Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
File: 209f0328-0af3-4de3-a043-8072346acdf7.cer (raw, json)
Hash identifier: jrShQuX7P41E8vB487X24uwR1FggdBexMXtEBcJEW3s=
Subject key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285846D89DB4C8DF08B76513F45340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 Aug 2024 00:45:22 +0000
Certificate not after: Sun 15 Nov 2026 01:45:22 +0000
Subordinate resources: AS: 5771
AS: 7782
IP: 23.235.96.0/20
IP: 63.140.64.0/18
IP: 66.230.80.0 -- 66.230.127.255
IP: 69.161.0.0/19
IP: 69.162.192.0/19
IP: 74.124.64.0/18
IP: 107.152.112.0/20
IP: 162.211.56.0/21
IP: 162.218.128.0/21
IP: 198.163.32.0/21
IP: 204.17.139.0 -- 204.17.140.255
IP: 209.112.128.0 -- 209.112.223.255
IP: 209.193.0.0/18
IP: 216.67.0.0/17
IP: 2001:4948::/32
IP: 2602:233::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d8:9d:b4:c8:df:08:b7:65:13:f4:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Aug 12 00:45:22 2024 GMT
Not After : Nov 15 01:45:22 2026 GMT
Subject: CN=209f0328-0af3-4de3-a043-8072346acdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:96:f4:e7:d9:b1:c0:bd:ab:c5:0b:dc:b7:
6c:0f:14:32:c8:5d:db:f5:fb:3a:55:d1:a1:c5:3b:
be:ef:33:88:58:6c:b5:c1:b5:71:ae:3e:83:cc:ed:
26:57:99:1d:fc:19:9a:19:6e:bb:b7:9d:02:63:0c:
20:0c:dc:d7:55:d5:c3:35:9a:85:88:bc:5d:c9:a9:
fb:61:ca:eb:65:6f:04:ef:c9:c2:d7:19:83:b3:57:
ea:50:88:1e:53:1c:ff:93:f0:80:10:a5:c9:91:a4:
cb:7f:43:86:79:3d:e3:44:6f:12:e3:cc:a7:4e:78:
61:30:73:68:36:cd:83:d1:22:8c:3d:ab:06:15:2f:
f1:42:e1:bc:68:5b:75:25:fa:a3:12:d2:e7:d9:9b:
47:51:a8:99:03:c3:1a:02:6f:a2:7d:57:a1:dd:8b:
23:06:c5:7b:74:41:7b:d7:47:13:c5:11:8e:3f:ae:
8c:22:eb:3a:81:c5:0a:a6:fb:f7:19:8d:2c:42:92:
c6:e3:65:69:f8:26:07:ed:0f:14:14:53:8e:6c:03:
b9:eb:9b:dd:7d:c2:76:c3:f2:4d:55:9a:0a:8a:6e:
dd:fb:78:61:ce:cf:f2:4c:78:7f:5a:42:42:3b:e7:
22:c4:1a:df:2c:45:4a:ac:9a:3c:3b:14:25:a8:49:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.96.0/20
63.140.64.0/18
66.230.80.0-66.230.127.255
69.161.0.0/19
69.162.192.0/19
74.124.64.0/18
107.152.112.0/20
162.211.56.0/21
162.218.128.0/21
198.163.32.0/21
204.17.139.0-204.17.140.255
209.112.128.0-209.112.223.255
209.193.0.0/18
216.67.0.0/17
IPv6:
2001:4948::/32
2602:233::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5771
7782
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:0c:a5:10:35:08:62:8c:c6:4e:54:95:32:51:70:98:4e:5e:
ed:c6:71:07:7f:b2:c0:0e:4f:54:5a:ee:94:d1:80:38:4e:06:
42:f6:61:92:02:6c:30:83:be:1a:28:25:86:91:c1:b5:37:40:
91:9e:98:29:07:46:12:6a:38:6a:7f:4e:9e:2f:5d:36:0e:a6:
98:fb:ef:30:71:2e:0a:1f:c7:fe:b0:a8:f8:eb:30:f9:eb:b2:
52:2c:4b:11:09:3c:96:ba:81:20:5f:f7:ac:af:ef:55:74:92:
3d:ea:7e:5b:4d:10:54:6c:71:7b:40:5b:fa:32:fb:3b:c1:f1:
fd:b7:82:16:2b:0c:fb:1c:8b:2d:63:53:53:6b:a2:d1:1f:fc:
56:e6:1c:f1:3b:22:e3:24:1d:77:51:55:f2:a0:d5:5f:bb:6d:
05:a7:e7:42:58:c2:9d:6d:6d:e0:8b:56:c1:c8:30:18:82:52:
81:1d:a7:98:e6:0c:56:63:63:8a:1e:4f:b6:65:a6:37:e0:ac:
86:b1:d4:e8:cd:73:6c:f1:8e:42:f5:b2:2d:22:50:e5:d0:24:
2f:37:a3:cb:38:05:8c:45:18:89:36:cc:01:c6:e9:36:61:fe:
aa:77:a9:40:5f:2b:54:05:bd:e8:fa:da:86:d0:dd:b9:e5:95:
91:76:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:18 2025 by rpki-client