Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908.cer
File: 719e4812-21fe-4f17-9bde-b69687fea908.cer (raw, json)
Hash identifier: CkHPkC0nRc2Q1XzEh0PJPiYKJeFvIUh3a6LYtRyYhMY=
Subject key identifier: 9B:B4:A4:66:DD:27:3A:77:74:6D:B7:99:AB:1A:90:C9:35:55:5B:0F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858488BDB65AF134A483FE37FB680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/719e4812-21fe-4f17-9bde-b69687fea908.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 14 Jan 2025 22:26:18 +0000
Certificate not after: Mon 19 Apr 2027 21:26:18 +0000
Subordinate resources: IP: 204.76.64.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:db:65:af:13:4a:48:3f:e3:7f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 14 22:26:18 2025 GMT
Not After : Apr 19 21:26:18 2027 GMT
Subject: CN=719e4812-21fe-4f17-9bde-b69687fea908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:dd:36:4a:aa:a9:8e:2b:0a:90:16:71:54:
5a:7b:80:79:97:28:08:70:5b:e0:40:fc:b7:a3:53:
e3:5e:10:dc:f2:74:0d:26:d3:1e:5e:f2:6b:18:29:
30:62:47:27:d7:3e:29:b9:01:e2:80:62:21:1d:e8:
ee:55:2e:6d:93:b1:3e:63:22:ec:0a:bd:a1:af:19:
0e:c5:07:59:a2:e1:4b:11:21:c8:f1:11:61:ca:3d:
53:be:3c:3f:8e:33:70:72:b5:77:7d:a3:1c:c4:a8:
75:fa:15:71:eb:db:89:a4:a9:7e:b6:c9:1c:0c:b1:
16:b8:74:37:de:04:ee:df:0e:c1:4e:90:e9:66:fb:
50:f0:59:92:89:ff:d6:c7:17:9d:aa:18:69:94:dc:
b7:27:cd:ee:f0:0e:30:fd:f7:b5:1f:a1:b0:3e:fe:
e6:1b:f8:ce:f0:0d:fd:8c:54:bc:07:90:f6:c9:33:
32:30:cc:94:30:5f:d7:31:1d:34:2c:82:6c:b8:c5:
3c:2d:af:2e:64:fd:c9:c7:83:61:ca:4f:87:04:88:
37:09:55:09:f9:dd:c2:fd:fa:01:a9:96:0a:4a:c8:
16:1c:ad:54:86:9d:e5:61:72:9a:a6:d5:78:ce:3d:
66:4c:60:53:af:8f:05:f7:55:8b:97:a8:17:4e:bf:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:A4:66:DD:27:3A:77:74:6D:B7:99:AB:1A:90:C9:35:55:5B:0F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/719e4812-21fe-4f17-9bde-b69687fea908.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
204.76.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:90:90:df:ca:d7:28:36:a2:3f:4e:87:3f:fe:aa:54:73:d2:
80:a2:8a:b3:3a:80:40:25:45:c6:26:fb:4b:3d:01:fe:dd:4e:
6d:45:61:72:52:b3:57:7e:63:fc:b4:2e:9e:5d:28:d0:f0:23:
2d:b1:93:36:84:ce:72:18:76:01:73:d3:f5:52:13:49:d1:67:
dc:a6:6b:30:23:de:dc:76:6f:96:70:c3:42:8d:73:29:24:66:
97:29:ab:c9:12:a0:97:2e:b2:1b:65:3a:ac:80:5c:5e:70:d7:
18:93:f9:00:78:aa:fa:da:92:54:b2:2d:24:d7:e0:f6:f0:55:
a2:33:73:1c:6f:ae:58:7f:c8:e0:db:07:ae:31:37:e5:64:9f:
5d:4a:58:b1:87:e8:6a:b5:24:4c:a7:fc:60:9f:22:5d:e2:d5:
84:83:fb:35:c8:4d:95:c6:4c:dd:3a:c6:e5:14:18:d3:c5:0b:
03:50:bf:7c:16:85:e8:bd:f4:c4:92:b0:4d:c0:f2:e3:81:b0:
c0:92:26:eb:a0:c5:ee:95:28:f5:17:65:80:8a:91:77:3c:79:
87:57:02:87:16:70:3b:1b:8f:43:4c:9e:b0:e0:34:10:24:26:
6c:bf:56:fe:93:79:29:d8:c6:24:3e:e0:87:42:6a:cc:d4:a6:
14:91:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:22 2025 by rpki-client