Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
File: a3049800-ff17-49a6-b029-ec908e1c7cb3.cer (raw, json)
Hash identifier: 6pg+Ok2YN+WA1zXvMmIGj3uGZMqkROLz+fxt/pKzoa0=
Subject key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285848C413F8C40718AC3300593680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 04 Feb 2025 01:45:34 +0000
Certificate not after: Mon 10 May 2027 00:45:34 +0000
Subordinate resources: AS: 20150
IP: 45.59.112.0/20
IP: 66.23.192.0/21
IP: 104.36.80.0/21
IP: 130.51.40.0/22
IP: 216.126.224.0/20
IP: 2604:4ac0::/32
IP: 2604:4cc0::/32
IP: 2604:4d40::/32
IP: 2604:4fc0::/32
IP: 2604:5040::/32
IP: 2604:50c0::/32
IP: 2604:6a40::/32
IP: 2605:7980::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:13:f8:c4:07:18:ac:33:00:59:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Feb 4 01:45:34 2025 GMT
Not After : May 10 00:45:34 2027 GMT
Subject: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:44:0e:b5:8d:9c:c7:1e:cb:7a:27:9d:31:
73:2b:bf:8e:98:26:dd:23:ca:ce:98:00:12:07:c9:
67:7e:88:a2:76:96:c6:66:a9:8e:09:e3:91:69:4e:
76:88:74:01:0f:3b:49:a4:f4:e4:87:5a:6a:52:da:
fd:79:04:89:67:1c:19:30:81:ac:20:da:88:64:9c:
0c:86:d5:2f:d7:d2:d0:0d:24:02:03:35:55:08:b3:
57:d5:51:d7:26:ea:eb:12:72:00:23:af:26:99:9a:
b0:7a:26:3e:ab:e6:c0:1b:26:b8:b8:76:00:68:40:
47:0f:e1:5b:ae:28:9f:0e:e4:fe:04:38:62:af:1e:
d2:a9:02:f5:32:9e:99:51:21:34:e6:73:cb:52:13:
fe:ea:61:7f:80:ac:6c:cf:c5:30:7a:ea:27:e4:cd:
13:e0:58:3d:80:5c:26:c2:65:6b:e2:6b:2d:71:05:
b3:00:d3:d8:c3:09:90:79:2e:e5:a3:77:c8:f1:14:
45:79:dc:7d:ce:52:69:c0:a9:2a:e0:d6:56:13:6e:
f2:be:02:93:f5:97:f0:5b:74:32:d7:ae:54:77:2d:
47:e2:ca:f5:ba:14:71:df:8c:8e:6d:50:bd:11:17:
41:dc:a8:7f:71:eb:9a:e4:f4:23:25:a5:c5:f0:d7:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.112.0/20
66.23.192.0/21
104.36.80.0/21
130.51.40.0/22
216.126.224.0/20
IPv6:
2604:4ac0::/32
2604:4cc0::/32
2604:4d40::/32
2604:4fc0::/32
2604:5040::/32
2604:50c0::/32
2604:6a40::/32
2605:7980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20150
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:5a:f9:d6:c8:6a:b4:cd:c8:f0:84:14:fb:c6:9f:67:b4:bf:
ec:f6:39:28:1b:83:b8:8d:de:d4:a9:55:98:9b:bc:b5:ab:30:
1d:a5:ff:20:ea:e7:b8:fc:6a:25:93:90:56:f4:7b:76:9c:2f:
e6:98:12:ea:a7:a0:13:62:ae:b9:47:5f:56:bb:d1:13:49:53:
ba:99:7c:e9:5c:b7:e3:c8:44:07:45:fe:3e:20:a0:df:6a:4b:
6d:93:b7:2c:3c:33:b8:5a:9f:30:7b:40:2c:90:e8:12:33:4b:
1c:e2:fb:1b:f3:bb:45:58:fe:30:ec:ca:90:cb:88:1e:c4:65:
d7:02:ce:10:33:26:d2:e7:36:ac:2f:34:29:73:d2:75:32:3a:
4d:5d:af:d9:5a:73:cd:9f:7e:01:05:66:aa:2e:ef:d3:5c:0c:
16:da:65:ed:a7:95:a3:db:a6:ba:1b:12:94:a1:c4:4b:d1:67:
4c:50:3a:0e:de:20:7f:f8:c1:e6:51:03:a0:80:fa:ba:57:d8:
16:87:32:91:79:5e:55:f7:64:d6:22:93:af:f9:e7:64:57:ed:
cb:b0:ee:31:6a:55:de:35:0a:33:4c:bc:2c:d4:c0:89:c8:e4:
4e:d9:ea:b4:b5:1c:82:de:68:d1:02:48:43:5a:a7:cc:33:fa:
2b:2c:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:38 2025 by rpki-client