Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
File: 54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer (raw, json)
Hash identifier: CPx/iCnz7U3gRNQXNhivE+41nX6N1rbf4C1u8rQOHs0=
Subject key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848EC8EE1D6BAC857CB40220AC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Feb 2025 13:45:32 +0000
Certificate not after: Mon 24 May 2027 12:45:32 +0000
Subordinate resources: IP: 64.95.152.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:8e:e1:d6:ba:c8:57:cb:40:22:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Feb 18 13:45:32 2025 GMT
Not After : May 24 12:45:32 2027 GMT
Subject: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:c4:16:fb:3d:a4:00:1d:f0:21:ff:af:1a:
f4:e7:4b:00:0f:02:8e:b8:5a:53:11:c0:39:54:02:
d5:d8:18:09:aa:aa:51:d7:52:12:72:37:9d:e9:91:
ba:e8:29:04:e5:65:ec:6f:42:94:5a:66:87:75:2d:
78:e4:75:20:8d:b5:1e:7a:84:50:6f:d2:74:af:f7:
85:11:59:c9:95:cc:53:b6:fa:8b:2a:71:f6:2d:ca:
64:bf:ea:73:9a:8b:28:de:73:c8:9d:d7:45:cf:17:
c9:d6:56:9c:75:ec:c7:26:ef:4f:95:80:6e:ca:c8:
2e:5c:bb:33:5c:5c:d9:a9:e6:bb:32:e3:1e:31:7d:
37:8f:ed:35:f5:d5:a7:7b:e4:fb:0d:c3:39:85:7b:
c8:25:b1:08:0f:7f:20:c3:bc:d0:98:9b:92:f7:7e:
ee:8c:73:87:70:a4:b7:a8:43:84:af:36:bb:7a:47:
2f:84:ff:d1:55:3c:58:99:16:c3:57:3f:97:4b:0a:
43:9b:15:62:2c:f0:47:14:ca:b9:2e:a6:22:9c:72:
b1:bc:e0:52:76:aa:4f:e7:1e:ad:7e:a9:9f:8d:6a:
e9:22:84:43:db:66:f6:92:d8:66:43:5d:7e:b2:07:
c0:07:1a:09:4b:6d:d5:49:ff:79:cf:49:cb:42:b7:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d8:14:a3:3b:5c:f5:3b:cb:cc:8a:dc:9f:8f:54:5b:7c:9b:
c3:57:c8:f1:c9:4f:23:10:1c:01:df:0e:2e:ef:21:9a:71:81:
ac:73:e3:64:5d:ee:b0:ae:99:3d:d4:86:47:d1:42:30:02:ae:
36:05:2b:73:69:3b:98:7e:fe:60:17:04:28:79:a1:48:b0:ec:
cb:b7:40:e0:1a:33:77:93:05:6d:e7:df:2a:0f:60:c3:b1:d2:
29:ec:c0:09:bf:b7:9d:0d:04:d3:0b:56:0b:7d:e3:cd:8f:bd:
b7:00:d9:96:c7:60:a8:c6:e4:b3:6a:15:d7:d4:6e:08:fb:e2:
2e:ee:84:fa:f6:c3:84:d8:5c:7f:41:e9:50:4a:d1:24:d6:df:
22:24:84:4d:94:c9:ed:61:a2:2a:65:66:9d:ff:e1:4a:e0:2d:
98:8a:85:86:ad:5e:4e:ef:e4:b8:a6:40:bb:df:9a:8d:4e:bb:
05:23:77:f4:2a:71:82:02:9a:07:ce:90:3c:16:33:67:ab:57:
1a:90:82:d7:b3:55:90:4c:4a:e5:f1:0b:64:d5:96:70:01:2d:
15:4e:5f:0c:dc:67:12:ea:7b:c8:e7:80:39:39:dd:9c:4d:1f:
df:d8:5d:5e:36:48:f8:f0:d1:c8:10:bf:a0:44:f2:c6:b0:9c:
f7:fe:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:22 2025 by rpki-client