
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
File: e3bd303b-738d-4c77-9c55-320fcfa93f75.cer (raw, json)
Hash identifier: 1PlXtcnXgLgI1DrAIkRCVdhw7mFQ02CttChggTAQCOo=
Subject key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F432858494F8C65AB810668D4684F64FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 26 Mar 2025 00:45:34 +0000
Certificate not after: Tue 29 Jun 2027 00:45:34 +0000
Subordinate resources: IP: 104.166.32.0/20
IP: 108.60.224.0/19
IP: 204.236.64.0/18
IP: 216.137.0.0/20
IP: 2610:180::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:8c:65:ab:81:06:68:d4:68:4f:64:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Mar 26 00:45:34 2025 GMT
Not After : Jun 29 00:45:34 2027 GMT
Subject: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:d0:05:ad:61:fb:88:89:e4:aa:d0:0d:09:
28:e3:72:c8:96:8b:48:77:d3:57:45:bf:de:36:72:
0c:6b:85:b3:bf:93:b0:c8:01:97:c3:5b:0e:03:c2:
70:9b:e8:cb:1c:cc:82:02:01:23:06:15:dc:a3:1a:
2d:e3:97:b8:68:5c:9f:c0:06:81:05:93:ec:6c:c1:
2c:cf:f8:50:50:f8:ee:0a:c0:e9:03:5d:9d:5b:10:
e0:85:d0:8b:e7:17:a5:98:9d:76:da:0d:f1:00:f8:
75:02:03:e0:44:fd:29:03:ac:f5:d5:5e:cf:7c:dc:
8d:d4:c8:0e:b6:6a:14:6a:e2:f8:d3:f0:6d:56:2a:
68:23:18:c1:99:5a:7d:be:81:e2:ca:d1:93:58:9a:
24:ae:03:c0:60:0a:ea:ef:c3:a3:50:32:17:2f:99:
04:ae:2c:12:98:e0:31:d1:56:50:1b:23:57:c8:36:
93:62:3a:64:a5:b2:6e:48:19:d3:55:af:f7:0c:4e:
a5:2f:b2:43:63:8b:e5:35:17:07:69:22:c2:e6:6d:
f4:f4:03:48:c2:ec:eb:16:eb:da:35:ab:d2:d2:fc:
36:26:86:04:7c:c5:58:43:ab:f4:32:53:c8:94:03:
0b:cc:85:bb:f6:57:a0:d2:dc:e7:fd:00:dc:d4:22:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
104.166.32.0/20
108.60.224.0/19
204.236.64.0/18
216.137.0.0/20
IPv6:
2610:180::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c7:7f:e0:d9:13:3d:9b:cf:11:0b:56:bc:6f:74:8e:b2:8b:
71:a6:27:c0:33:43:e4:f0:e0:27:3b:5d:b6:29:67:5b:78:d0:
c4:76:95:7d:18:03:ce:79:a5:46:c1:be:eb:cc:28:2b:df:e2:
2f:6f:ed:c2:78:79:9e:2e:6d:e4:59:c4:14:87:a6:a3:6a:c5:
2b:27:e9:b5:a8:cd:a8:92:67:53:8f:e7:1b:96:c6:11:69:cb:
33:26:46:6e:a6:0a:89:46:1e:49:8f:ec:97:01:55:b3:00:34:
82:89:1e:bd:4c:d9:56:25:ec:99:97:a9:63:44:88:86:47:b7:
e3:75:7f:48:70:19:cd:63:1b:22:8d:28:16:b0:1b:a9:06:9e:
b7:7d:de:4e:6b:5f:9c:06:d1:42:d3:62:ac:85:fa:25:c5:04:
d8:23:28:bc:c2:40:0a:64:53:8e:9e:b7:f1:d5:b7:ad:38:ec:
26:f5:c5:31:bb:ef:86:16:89:10:07:cb:04:f0:ee:61:e5:49:
02:d6:3f:4f:95:77:87:6e:52:0d:27:93:15:cd:92:97:4e:4a:
47:77:54:38:65:9a:02:65:f7:3d:63:2a:65:60:9e:75:9e:77:
6d:27:53:f9:c7:0a:35:8b:6f:54:18:64:07:aa:0e:2b:98:0d:
ed:e0:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:53 2025 by rpki-client