Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
File: c32e4c57-f588-46c2-a752-708ae6efb1cc.cer (raw, json)
Hash identifier: NauWKTcsVR26Ef2c9PqyuLubYYGQo491ss6xdJ8SNNI=
Subject key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285845575B48B111ED91268DC9B000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 27 Mar 2024 00:45:19 +0000
Certificate not after: Tue 30 Jun 2026 00:45:19 +0000
Subordinate resources: IP: 23.233.0.0/17
IP: 24.52.192.0/18
IP: 24.212.128.0/17
IP: 24.246.0.0 -- 24.246.95.255
IP: 45.72.128.0/17
IP: 104.195.128.0/17
IP: 104.246.128.0/17
IP: 107.179.128.0/17
IP: 107.190.0.0/17
IP: 108.162.128.0/18
IP: 135.23.0.0/16
IP: 192.0.128.0/17
IP: 198.48.128.0/17
IP: 198.84.128.0/17
IP: 207.136.64.0/18
IP: 209.161.192.0/18
IP: 216.154.0.0 -- 216.154.191.255
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:57:5b:48:b1:11:ed:91:26:8d:c9:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Mar 27 00:45:19 2024 GMT
Not After : Jun 30 00:45:19 2026 GMT
Subject: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:1d:bb:d0:61:b0:8b:31:0c:92:94:80:ce:
1b:ed:99:ba:b1:e1:0f:cc:90:2e:fd:90:b4:fd:0a:
ee:61:6a:27:2c:8a:f1:2e:86:8a:1b:67:78:c3:f2:
c3:49:e8:22:2a:7e:e3:26:b1:2d:aa:eb:d8:47:11:
3f:90:a5:79:89:68:07:97:bc:23:d7:4d:07:3a:94:
70:c5:1f:6c:a3:91:eb:61:58:16:54:56:2b:cc:fb:
aa:fc:85:0f:f3:ea:9b:05:5d:5d:f0:e4:af:76:ce:
71:57:51:55:c6:80:5b:8f:e1:41:82:e8:70:a9:e6:
34:e5:3d:c6:ce:6a:e5:7f:f5:9d:89:4a:db:26:96:
6d:5e:05:17:75:cf:83:0d:e4:a2:52:3c:82:57:42:
14:ff:90:63:97:ff:2e:71:77:26:03:45:6f:79:23:
cf:63:1c:d8:ff:89:50:6a:dd:b7:aa:82:73:a2:5b:
f6:df:c7:af:c1:56:aa:57:ac:62:8d:68:a6:44:c6:
c0:7b:90:8d:62:a6:9f:30:57:97:c6:5b:a3:8c:46:
be:90:75:10:0d:a2:e5:f2:87:ef:45:52:2d:35:f1:
0d:87:42:24:80:4b:1f:04:9a:b7:79:05:0c:2c:24:
70:fd:38:da:49:91:a1:57:d5:f3:93:1e:bb:78:2f:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.233.0.0/17
24.52.192.0/18
24.212.128.0/17
24.246.0.0-24.246.95.255
45.72.128.0/17
104.195.128.0/17
104.246.128.0/17
107.179.128.0/17
107.190.0.0/17
108.162.128.0/18
135.23.0.0/16
192.0.128.0/17
198.48.128.0/17
198.84.128.0/17
207.136.64.0/18
209.161.192.0/18
216.154.0.0-216.154.191.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:d4:ee:b8:12:42:4d:06:c0:1e:af:30:6d:31:f6:23:52:f7:
56:48:9e:98:4c:7f:77:25:d0:0d:4f:83:7e:03:36:6b:1b:c9:
e2:c2:d1:01:9d:61:b7:4d:86:b2:0b:82:ff:e5:3f:f9:48:6e:
10:08:13:a3:05:9a:20:eb:35:ae:95:0e:74:8b:72:7a:1b:dd:
96:04:31:e5:07:a3:79:da:93:c3:ce:34:cf:f2:38:79:90:84:
85:c2:42:24:9f:ae:45:d4:2e:6b:a2:10:77:3b:72:e7:a4:c5:
f5:e6:a5:da:3d:bc:3f:e3:b2:c0:55:b6:50:e3:c9:55:60:33:
6f:8e:ba:00:8c:ff:74:9d:bd:e7:f3:c6:91:30:7f:69:b9:47:
0c:3c:57:bd:d4:37:c2:d1:5e:e5:06:5c:80:07:d5:cf:3d:8b:
6c:34:53:5c:eb:ea:f3:f4:b5:6a:86:0e:cd:6e:dd:d5:91:42:
12:d7:45:57:0b:6a:6b:34:ae:f3:52:d8:13:cc:4a:c3:2c:e7:
a4:42:29:8b:5d:3a:d6:9f:7f:0d:b6:2e:67:41:78:30:76:09:
3d:22:27:2d:7e:81:3d:64:34:c9:d7:a8:d6:4c:80:ee:5e:ef:
53:fa:88:f8:47:82:12:dd:06:75:3a:58:f0:a8:01:04:22:6d:
a0:43:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:34 2025 by rpki-client on console.sobornost.net