Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
File: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer (raw, json)
Hash identifier: WGSSQ37/H4zGyJdtrQmN9FJMoxxkhHvY3ukDSpiHBxs=
Subject key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 64AB5CDC589B2726D6EA69D740CD0B00D20247A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
caRepository: rsync://rpki.sn-p.io/repo/sn-p-io/2/
Notify URL: https://rpki.sn-p.io/rrdp/notification.xml
Certificate not before: Thu 03 Jul 2025 15:47:50 +0000
Certificate not after: Thu 02 Jul 2026 15:52:50 +0000
Subordinate resources: IP: 27.0.235.0/24
IP: 89.187.68.0/23
IP: 2a06:1282::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ab:5c:dc:58:9b:27:26:d6:ea:69:d7:40:cd:0b:00:d2:02:47:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:50 2025 GMT
Not After : Jul 2 15:52:50 2026 GMT
Subject: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:31:d7:9a:b1:67:48:bf:9c:09:13:66:c2:
9a:9a:d6:2e:de:d9:5f:2b:af:4d:aa:82:cc:b7:c2:
03:4b:b8:1e:44:2d:10:5e:46:5d:62:15:68:36:26:
7d:7c:22:38:2a:5f:dc:11:2d:dd:6c:ea:cc:08:3b:
98:36:35:c9:20:3c:5c:ff:90:03:f2:19:b4:d5:ef:
b6:cb:9c:89:7d:c3:2a:b3:b9:10:ba:d2:2c:be:20:
b8:f3:aa:d9:e6:f9:61:ee:b3:4e:12:de:42:ad:47:
d0:9f:09:f3:14:55:b7:72:02:4e:0d:fa:fd:a4:30:
0c:f4:7f:32:2a:74:d4:c6:ad:59:57:76:9c:31:fe:
44:b3:04:50:d3:f1:11:8b:ea:8d:ff:69:d3:6f:ce:
51:f0:6a:95:8d:8d:49:59:12:a3:68:7a:51:17:e2:
2b:ad:9b:82:e6:63:b7:41:08:d9:5b:51:6f:b5:33:
e9:a2:25:ff:02:04:38:63:53:1d:60:1b:93:13:26:
f6:46:d7:51:33:d3:c8:3f:8f:ef:3e:16:75:0b:1c:
bc:d3:14:2b:c9:db:33:d6:47:ee:5f:9e:a0:e9:a2:
11:98:d0:3f:45:06:fe:1e:82:6b:f4:81:c2:bc:aa:
09:e7:69:e7:cb:28:02:75:92:f4:f2:05:e6:e8:84:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/
RPKI Manifest - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
RPKI Notify - URI:https://rpki.sn-p.io/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.235.0/24
89.187.68.0/23
IPv6:
2a06:1282::/32
Signature Algorithm: sha256WithRSAEncryption
98:de:86:9c:6f:2a:10:82:31:2a:6d:45:cf:0a:c8:43:25:bc:
11:82:e4:a0:98:4e:a7:00:83:96:68:79:c7:93:44:51:99:b6:
f8:a5:dc:9b:78:f3:4b:6d:19:cd:ec:a1:c6:e6:7f:42:6e:0b:
1a:3a:69:2b:b2:96:a9:2f:e0:71:60:f9:aa:d2:bf:0b:ef:15:
07:dc:97:26:60:af:b0:08:38:bf:cf:49:39:ee:a1:e6:d4:e2:
80:e7:8a:f2:7e:28:ef:9e:0c:ee:c1:75:59:80:68:e4:54:d2:
a2:6c:92:ec:ea:56:94:d3:3e:b7:bc:24:95:b1:81:c4:5e:2c:
cb:12:e3:0f:fe:4e:66:61:60:b0:7e:33:20:13:b2:e0:3a:ff:
a8:c4:4f:f5:14:e6:53:13:b3:ac:a6:01:d1:2e:f7:1e:07:16:
cc:cc:14:f5:07:e0:f8:58:07:b0:e5:84:18:9f:0d:d0:08:ed:
28:c4:2a:f7:26:cf:ce:a3:81:af:0d:c9:c4:f1:7d:fd:7c:40:
b2:8d:75:30:70:a7:e1:93:ec:b2:7a:ee:83:eb:1b:6d:b0:00:
dc:1b:06:4c:77:3c:39:50:cc:c9:2e:89:b0:e2:c7:bc:b6:7c:
3f:8d:16:19:60:f3:5c:69:e5:a3:bc:35:e3:eb:7d:89:f9:ff:
08:59:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:27:38 2025 by rpki-client