Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer
File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.cer (raw, json)
Hash identifier: OUm1gdGsa+fl1ZXutXVrHcmw0gKpNv2U4nsnCcemZIs=
Subject key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3C3E1081EDDAF46CF7E361B94BC4602189D25FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft
caRepository: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/
Notify URL: https://krill.clnexus.dev/rrdp/notification.xml
Certificate not before: Fri 17 Jul 2026 13:09:48 +0000
Certificate not after: Fri 16 Jul 2027 13:14:48 +0000
Subordinate resources: IP: 167.104.218.0/24
IP: 2a06:a000::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3e:10:81:ed:da:f4:6c:f7:e3:61:b9:4b:c4:60:21:89:d2:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 17 13:09:48 2026 GMT
Not After : Jul 16 13:14:48 2027 GMT
Subject: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:45:7d:9c:f5:d3:e9:5b:bb:92:12:f1:e6:
25:62:87:a8:eb:db:1a:0a:48:da:cb:c2:eb:77:4a:
54:f3:01:b2:d2:2a:39:bf:d4:91:bf:f3:6f:99:cd:
2a:3a:52:22:5e:9d:e4:7a:4e:44:4b:76:21:bf:d7:
9f:32:18:fb:b9:d2:55:2e:3a:53:d0:c8:1c:1f:e1:
e1:a6:93:1b:52:12:4b:69:8b:13:b1:b3:dd:d3:14:
a5:20:6a:bb:3d:b9:17:f2:99:b4:eb:f1:64:39:f8:
09:2b:96:f1:7e:a8:12:f8:df:42:e2:8a:f0:70:38:
58:86:7a:a4:b3:36:a2:b2:31:d3:07:f3:fc:f4:c9:
f5:d2:3a:af:fb:bf:b2:75:fd:d6:a9:03:3d:30:c2:
e9:b6:4c:db:e8:f4:96:92:43:3d:7e:b7:28:13:91:
9f:37:81:6d:ce:16:32:d0:99:3e:56:96:7b:d2:a6:
a5:a7:a2:d6:55:9e:9d:67:0c:54:7a:67:51:bb:7e:
27:f6:dc:16:2a:d9:3b:1f:50:1b:ca:37:72:cb:7a:
c1:12:da:15:88:5f:fe:52:5a:bb:4f:b8:7c:23:77:
1e:b7:53:1f:ab:dd:b1:10:12:42:ef:0a:dc:9a:f2:
38:52:dd:6c:cf:2d:a0:0f:1f:1c:23:53:e1:6e:28:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/
RPKI Manifest - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft
RPKI Notify - URI:https://krill.clnexus.dev/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.218.0/24
IPv6:
2a06:a000::/32
Signature Algorithm: sha256WithRSAEncryption
92:b0:73:92:7c:00:a0:a7:4d:2f:ec:f1:10:97:e0:92:c2:c4:
29:ef:a8:a4:e8:7e:ba:ac:9c:59:93:c3:16:aa:f7:93:f6:41:
35:3e:76:d4:e2:86:83:52:11:1b:12:5a:cf:18:19:40:cd:bd:
1b:6f:a3:b2:45:d3:eb:06:dc:dd:9b:a4:cf:d3:d3:30:a6:91:
f9:3d:95:d1:e4:e6:e8:14:d0:ad:6b:8a:06:20:35:1c:8e:97:
5d:a4:5c:1e:e0:d2:0a:fb:83:ee:6a:8c:f7:e5:ff:69:46:24:
60:99:9f:e3:0e:51:80:42:a4:f3:61:88:88:71:80:e8:f1:c2:
16:2e:ac:63:47:c0:1c:2d:69:31:91:35:56:a7:ef:a7:31:03:
db:e2:1c:28:32:28:8b:42:33:97:af:8d:28:2a:38:a3:30:ee:
d0:13:55:c8:bd:61:c1:7a:d4:64:91:52:0d:3d:96:8f:86:c2:
34:f6:27:ff:b5:66:cd:57:25:57:a1:e4:58:3b:d6:07:6b:f2:
61:2d:5e:5e:6f:5d:99:f7:22:11:98:a2:11:bb:20:f0:fb:a7:
a1:4d:e8:b6:ac:65:09:f0:b9:96:c4:e9:71:f9:0f:ed:f3:03:
8d:63:7b:d9:a9:a1:82:18:1c:a7:86:97:04:36:44:1a:5d:53:
58:b4:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:56 2026 by rpki-client