Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
File: 98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer (raw, json)
Hash identifier: rD3QCJKeRC8rqMYAITq6SKqxUlMPqR2hjEfSLT1+sp8=
Subject key identifier: 33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858482C9D8CE18A7378402F683430
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 11 Dec 2024 19:39:54 +0000
Certificate not after: Tue 16 Mar 2027 18:39:54 +0000
Subordinate resources: IP: 208.64.160.0/22
IP: 2602:fccc::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:9d:8c:e1:8a:73:78:40:2f:68:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Dec 11 19:39:54 2024 GMT
Not After : Mar 16 18:39:54 2027 GMT
Subject: CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:f1:d9:d6:a7:af:05:0d:76:1c:44:2f:d5:
07:b2:bf:e3:01:6b:f4:48:2d:87:1b:a2:bd:00:be:
93:2e:9c:eb:8e:62:14:57:63:5f:f7:89:28:8f:de:
5e:3b:45:0d:00:8c:e5:9d:6e:a0:d0:4b:87:a0:5e:
75:e7:ff:6c:2d:72:14:46:0a:b0:ef:f7:2c:97:91:
ca:89:25:3b:4c:13:4f:f7:a9:c2:98:dd:b1:e5:94:
b4:33:2c:bd:ed:bd:4d:99:77:8c:a7:63:44:65:21:
9e:16:e2:bd:7b:73:68:66:6b:de:f9:6b:8d:61:a9:
2f:e4:56:ca:27:31:9a:1d:cd:41:b9:7d:75:83:31:
93:98:2c:21:78:80:34:18:56:1c:be:9b:8d:a4:04:
36:e4:b6:55:f3:23:91:66:1d:33:d8:71:c2:35:91:
7c:70:d4:b4:d6:65:e9:bc:ff:46:40:8b:b6:1f:53:
7d:ce:06:8c:1c:e6:0f:2c:8d:70:8c:68:07:ab:85:
e0:b5:98:02:5d:82:90:77:ca:a1:71:af:3f:f1:83:
83:f2:e2:fc:0e:6b:39:7a:17:ef:c0:61:1c:b1:41:
82:21:d2:92:b9:0b:e5:fa:e1:74:00:31:aa:86:b5:
2e:0e:ee:08:b2:9e:20:71:32:26:f0:91:63:b4:7d:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.160.0/22
IPv6:
2602:fccc::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:2a:18:d4:30:c1:0a:79:58:06:39:b5:56:13:a6:16:14:95:
80:88:ab:a4:d0:bc:68:bf:b6:e7:9b:e4:df:65:62:f4:1b:2b:
81:0d:89:99:7a:ad:5c:a8:70:06:f4:4d:6f:f4:42:76:e8:eb:
d0:31:ed:9c:5e:9d:df:f1:96:28:49:7d:8d:d1:ec:49:ec:da:
36:6d:06:86:a3:b6:b8:2c:f6:9d:c8:0d:2f:19:14:82:d9:4e:
f4:91:41:37:42:74:30:10:b1:d0:f8:5d:ef:31:ef:07:26:e5:
f0:41:9b:b8:03:96:be:f4:9b:e9:b7:d3:31:98:11:d4:68:e7:
f3:90:3c:be:4f:70:fc:bf:16:71:1a:26:d5:2b:e1:53:7c:13:
c0:ec:f2:0a:c6:38:9f:bf:09:28:79:d0:84:81:23:1f:c6:79:
dd:21:80:1c:cd:3b:a3:9a:54:ef:0f:81:7b:7e:39:fd:8f:c9:
dc:e6:65:08:0c:bd:83:ea:ca:a5:c8:ed:0d:f4:38:1d:4c:2c:
e2:a2:4c:4b:46:d6:6f:29:b7:f0:fc:92:1e:99:be:a6:a8:dc:
bc:b4:1e:40:6b:90:b0:8d:ce:c7:38:a0:88:06:97:2e:1f:f6:
52:8f:57:29:b5:b5:9f:b3:b5:22:ac:75:c2:80:da:72:86:d3:
4d:81:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:08:04 2025 by rpki-client