Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
File: 503450af-ac6f-4861-96c0-24f7e8724111.cer (raw, json)
Hash identifier: EuMaxESnH+ZznLR0I6NW9+H5u0SQIVTvM7NY53U4fXI=
Subject key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584859FDF8D54C3D290A2CEB29C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 28 Dec 2024 01:45:33 +0000
Certificate not after: Fri 02 Apr 2027 00:45:33 +0000
Subordinate resources: AS: 22961
IP: 23.146.120.0/23
IP: 2602:29d::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:59:fd:f8:d5:4c:3d:29:0a:2c:eb:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Dec 28 01:45:33 2024 GMT
Not After : Apr 2 00:45:33 2027 GMT
Subject: CN=503450af-ac6f-4861-96c0-24f7e8724111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:db:90:f7:0c:50:c6:83:05:18:81:5c:61:
16:45:98:0a:6b:c3:45:5c:9b:0a:71:0d:0d:42:c6:
45:09:1b:83:4a:ef:33:19:e1:47:b4:bc:88:1c:f7:
de:02:b9:e5:7f:e2:88:36:f1:e7:54:f1:3e:80:76:
0b:cf:55:9e:5a:aa:ab:16:c5:ae:5b:4a:ba:90:43:
c6:78:c0:63:06:04:14:85:9d:10:90:16:7e:98:98:
32:b9:a2:c5:cd:3d:94:10:fd:f1:44:5a:08:a6:e2:
06:ab:8f:4e:56:d1:52:ed:49:a6:ee:0f:87:74:97:
fe:f7:9f:53:69:d3:13:4d:c4:dc:39:0f:1e:d8:6a:
3a:ae:d1:ee:55:af:f4:5a:23:f9:79:98:40:5d:c4:
48:0e:9a:e5:15:5e:65:7b:56:18:f1:33:2f:dc:6a:
b7:dd:55:06:01:1f:67:86:fa:f7:07:31:89:34:ad:
2a:cb:80:7c:e8:a8:d2:87:6b:ba:d6:5c:ea:fb:b0:
a6:19:ff:fc:67:46:bf:6a:4e:62:e1:b3:08:41:c6:
5c:fc:a2:a7:da:4d:50:02:0a:bc:a5:3b:e1:1a:ac:
3a:b8:8c:b0:94:3d:43:c2:2a:28:21:7b:4b:a5:1a:
15:66:d0:d3:01:1b:4e:e1:8d:f1:76:2b:2c:a9:55:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.120.0/23
IPv6:
2602:29d::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22961
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:1a:cd:44:ae:f7:c5:2c:49:7f:19:37:e1:b0:9b:49:67:44:
9b:51:da:0c:ce:47:6e:da:5e:14:cf:58:a8:84:fb:7b:be:b3:
c5:49:64:e5:99:41:2c:b5:9b:f7:88:bc:37:d8:39:a3:4c:0b:
ac:2a:2a:28:32:29:fb:d2:b5:5e:72:01:69:61:a3:b5:1d:d7:
ef:0c:e0:e6:61:cb:fd:4c:13:0f:29:88:fc:ce:33:8c:d6:9a:
20:3b:dd:73:fd:3b:e5:db:aa:ac:26:d9:42:d6:3e:36:96:02:
3c:08:19:78:4e:92:89:b8:5e:6b:5e:b9:83:e5:70:a0:d0:a5:
4f:6c:df:d2:3b:fd:2b:8b:b4:85:ec:a3:5f:a4:31:54:07:cf:
bb:b5:6e:3f:b5:fb:73:c0:b5:a1:9c:a0:4b:57:40:06:9d:6f:
da:ff:cc:2c:44:aa:b4:5a:05:31:ab:5d:9f:4b:a9:10:7c:5a:
2b:32:2b:32:fd:7a:dc:42:c0:c5:28:06:3f:24:eb:1f:a2:11:
86:a1:1f:55:6c:91:bd:41:01:07:8f:a9:5c:81:b5:a8:6c:b3:
39:8e:d6:60:eb:36:94:d4:0a:e7:8f:5e:2c:df:93:2c:5e:4d:
d3:e2:9f:bd:45:bf:34:cf:68:db:11:f4:3a:4f:83:6f:5e:e2:
38:7f:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:09 2025 by rpki-client