Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
File: 1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer (raw, json)
Hash identifier: uPe8hOpVjesqTsO+8G2JYp+Fsd6zggBs+QvjFci+0yw=
Subject key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858487A2D69829F2BF984A9DE8780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 08 Jan 2025 14:27:00 +0000
Certificate not after: Tue 13 Apr 2027 13:27:00 +0000
Subordinate resources: IP: 24.53.240.0/20
IP: 24.54.64.0/19
IP: 24.156.176.0/20
IP: 45.3.0.0/19
IP: 45.74.96.0/19
IP: 104.193.56.0/21
IP: 108.168.0.0/17
IP: 142.90.0.0/18
IP: 198.2.64.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:2d:69:82:9f:2b:f9:84:a9:de:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 8 14:27:00 2025 GMT
Not After : Apr 13 13:27:00 2027 GMT
Subject: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:c6:ba:f3:97:3d:c6:ec:9b:eb:18:cc:87:
18:35:3d:8b:3f:71:91:f3:66:09:2b:74:56:4a:06:
b0:a5:7f:5d:9e:08:03:70:9a:d6:df:4a:79:e4:58:
55:35:f2:1c:cb:27:93:d3:be:73:4e:df:ac:5b:80:
c8:fb:0d:4f:aa:6a:24:64:29:48:88:32:4c:2b:c4:
2a:a7:21:4d:0b:ee:04:29:5e:16:fa:c2:f4:b9:d8:
88:14:ed:9b:39:d8:98:2a:3d:2f:61:29:11:d3:77:
50:95:4f:11:46:19:89:c4:cb:69:8a:49:16:2a:36:
93:ff:5b:21:ee:ac:7d:23:10:09:7a:58:69:2f:a3:
a2:98:03:19:0f:fb:83:48:a1:e4:1e:ee:7a:42:20:
5d:77:9a:e6:ef:2e:ed:01:70:ad:7f:0c:ed:05:ff:
f7:f9:1a:6b:39:8b:be:12:33:ed:a6:e8:f1:91:5a:
9f:2d:b8:ff:f7:5e:ff:60:13:30:5e:41:ee:00:85:
f2:63:04:a4:8b:8f:01:7e:b0:66:8d:c1:eb:e8:93:
9d:97:65:b3:aa:66:34:64:f5:71:be:08:7a:39:d4:
ec:79:9b:63:d9:7e:f7:ee:39:6a:97:4e:16:cd:1c:
47:7a:36:8e:33:86:cf:47:75:71:ac:3c:a9:bd:1e:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.240.0/20
24.54.64.0/19
24.156.176.0/20
45.3.0.0/19
45.74.96.0/19
104.193.56.0/21
108.168.0.0/17
142.90.0.0/18
198.2.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:0e:17:01:c2:7b:4c:55:8a:46:b9:48:b9:49:41:bf:64:91:
6a:4c:55:da:db:42:5d:8f:e8:6a:38:a9:8a:61:3a:1c:bb:2c:
bf:36:6f:fa:87:2a:9c:a5:8d:6c:65:41:36:eb:ed:f1:ee:1e:
64:6d:4f:ee:9c:86:2c:d6:73:51:a9:3e:9a:a5:f7:96:81:3b:
48:68:40:1d:48:b5:e0:81:9b:78:80:78:d2:31:9d:b0:27:0c:
8b:5a:f8:75:d9:ac:4f:b3:03:7e:82:f0:bd:af:0c:d4:16:37:
fa:67:f6:15:95:f0:24:44:69:8f:e5:e4:06:26:a9:43:10:d0:
cb:f6:1e:d2:e0:62:fe:05:7a:b1:ae:98:e3:0f:8e:c9:e6:c0:
d2:76:1e:b4:e6:e1:c7:27:c6:43:38:1a:88:28:e7:ad:00:c2:
64:35:22:da:b8:65:0d:3f:76:e9:12:0e:3a:63:f6:8c:df:9b:
a3:a3:c9:19:5b:4a:4a:f9:b0:e0:6b:55:87:e6:87:8c:a5:08:
32:bc:94:2a:c3:04:7b:c4:39:bf:4c:24:79:b4:90:94:4c:b5:
73:ad:a0:de:d0:6a:ed:0d:3d:bd:b9:84:57:9f:2d:6d:9b:56:
67:28:ea:fe:bb:19:7e:df:31:77:52:42:13:1a:d3:f7:35:87:
ae:75:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:07:39 2025 by rpki-client