
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer
File: 89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer (raw, json)
Hash identifier: RyIZrIEDCaCR1NgmacFGPKw85tyKNZN2Nq6SAwH9kMM=
Subject key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F43285848B5900DDF6F947FA757C91BC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 29 Jan 2025 20:58:27 +0000
Certificate not after: Tue 04 May 2027 19:58:27 +0000
Subordinate resources: AS: 14237
IP: 216.152.248.0/21
IP: 2606:e580::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b5:90:0d:df:6f:94:7f:a7:57:c9:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 29 20:58:27 2025 GMT
Not After : May 4 19:58:27 2027 GMT
Subject: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:50:99:3d:80:47:a1:c1:4e:1d:30:f8:d2:
51:ff:7c:6f:3f:6b:26:3e:69:fe:8e:7a:29:e0:09:
70:90:f8:e9:10:7f:8e:12:62:a2:b1:6c:eb:a3:1c:
79:78:91:a5:59:dc:e7:7f:e5:06:d5:7a:d4:52:b1:
e3:c2:ae:2d:6b:2d:78:76:13:bd:ff:bc:e1:0d:e3:
65:1b:e4:eb:38:76:5c:76:79:f9:82:84:74:0d:3f:
2a:2d:59:39:55:cc:0c:db:bf:35:dc:8c:a3:c5:3c:
fb:a3:34:a5:cc:4e:dc:b4:11:ec:65:23:a7:4e:b7:
19:9d:78:80:bc:be:3a:d9:8a:db:26:f1:fe:d7:58:
cf:59:53:1f:21:6d:c7:fb:09:7b:cc:df:b9:08:b2:
95:38:28:61:6c:6d:49:93:ce:44:48:65:30:0a:b4:
b7:a6:ae:9b:5b:7e:0f:e0:5a:b5:6e:cc:bb:33:d8:
83:94:87:08:80:4d:58:07:f6:c7:d3:78:63:8a:6e:
4e:e0:9d:6c:92:09:88:95:c7:f3:e0:c5:4f:7c:48:
c1:3e:e7:e7:d9:16:08:68:c2:01:5b:58:58:bb:dd:
44:e2:9f:d4:f2:81:4c:86:52:78:f3:84:ab:da:da:
f9:f3:8d:ea:e1:39:8c:8e:9d:cf:cb:7e:7b:be:8d:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.248.0/21
IPv6:
2606:e580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14237
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:a0:b9:24:fd:37:62:cf:fe:8a:4b:ba:18:cf:4c:d1:f8:bd:
19:5c:8e:ce:73:01:0e:03:59:11:64:85:34:41:dd:69:57:5f:
ad:75:94:d4:71:92:68:bd:51:96:cc:12:05:e3:1f:a2:5d:05:
f5:cd:16:f5:3e:09:2c:af:fe:9c:e2:28:16:3f:4f:cb:2a:a4:
c7:67:ef:30:17:fc:69:4c:e2:7f:54:f1:c5:6d:db:97:f1:07:
ce:a2:67:64:f0:0c:5e:af:31:ff:3b:be:e0:08:7e:d8:09:cf:
63:7c:cc:6a:ea:96:2c:a2:c7:c5:1a:70:3b:a0:52:16:60:94:
87:d1:66:f6:6d:cf:38:30:34:28:a6:02:d9:c9:2d:c7:58:23:
6c:54:7b:b5:7c:2d:0b:c8:2e:89:80:c4:49:a7:40:8a:5c:a5:
ad:18:16:7b:be:74:81:a3:0b:5c:32:cf:ad:62:b7:79:c5:38:
53:01:5a:3b:d7:b3:09:d2:80:be:f8:08:f0:f9:88:ee:f4:f1:
e1:d1:53:ab:82:aa:d9:bb:45:75:19:5d:14:9f:4d:68:57:d7:
37:48:eb:f2:77:1e:f6:ec:14:4b:de:90:38:ed:f9:98:34:c6:
0b:8f:07:e5:ea:83:c4:e2:c5:b9:82:6f:10:33:3f:63:d0:c3:
92:a8:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:06:10 2025 by rpki-client