
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
File: 8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer (raw, json)
Hash identifier: fGdyPMpNNeXFnr/qcuClmFOvGIdq7gvoddcU43IcJfo=
Subject key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584976A1FAD5E9E1D5EF26986000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 09 Apr 2025 00:45:34 +0000
Certificate not after: Tue 13 Jul 2027 00:45:34 +0000
Subordinate resources: AS: 394470
IP: 172.83.150.0/24
IP: 216.10.70.0/23
IP: 2620:25:a000::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a1:fa:d5:e9:e1:d5:ef:26:98:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Apr 9 00:45:34 2025 GMT
Not After : Jul 13 00:45:34 2027 GMT
Subject: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:b7:ac:f9:b3:13:d5:79:1b:f2:32:c8:ab:
9f:d0:a1:31:0f:96:44:67:41:99:30:b9:f6:d3:95:
60:1b:9d:ad:fd:40:c2:48:c7:4d:c7:f9:02:df:3e:
8c:a0:07:7a:b3:cd:30:50:d1:4b:15:e2:d4:b3:68:
31:df:0d:3c:fe:a7:6d:e3:f6:cc:55:96:53:99:86:
fd:fd:e3:3f:3d:76:ea:62:fc:01:a3:ee:5d:3d:a3:
2d:0a:e5:4d:93:f9:9e:b1:e5:3c:25:8f:b9:48:29:
35:1a:da:ad:7f:b3:bc:ca:6e:88:13:b8:34:3b:2a:
e6:56:c4:24:3b:99:49:1a:26:2f:0e:54:e3:7c:a5:
b0:83:21:f7:f4:26:a8:6c:34:34:2d:4c:09:64:6b:
9f:73:96:32:5e:6d:41:ed:f2:ef:25:d2:1b:4a:ca:
8f:94:d6:97:6d:b7:f0:82:87:ec:a3:82:d4:f4:a6:
f3:d3:0d:1b:76:5f:1d:c7:78:81:39:1a:a7:3f:b1:
36:03:b0:d5:d5:ec:44:a2:91:9d:22:ba:b6:b3:54:
bf:0b:fd:69:d0:9c:3e:3c:de:10:4c:d7:3c:06:0c:
1a:fe:f5:ba:cf:e0:cc:5e:15:30:24:e8:c2:4b:ed:
b7:dd:66:fe:27:96:70:68:3d:de:61:2c:c0:9a:a0:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.150.0/24
216.10.70.0/23
IPv6:
2620:25:a000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394470
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:70:de:f7:00:4a:1c:36:37:2a:01:e8:6f:c4:a5:c3:7b:0c:
7b:8a:7f:92:b0:b5:83:2e:6e:93:40:6f:97:cf:56:85:a7:a5:
8c:60:29:21:64:9b:d5:af:a7:2b:65:a0:0f:99:ca:cd:52:2b:
e5:a6:cc:4d:e6:c6:a7:2e:9d:60:51:e9:a8:92:26:2d:0e:f3:
1a:0a:fc:a2:86:f1:f4:75:03:5b:0f:d8:30:34:7b:66:3d:db:
01:d8:d2:7a:8d:32:73:3e:d0:58:e9:18:f8:75:ef:f1:a8:47:
43:18:be:8f:66:5c:98:21:35:22:10:80:f9:70:a1:a4:87:2a:
1f:24:ee:19:57:dc:da:6b:d0:42:87:71:c8:38:18:6c:e4:07:
42:a1:e9:40:53:7e:2c:0c:3e:69:bc:7f:86:e8:02:55:23:a8:
39:07:b0:58:bd:9e:65:9d:8c:db:e8:b6:41:b7:b0:bc:00:aa:
6f:d3:90:56:10:35:90:df:8f:37:a2:4d:40:67:b9:4e:fd:62:
a1:38:4e:8e:d4:41:20:f5:b0:9a:3e:11:a3:0a:f2:1f:2e:52:
5b:3c:de:48:89:ef:96:a2:ad:24:7b:61:2a:3e:ac:52:39:c0:
02:58:69:86:13:53:c5:7f:1f:11:ec:12:27:50:fe:c3:35:47:
0a:5a:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net