Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
File: cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer (raw, json)
Hash identifier: 6bM63fWSmYIX7CAjL0UuI0qw3QMGGYk/7fahYpmWu9Y=
Subject key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285844AD2D5955D535219B81116C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 26 Jan 2024 01:45:21 +0000
Certificate not after: Thu 30 Apr 2026 00:45:21 +0000
Subordinate resources: AS: 8008
AS: 13807
AS: 30164
AS: 33483
IP: 24.51.32.0/21
IP: 24.51.52.0 -- 24.51.63.255
IP: 24.72.204.0/22
IP: 24.72.216.0/21
IP: 24.223.96.0/22
IP: 24.223.104.0 -- 24.223.127.255
IP: 64.64.128.0 -- 64.64.155.255
IP: 72.8.192.0/18
IP: 97.107.196.0/22
IP: 104.36.92.0/22
IP: 104.37.224.0/22
IP: 162.221.232.0/22
IP: 162.250.212.0/22
IP: 173.240.80.0/20
IP: 192.91.139.0/24
IP: 192.189.248.0/24
IP: 199.182.136.0/21
IP: 208.175.128.0/20
IP: 216.8.192.0/18
IP: 223.165.96.0/20
IP: 2604:c80::/32
IP: 2604:9500::/32
IP: 2607:5e80::/32
IP: 2607:fdf0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ad:2d:59:55:d5:35:21:9b:81:11:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jan 26 01:45:21 2024 GMT
Not After : Apr 30 00:45:21 2026 GMT
Subject: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:55:ef:13:ca:8b:72:b6:5a:e6:92:14:b0:
c6:ef:74:51:98:ac:4a:17:36:67:6f:ad:a9:6c:df:
8b:4f:41:40:e7:8c:d2:58:e9:ec:88:31:94:2e:80:
96:f8:fd:08:20:8b:0f:8e:84:7c:29:a0:90:cf:72:
0e:2a:f9:a5:45:c8:30:d2:a9:05:20:db:b1:ea:8d:
19:fa:c7:7e:3e:eb:45:a6:c4:0e:7a:53:a6:9a:41:
3a:92:82:11:24:eb:d1:20:ac:0c:cd:75:c8:c4:b3:
fe:90:80:85:cf:74:d2:5e:cc:bc:aa:ee:1c:2b:ff:
ca:c7:84:26:11:09:56:75:d3:b2:9f:30:74:03:56:
39:5c:ff:b4:92:82:5c:39:94:c2:89:ea:15:06:5d:
f5:d2:34:f9:03:c6:70:26:79:3a:0c:eb:a7:9d:e8:
95:6d:7f:cb:16:21:56:d0:70:34:02:96:08:65:fd:
6b:a6:1e:81:d8:00:75:ec:5b:2b:34:67:3f:a1:a7:
e3:3d:4c:93:39:ea:2d:1c:c3:b0:18:2f:3b:44:e8:
af:1b:03:82:7f:64:bb:d0:f1:7b:70:ca:ef:88:e9:
d6:c0:ea:71:1c:04:95:3b:37:14:7d:47:e0:b2:be:
62:1c:84:e4:12:85:1e:88:d8:25:b4:4e:f1:f3:59:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
24.51.32.0/21
24.51.52.0-24.51.63.255
24.72.204.0/22
24.72.216.0/21
24.223.96.0/22
24.223.104.0-24.223.127.255
64.64.128.0-64.64.155.255
72.8.192.0/18
97.107.196.0/22
104.36.92.0/22
104.37.224.0/22
162.221.232.0/22
162.250.212.0/22
173.240.80.0/20
192.91.139.0/24
192.189.248.0/24
199.182.136.0/21
208.175.128.0/20
216.8.192.0/18
223.165.96.0/20
IPv6:
2604:c80::/32
2604:9500::/32
2607:5e80::/32
2607:fdf0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8008
13807
30164
33483
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:dd:9c:77:fa:04:c3:36:6e:13:f5:92:af:9e:52:11:73:d7:
47:36:0c:4d:5a:a7:ec:34:c6:c4:75:5a:9e:62:7c:61:80:81:
17:30:f6:fe:f5:3a:70:c6:7d:51:1e:f1:51:35:ad:dc:61:9a:
75:61:17:ff:5c:f5:b2:ce:84:9e:00:26:5d:0c:eb:0d:a2:68:
93:13:5b:ad:0f:cb:e5:08:5c:3a:fd:5a:37:7b:b1:d0:33:47:
c4:b8:24:eb:d4:82:a2:ae:af:b5:27:d0:b8:f6:c3:e0:5c:9d:
36:44:ee:cf:d4:ff:46:c6:dc:0e:bb:6e:e8:88:a8:37:15:7e:
e7:e0:bb:a0:f0:0a:f0:e9:a3:41:5f:c1:52:0e:0e:01:63:f8:
c6:75:a3:10:da:5d:e8:cc:34:ce:57:04:73:32:cd:9c:c4:76:
01:e5:e6:34:9e:54:bb:af:99:a5:ce:89:38:e0:7f:3c:95:96:
43:e5:8c:b0:d2:d4:e1:03:a4:bd:2a:95:68:92:50:7f:72:62:
6a:3e:68:47:fe:1f:7a:0b:96:e2:78:c9:81:b1:41:4e:35:44:
01:39:13:36:21:6f:b2:a0:d9:a2:05:1f:af:87:82:5e:d0:e2:
c2:55:18:2a:ac:d7:01:13:de:d2:32:45:2e:85:b0:a9:79:dd:
05:2c:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:33 2025 by rpki-client