Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
File: 7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer (raw, json)
Hash identifier: YIYbPKcdqOU23zdGxq+4ZsM6/AQmd0kBuOjN9s5lpWs=
Subject key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584A1E230ADAD9DF8A239DE4B80C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 08 Jun 2025 00:45:37 +0000
Certificate not after: Sat 11 Sep 2027 00:45:37 +0000
Subordinate resources: AS: 27317
IP: 23.174.40.0/24
IP: 2607:9f40::/32
Validation: Failed, certificate revoked on Thu 14 Aug 2025 16:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:1e:23:0a:da:d9:df:8a:23:9d:e4:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Jun 8 00:45:37 2025 GMT
Not After : Sep 11 00:45:37 2027 GMT
Subject: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cf:94:e0:56:54:67:48:bc:bf:68:42:0c:c3:
61:bc:3d:d9:f6:2c:84:06:5e:ea:fd:6c:ab:9e:90:
7a:7a:05:99:ee:88:9b:5a:14:72:46:63:c0:20:e8:
a3:de:6e:4d:8a:8c:e6:1c:37:00:ea:2a:b3:e0:a3:
39:25:75:27:46:1c:10:71:90:c3:3a:fc:48:28:56:
a5:b6:5d:a9:a7:e5:13:3a:b3:a5:48:44:b5:aa:b5:
fa:6c:cd:89:18:21:9c:97:04:e2:31:93:2e:e8:fd:
93:3a:58:c0:fd:27:a8:54:b4:d0:b6:65:c8:37:d4:
01:4d:de:d5:05:19:66:9b:96:13:69:3b:b0:30:06:
55:66:ad:1c:63:ec:db:a5:ee:5f:9b:56:f9:ee:7e:
48:18:70:f1:d8:6b:eb:bb:c3:a6:2e:b0:43:55:08:
12:0d:8f:af:ca:36:97:4f:9e:bf:1a:c5:60:bc:ee:
62:84:81:3e:bf:f0:28:0a:9a:c6:79:78:6f:4e:b0:
66:73:9a:d2:d1:ac:36:50:42:0a:aa:9e:69:9d:01:
e7:8e:5a:6b:8a:96:a4:c2:54:c7:15:29:f8:41:87:
e4:b0:f6:28:af:76:b5:d8:82:7f:49:56:35:25:9b:
ec:af:e4:14:f9:74:83:92:39:a7:d7:cd:96:07:61:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.40.0/24
IPv6:
2607:9f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27317
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4c:49:a6:44:c0:f9:30:28:ed:f9:2f:fb:03:67:f1:c4:f2:
bc:47:ed:79:79:d2:9b:11:e3:ff:7b:19:12:cd:e7:4e:f4:a7:
58:33:e3:2f:91:66:91:aa:20:bd:55:8a:45:50:e5:25:d5:ea:
0e:39:be:78:4f:f8:4c:aa:77:e4:0f:0d:e2:e3:18:dc:7e:e4:
51:58:15:a5:62:9d:f5:1f:28:a9:e8:63:0e:75:47:d3:67:50:
4b:ef:e5:b9:a5:12:51:ed:96:cc:24:2a:ee:dd:4c:a3:0d:00:
d2:c5:4a:90:d8:7f:7b:6d:d6:10:ae:e9:02:53:97:7b:a1:88:
b9:43:f5:7d:a0:a5:41:f3:5c:b4:bc:44:37:50:3d:83:8f:48:
6c:bb:53:29:dd:8a:5e:c1:25:5c:a9:12:a9:d6:5b:80:99:4c:
f0:27:cc:18:8f:95:01:2e:ec:f9:30:8c:6c:5f:df:4b:67:c4:
0f:b5:46:9a:b2:0c:90:86:3e:c7:f7:66:74:97:9e:d7:02:8b:
20:74:8c:09:07:77:69:72:48:8a:bd:19:a2:0c:f0:b0:50:ef:
90:cc:c6:b8:a3:3e:14:72:33:c8:3e:0d:48:10:8f:42:31:c1:
0a:d9:91:35:10:ac:8c:cc:b9:2c:85:2e:b1:20:19:06:8c:cc:
b4:ae:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:29:12 2025 by rpki-client