Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
File: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer (raw, json)
Hash identifier: 4axM4ZIGJuSeiDKz85DeBOvshpOLBSNnFKhg5vPndF4=
Subject key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 48D95C750A5F2BDD9312DABB0BB1FCA94D1B5DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
caRepository: rsync://rpki.sn-p.io/repo/sn-p-io/2/
Notify URL: https://rpki.sn-p.io/rrdp/notification.xml
Certificate not before: Wed 24 Sep 2025 16:32:44 +0000
Certificate not after: Wed 23 Sep 2026 16:37:44 +0000
Subordinate resources: IP: 27.0.234.0/23
IP: 89.187.68.0/23
IP: 2a06:1282::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d9:5c:75:0a:5f:2b:dd:93:12:da:bb:0b:b1:fc:a9:4d:1b:5d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 24 16:32:44 2025 GMT
Not After : Sep 23 16:37:44 2026 GMT
Subject: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:31:d7:9a:b1:67:48:bf:9c:09:13:66:c2:
9a:9a:d6:2e:de:d9:5f:2b:af:4d:aa:82:cc:b7:c2:
03:4b:b8:1e:44:2d:10:5e:46:5d:62:15:68:36:26:
7d:7c:22:38:2a:5f:dc:11:2d:dd:6c:ea:cc:08:3b:
98:36:35:c9:20:3c:5c:ff:90:03:f2:19:b4:d5:ef:
b6:cb:9c:89:7d:c3:2a:b3:b9:10:ba:d2:2c:be:20:
b8:f3:aa:d9:e6:f9:61:ee:b3:4e:12:de:42:ad:47:
d0:9f:09:f3:14:55:b7:72:02:4e:0d:fa:fd:a4:30:
0c:f4:7f:32:2a:74:d4:c6:ad:59:57:76:9c:31:fe:
44:b3:04:50:d3:f1:11:8b:ea:8d:ff:69:d3:6f:ce:
51:f0:6a:95:8d:8d:49:59:12:a3:68:7a:51:17:e2:
2b:ad:9b:82:e6:63:b7:41:08:d9:5b:51:6f:b5:33:
e9:a2:25:ff:02:04:38:63:53:1d:60:1b:93:13:26:
f6:46:d7:51:33:d3:c8:3f:8f:ef:3e:16:75:0b:1c:
bc:d3:14:2b:c9:db:33:d6:47:ee:5f:9e:a0:e9:a2:
11:98:d0:3f:45:06:fe:1e:82:6b:f4:81:c2:bc:aa:
09:e7:69:e7:cb:28:02:75:92:f4:f2:05:e6:e8:84:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/
RPKI Manifest - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
RPKI Notify - URI:https://rpki.sn-p.io/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.234.0/23
89.187.68.0/23
IPv6:
2a06:1282::/32
Signature Algorithm: sha256WithRSAEncryption
8e:e9:3f:43:9f:35:41:d5:7c:ad:86:b5:74:f8:a4:13:cb:0e:
3e:eb:95:af:9b:30:f6:81:2d:5b:bc:5e:c0:5b:9b:3c:74:cf:
21:52:f6:85:53:8a:3c:09:7f:98:ef:36:92:0f:52:bb:1e:a3:
78:e9:e5:c0:ec:85:be:c6:f1:33:aa:fe:b8:81:75:b5:00:16:
3a:02:10:8c:d2:3f:a9:db:ae:df:96:af:9c:5f:68:48:eb:50:
1d:8a:a7:74:70:91:92:5d:15:13:28:9a:4b:07:91:18:7c:73:
44:0c:04:05:bc:e5:dc:6d:00:e7:98:4a:ba:c0:f1:5b:b2:f1:
e1:c8:ce:22:51:c0:b4:76:4f:29:d3:59:eb:4f:87:2b:0a:97:
f0:fe:6b:71:69:5e:49:8f:04:fc:9c:98:01:03:9d:88:1b:48:
fc:cf:22:65:4e:57:c4:ce:72:5f:3d:96:35:bf:a9:76:93:88:
e0:52:69:69:b4:0d:4d:32:d4:d8:3a:de:03:5b:51:20:e9:4d:
1d:69:98:56:f5:eb:26:97:da:6b:70:4b:2d:ae:ad:81:ca:3d:
72:2a:10:7e:78:0b:3d:c0:b8:d4:65:f3:fb:89:5b:c3:45:74:
82:f0:ff:41:00:07:2b:30:1b:ea:63:35:36:f4:c0:4f:8e:a7:
b8:7a:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:50 2025 by rpki-client