Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer
File: 69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer (raw, json)
Hash identifier: RwIt5iSJyXpQWmUohnBNEGjTUCATtQ2a53cHwyedSZQ=
Subject key identifier: 48:BF:36:FF:4E:11:29:7B:66:1B:71:7E:BA:DE:00:D8:15:78:27:C1
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858493C019C2E966F3F98CD0BAF80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 19 Mar 2025 00:45:33 +0000
Certificate not after: Tue 22 Jun 2027 00:45:33 +0000
Subordinate resources: IP: 216.176.40.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:01:9c:2e:96:6f:3f:98:cd:0b:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Mar 19 00:45:33 2025 GMT
Not After : Jun 22 00:45:33 2027 GMT
Subject: CN=69074f8b-bb58-4f2e-b2c3-2f7de91f9243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:f3:ee:bd:b4:a6:de:a8:ce:8e:a1:2b:26:
72:b9:c8:08:47:22:f6:6e:61:ce:47:c5:fa:46:23:
c7:67:95:f5:7a:5a:f1:81:8a:a8:5c:6d:17:47:59:
e7:b4:93:36:2d:fd:79:9a:b3:22:76:bd:c8:07:e0:
06:d5:5f:ca:ad:82:01:ed:13:0b:0e:34:fa:aa:84:
b6:56:80:31:9b:6d:c4:a6:89:87:1e:c0:bd:e6:fd:
c9:5d:ee:26:2b:58:66:0a:0b:7e:a3:d1:06:d8:7c:
92:14:ad:89:b5:af:5a:a9:d8:87:a6:d7:56:d2:2f:
f5:10:3f:58:b1:08:3a:43:67:8a:1e:7c:90:70:35:
32:e0:ee:0b:10:ca:27:da:98:b5:41:8b:d0:f0:9d:
22:1b:8d:62:09:59:90:78:a9:db:f5:10:a4:41:ca:
db:53:49:ac:78:2e:2f:7a:da:e3:c6:51:79:9a:4c:
0a:22:c4:fb:52:f7:0c:6a:6a:ed:e3:b3:f2:5f:3d:
ec:68:6d:a7:e3:6e:85:52:03:d4:b0:5a:52:7c:0f:
0c:88:f2:31:4a:82:3c:31:bd:66:d7:8a:b9:a5:ad:
4b:e5:d5:69:df:7a:57:33:94:5f:78:f6:75:b9:15:
12:38:33:a4:c9:43:47:d1:07:33:2a:f5:06:e1:48:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BF:36:FF:4E:11:29:7B:66:1B:71:7E:BA:DE:00:D8:15:78:27:C1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
216.176.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:0a:f9:82:6f:be:37:9d:9e:c0:6f:46:7f:2d:e6:bc:4f:9f:
88:40:67:8f:54:b1:63:f3:50:c5:11:30:b5:8e:98:ae:ed:a8:
33:65:36:f9:fd:0e:d7:63:47:84:c2:c5:26:5e:50:5f:81:39:
08:4a:3c:39:b1:9c:fb:7c:4e:78:a6:80:fb:64:04:5c:5d:e6:
7d:0d:fc:bf:99:e2:4b:b6:8c:b6:e2:b5:58:f3:61:4a:82:4c:
b0:18:3b:4f:95:1d:08:80:24:bb:ae:55:ef:32:bd:05:3d:b0:
03:8d:93:d7:23:e3:b8:25:32:41:65:75:49:f1:0f:35:2a:84:
ca:2b:79:af:91:99:28:49:26:78:97:65:24:2f:32:2f:08:32:
b1:20:9d:9a:80:25:6f:23:00:40:ca:b2:64:85:c2:75:87:b3:
1b:d2:76:ff:40:9e:cc:b3:cf:45:6b:0b:6f:30:07:dd:e3:dc:
78:6f:d1:b8:21:8f:94:38:15:ce:cb:30:cc:df:5e:8c:54:de:
bc:61:d6:f6:e3:d4:df:89:1f:f2:c0:72:6f:a3:e4:db:ed:4f:
5e:6a:8a:a9:8b:10:8a:06:3e:58:ff:e2:2e:cd:e4:64:b2:5d:
ec:44:7a:b6:9a:49:f9:fa:6c:18:91:61:c0:8a:94:15:91:c5:
24:91:02:c6
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEk8AZwulm8/mM0Lr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDMxOTAwNDUzM1oXDTI3MDYyMjAwNDUzM1owLzEtMCsGA1UEAxMk
NjkwNzRmOGItYmI1OC00ZjJlLWIyYzMtMmY3ZGU5MWY5MjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsnz7r20pt6ozo6hKyZyucgIRyL2bmHOR8X6
RiPHZ5X1elrxgYqoXG0XR1nntJM2Lf15mrMidr3IB+AG1V/KrYIB7RMLDjT6qoS2
VoAxm23EpomHHsC95v3JXe4mK1hmCgt+o9EG2HySFK2Jta9aqdiHptdW0i/1ED9Y
sQg6Q2eKHnyQcDUy4O4LEMon2pi1QYvQ8J0iG41iCVmQeKnb9RCkQcrbU0mseC4v
etrjxlF5mkwKIsT7UvcMamrt47PyXz3saG2n426FUgPUsFpSfA8MiPIxSoI8Mb1m
14q5pa1L5dVp33pXM5RfePZ1uRUSODOkyUNH0QczKvUG4UilcwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFEi/Nv9OESl7ZhtxfrreANgVeCfBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82
OTA3NGY4Yi1iYjU4LTRmMmUtYjJjMy0yZjdkZTkxZjkyNDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY5MDc0ZjhiLWJiNTgtNGYyZS1i
MmMzLTJmN2RlOTFmOTI0My82OTA3NGY4Yi1iYjU4LTRmMmUtYjJjMy0yZjdkZTkx
ZjkyNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALYsCgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWAr5gm++N52ewG9Gfy3m
vE+fiEBnj1SxY/NQxREwtY6Yru2oM2U2+f0O12NHhMLFJl5QX4E5CEo8ObGc+3xO
eKaA+2QEXF3mfQ38v5niS7aMtuK1WPNhSoJMsBg7T5UdCIAku65V7zK9BT2wA42T
1yPjuCUyQWV1SfEPNSqEyit5r5GZKEkmeJdlJC8yLwgysSCdmoAlbyMAQMqyZIXC
dYezG9J2/0CezLPPRWsLbzAH3ePceG/RuCGPlDgVzsswzN9ejFTevGHW9uPU34kf
8sByb6Pk2+1PXmqKqYsQigY+WP/iLs3kZLJd7ER6tppJ+fpsGJFhwIqUFZHFJJEC
xg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 14:11:48 2025 by rpki-client