Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
File: d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer (raw, json)
Hash identifier: G9C6l1qJe3F5OmDRVi8Lv7JEeCvuqDARcHHUyFJehAo=
Subject key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer: /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial: 010D0C9F4328584943C629F814FC5756A53607C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 21 Mar 2025 19:32:16 +0000
Certificate not after: Thu 24 Jun 2027 19:32:16 +0000
Subordinate resources: AS: inherit
IP: inherit
IP: inherit
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:c6:29:f8:14:fc:57:56:a5:36:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Validity
Not Before: Mar 21 19:32:16 2025 GMT
Not After : Jun 24 19:32:16 2027 GMT
Subject: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:77:76:28:09:48:fe:77:5d:25:8d:5e:79:
55:dd:28:bb:7b:5b:9f:2c:f0:15:d4:88:b1:2e:9d:
c9:05:40:09:05:7a:6b:29:6b:fe:03:99:2b:7b:9f:
73:54:2b:6d:8b:cd:c1:79:ab:11:02:4b:1d:d3:c1:
f5:98:58:1c:9e:65:d6:df:8b:c4:da:15:07:d0:d9:
5b:c7:00:80:10:00:18:2a:f6:92:7c:98:5c:04:0c:
5b:06:d8:29:6b:a5:14:5e:00:36:22:1d:74:ec:8d:
32:f0:80:71:68:d0:c8:19:30:59:8e:64:72:f6:ce:
fa:ea:77:7e:fb:48:c2:ad:aa:fe:57:d3:b5:0f:72:
a8:7e:24:ed:15:f8:4a:08:42:1b:c2:4b:e4:fc:07:
3d:da:32:28:09:de:da:6d:db:b2:93:dc:32:b5:a0:
07:5a:17:8f:ee:45:53:45:71:be:30:31:0e:5a:43:
d8:f0:0e:ab:5b:e9:09:52:56:2f:a1:91:24:92:f3:
59:a9:07:6d:e3:68:1f:56:66:5c:84:84:a1:43:95:
ea:4b:14:00:c9:83:54:0d:1e:32:d7:c6:36:37:83:
dd:e9:f1:2f:42:fb:ed:a8:b0:9f:69:be:ce:a5:ae:
f0:4a:44:4b:c2:34:4c:7a:1d:ed:34:77:d4:7c:9f:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
X509v3 Authority Key Identifier:
keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:03:1e:1f:ff:c7:d2:f2:01:25:72:21:1f:4a:0d:67:da:0f:
46:58:3a:2d:11:85:0c:4a:23:8a:8a:2f:38:43:3e:2f:f9:08:
e9:8e:2d:e2:b8:1f:4d:57:74:02:65:ab:c0:0c:98:18:c4:94:
38:79:91:f8:47:c4:e5:f6:aa:98:49:40:55:bd:b1:de:c2:60:
fc:55:31:3d:fc:02:aa:42:a7:49:c7:e9:ac:d8:69:15:e4:50:
fb:f4:cd:cb:ad:b9:54:be:ce:f4:54:cf:e7:24:08:77:1b:11:
ca:c1:e1:93:e3:08:49:72:15:ae:c5:23:01:6e:c5:f9:44:86:
d1:79:21:a7:a7:1e:fb:3c:65:27:66:aa:2f:dd:dc:13:81:b0:
09:e3:94:61:95:b4:b7:d6:72:e3:2a:6f:90:e0:71:3f:05:59:
21:99:18:42:f9:a4:3f:80:8e:9e:7e:d9:4e:7f:ac:6e:89:e8:
21:45:d4:58:cb:9b:e9:b2:ff:84:88:67:d3:19:51:42:58:ab:
2f:9e:89:02:f9:71:99:b8:0b:51:62:03:a9:01:aa:83:2b:2d:
4b:12:a0:ef:4c:f9:f7:a2:68:10:a3:66:0b:72:f2:52:a8:a1:
cd:59:fa:83:f2:60:83:6b:e3:ba:67:2f:73:8b:df:a0:b2:36:
9e:d5:2a:51
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWElDxin4FPxXVqU2B8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzMB4XDTI1MDMyMTE5MzIxNloXDTI3MDYyNDE5MzIxNlowLzEtMCsGA1UEAxMk
ZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1V3digJSP53XSWNXnlV3Si7e1ufLPAV1Iix
Lp3JBUAJBXprKWv+A5kre59zVCtti83BeasRAksd08H1mFgcnmXW34vE2hUH0Nlb
xwCAEAAYKvaSfJhcBAxbBtgpa6UUXgA2Ih107I0y8IBxaNDIGTBZjmRy9s766nd+
+0jCrar+V9O1D3KofiTtFfhKCEIbwkvk/Ac92jIoCd7abduyk9wytaAHWheP7kVT
RXG+MDEOWkPY8A6rW+kJUlYvoZEkkvNZqQdt42gfVmZchIShQ5XqSxQAyYNUDR4y
18Y2N4Pd6fEvQvvtqLCfab7Opa7wSkRLwjRMeh3tNHfUfJ/W6QIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFPb66hwwaFG69ACfxrZ17a6P8kHAMIIBfQYIKwYBBQUHAQsE
ggFvMIIBazCBhAYIKwYBBQUHMAWGeHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzCB
rQYIKwYBBQUHMAqGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMubWZ0MDIGCCsGAQUFBzANhiZodHRw
czovL3JyZHAuYXJpbi5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2kuYXJpbi5uZXQv
cmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMt
MjE3MWRhMjE1N2QzLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My5jcmwwHwYDVR0jBBgwFoAUYkd+H9nlJdDXortj2RThTuRUo2QwDgYDVR0PAQH/
BAQDAgEGMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEt
NDAzZS1iMDhjLTIxNzFkYTIxNTdkMy5jZXIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJED
Hh//x9LyASVyIR9KDWfaD0ZYOi0RhQxKI4qKLzhDPi/5COmOLeK4H01XdAJlq8AM
mBjElDh5kfhHxOX2qphJQFW9sd7CYPxVMT38AqpCp0nH6azYaRXkUPv0zcutuVS+
zvRUz+ckCHcbEcrB4ZPjCElyFa7FIwFuxflEhtF5IaenHvs8ZSdmqi/d3BOBsAnj
lGGVtLfWcuMqb5DgcT8FWSGZGEL5pD+Ajp5+2U5/rG6J6CFF1FjLm+my/4SIZ9MZ
UUJYqy+eiQL5cZm4C1FiA6kBqoMrLUsSoO9M+feiaBCjZgty8lKooc1Z+oPyYINr
47pnL3OL36CyNp7VKlE=
-----END CERTIFICATE-----
Generated at Thu Apr 3 03:05:59 2025 by rpki-client