Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer (raw, json)
Hash identifier: x4KtvolwHjIUHXL9idx3kbkmHiQiU1NcUWnW1LhL6Mc=
Subject key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848E5942BFF1E188FAD830A2480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 16 Feb 2025 01:45:32 +0000
Certificate not after: Sat 22 May 2027 00:45:32 +0000
Subordinate resources: IP: 74.117.52.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:94:2b:ff:1e:18:8f:ad:83:0a:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Feb 16 01:45:32 2025 GMT
Not After : May 22 00:45:32 2027 GMT
Subject: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:aa:b1:0f:dd:bf:d0:26:4b:ea:3f:08:16:
c3:6e:25:01:b6:73:1f:43:45:ca:27:7f:cb:31:31:
45:fe:1a:f0:fe:a5:d1:b3:47:56:30:99:29:f9:99:
ca:e8:fd:5e:a2:71:2d:da:82:93:e0:0f:de:19:5d:
c6:57:7b:38:ec:43:bc:c2:0d:7b:73:f8:31:7b:fc:
d2:ed:be:aa:90:06:28:ea:db:1f:29:ef:97:fc:fc:
79:23:f2:6a:83:76:4e:d5:08:56:55:a3:c0:0f:b2:
91:bf:0a:4a:ac:17:2f:4b:34:11:0b:b5:54:5d:04:
5c:38:02:98:29:92:c3:fc:e6:66:97:e6:b3:11:38:
7f:16:ae:fa:10:ce:81:02:5b:3c:e9:68:be:97:d4:
06:0b:bb:8b:1a:e6:7c:5e:d7:80:0a:a1:25:12:ec:
5b:8b:a4:60:23:17:1b:cb:ca:9e:2c:57:40:61:d7:
d4:5f:65:bf:cc:71:9e:88:c8:55:82:98:11:2c:46:
3c:cb:1c:7c:89:da:e7:b6:da:3c:d2:d4:8e:52:9a:
1b:3d:dd:99:28:9c:81:23:df:8c:e0:53:4b:6e:d6:
11:d8:fc:1c:00:7c:de:df:60:02:02:40:e4:15:d9:
59:53:72:95:c5:0e:ba:5f:58:fd:71:d2:71:fb:ea:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
74.117.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:1c:c4:a2:c4:46:a7:c3:c2:90:1f:e4:46:70:bd:19:be:fd:
87:7d:98:79:4f:0c:15:38:ea:ce:e5:7f:f0:c3:1f:b7:f6:07:
a7:2f:68:00:48:3d:4d:58:2e:9f:4b:ec:0d:13:b6:15:a1:32:
64:26:35:a2:3b:dc:d4:ed:ff:73:27:91:b3:d6:3a:ec:8d:c0:
40:6a:66:74:62:44:56:2b:f2:77:ad:e8:db:c5:42:2c:be:b7:
9e:06:02:47:51:6a:b3:a0:78:c0:83:b1:77:f1:8a:1f:7d:60:
ca:29:37:4e:cd:20:56:5b:bb:d6:88:ef:da:2c:55:3c:63:3c:
1d:d8:0a:f1:b2:39:5e:74:4e:98:ed:e1:58:5b:90:e0:15:f2:
29:0d:27:11:60:c3:0c:da:b3:07:d5:ad:62:20:f2:c9:87:7e:
bf:0b:cc:40:cb:d1:07:19:9f:85:7e:9b:a1:e5:1a:29:f0:9f:
ab:5a:5c:99:d7:79:9e:14:4c:6f:02:95:3c:52:dd:af:dc:e3:
de:56:86:4f:33:0a:f7:c1:9b:82:83:a7:02:fd:02:8e:09:2c:
29:fe:fc:9f:75:3c:3f:85:c8:11:c3:8a:66:58:4b:40:1b:c2:
12:5a:a9:72:d4:bb:27:31:b4:48:66:1c:9a:b1:47:b5:b4:b9:
a6:09:b3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:14:18 2025 by rpki-client