Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
File: a062a219-9ee8-48a3-897a-8410b6da94a1.cer (raw, json)
Hash identifier: 9b3NiOxjRi/gz03Z/jI13HbY1aTQ2kQtOENrzPuetSQ=
Subject key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F432858494E78ED761F1A230D75D04980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 25 Mar 2025 15:30:32 +0000
Certificate not after: Fri 29 Jan 2027 01:45:26 +0000
Subordinate resources: AS: 803
AS: 26501
AS: 399844
IP: 64.110.192.0/18
IP: 64.201.192.0/19
IP: 67.225.0.0/17
IP: 68.69.192.0/19
IP: 69.11.0.0/17
IP: 71.17.0.0/16
IP: 74.113.12.0/22
IP: 96.125.240.0/20
IP: 104.152.28.0/22
IP: 104.219.8.0/22
IP: 104.255.48.0/22
IP: 108.60.160.0/19
IP: 108.160.16.0/20
IP: 108.174.160.0/20
IP: 142.164.0.0/16
IP: 162.253.8.0/22
IP: 192.34.224.0/21
IP: 198.228.86.0 -- 198.228.89.255
IP: 198.230.96.0/19
IP: 198.245.112.0/20
IP: 199.26.190.0/23
IP: 199.189.88.0/21
IP: 206.163.224.0/19
IP: 207.47.128.0/17
IP: 216.126.200.0/22
IP: 216.174.128.0/19
IP: 216.197.128.0/17
IP: 2604:1e80::/32
IP: 2607:f4a8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:78:ed:76:1f:1a:23:0d:75:d0:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Mar 25 15:30:32 2025 GMT
Not After : Jan 29 01:45:26 2027 GMT
Subject: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:8b:ad:81:8d:6b:79:98:f6:db:03:6e:6f:
b1:64:8a:1d:d7:f9:cb:56:75:2d:e1:9a:e4:12:d2:
70:02:bb:98:1a:93:61:74:f7:3d:73:21:f8:17:d1:
66:9b:0c:7b:16:79:06:ea:dc:8d:99:d9:f8:8e:e9:
2b:a4:1b:ad:07:ba:53:c0:c3:cd:e2:4b:39:38:fc:
d6:bd:1e:b4:19:52:de:c3:ee:58:bd:f6:5d:78:61:
f7:e3:86:bf:84:d3:8a:9c:09:88:8f:dd:5c:60:77:
53:ca:31:67:ef:11:68:0a:a3:50:7b:80:4d:39:77:
96:da:d8:b3:f8:1c:1d:a5:e1:6d:5f:52:7a:6c:9f:
18:11:19:8b:4d:0d:3a:7c:64:cc:b2:ce:43:f1:b3:
0a:21:13:ca:97:e6:c1:c1:01:45:6b:e2:04:0c:7a:
49:dd:d7:66:ce:73:42:19:40:0c:d7:1f:6e:36:38:
cf:d0:c8:fd:2b:21:a9:98:8c:33:b6:5f:92:58:1c:
b2:b0:5a:f8:44:6c:55:aa:d0:1a:fa:f4:75:e2:7f:
73:10:23:e4:00:92:f2:fe:22:ca:34:a0:82:6c:2d:
4e:0f:14:b8:c3:eb:82:7c:80:51:52:c6:88:4d:81:
7c:dd:19:d5:a6:a9:fa:9e:ec:49:6a:9d:92:89:6a:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
64.110.192.0/18
64.201.192.0/19
67.225.0.0/17
68.69.192.0/19
69.11.0.0/17
71.17.0.0/16
74.113.12.0/22
96.125.240.0/20
104.152.28.0/22
104.219.8.0/22
104.255.48.0/22
108.60.160.0/19
108.160.16.0/20
108.174.160.0/20
142.164.0.0/16
162.253.8.0/22
192.34.224.0/21
198.228.86.0-198.228.89.255
198.230.96.0/19
198.245.112.0/20
199.26.190.0/23
199.189.88.0/21
206.163.224.0/19
207.47.128.0/17
216.126.200.0/22
216.174.128.0/19
216.197.128.0/17
IPv6:
2604:1e80::/32
2607:f4a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
803
26501
399844
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:f6:84:f2:20:ab:b6:bc:1c:75:7d:cf:e4:1d:45:3e:34:38:
92:28:fa:44:4c:77:98:bc:3d:55:e7:fa:08:f3:e1:08:85:98:
eb:3e:8b:47:aa:da:2a:09:42:b7:4e:7d:ca:24:21:24:c3:67:
bc:3a:28:82:85:9e:a8:b9:31:8b:6b:7d:9d:10:7b:5f:c6:1f:
8c:32:33:cc:a1:ff:c9:bc:8f:67:45:98:fd:6f:02:41:86:67:
9b:ad:8f:f3:51:9d:d8:19:51:21:0e:9f:1a:48:3f:2a:65:1e:
af:fa:26:10:7a:cb:5b:a3:65:cf:43:46:c3:c9:dc:fb:c8:c0:
58:e9:2a:ce:ba:22:b8:ac:3f:bd:c6:28:ba:a8:4f:b8:e9:c9:
8c:9e:3b:5d:e7:37:b1:75:ca:9f:81:e9:3f:19:fa:97:a8:68:
a8:f0:b1:b5:e3:22:97:02:35:7d:b0:d1:ab:15:58:19:eb:43:
ae:7b:95:69:6c:55:dd:fd:92:d6:b0:69:f4:ea:19:0b:6e:36:
e5:dc:56:3a:e1:0f:bf:42:86:d1:6d:3f:d8:ff:c5:15:42:65:
f7:2d:12:95:39:8a:99:dd:a0:0a:91:74:6c:f0:7e:71:9c:41:
e3:5b:86:65:70:fb:fa:17:9a:ad:47:80:c6:6d:8a:c3:77:3c:
96:69:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:00 2025 by rpki-client