3:12:bc:d2:e2:75:9b:af:ef:9e:d5:e6:68:
64:23:c2:f9:65:8a:d1:66:60:3c:7c:0b:20:ea:50:87:16:85:
a9:82:7b:94:24:45:cc:58:bf:27:4a:fc:02:37:87:e2:e9:03:
a0:aa:9d:8f:97:cb:45:34:ca:a6:12:25:a6:dd:5b:f9:6d:d0:
df:4e:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:52 2025 by rpki-client