Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484.cer
File: 9cc85aca-3fd8-4f20-8694-fe51dbf42484.cer (raw, json)
Hash identifier: 8aoD6Qk+qAhz9tsmC4x2oSzOrSUsZMWHf/fcHU1+Rl0=
Subject key identifier: EA:04:07:86:F6:5F:11:0C:19:BD:CE:14:B4:93:A2:C6:82:0B:F6:6E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F43285848A1D4B5B6F349720A5B052200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/9cc85aca-3fd8-4f20-8694-fe51dbf42484.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 22 Jan 2025 19:20:37 +0000
Certificate not after: Tue 27 Apr 2027 18:20:37 +0000
Subordinate resources: IP: 2620:170::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:d4:b5:b6:f3:49:72:0a:5b:05:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 22 19:20:37 2025 GMT
Not After : Apr 27 18:20:37 2027 GMT
Subject: CN=9cc85aca-3fd8-4f20-8694-fe51dbf42484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:b8:22:2b:85:d4:be:6b:c3:8a:db:1b:f4:
54:2f:c7:0f:40:c7:f5:99:3a:39:51:a5:0c:84:2f:
51:c3:a3:04:9d:55:87:35:8f:02:03:ae:e8:f3:cb:
9d:7b:f2:66:45:64:f8:35:94:ac:49:5c:e6:00:ba:
ca:bb:26:57:3a:8c:2a:28:de:60:9d:2b:4b:9b:7d:
79:d8:a7:46:65:b4:7b:18:20:53:e3:0b:fc:1c:b8:
10:42:37:4e:0f:45:66:c3:79:c4:10:8e:c6:c3:0a:
b3:42:1b:b6:49:62:b7:1a:c2:84:20:b5:6e:84:04:
f9:fd:b8:21:1b:f6:d8:2b:7b:7d:98:0c:78:8a:2b:
5e:ee:15:3a:f4:94:a5:5f:2e:26:ff:5d:4c:58:db:
b5:fe:f8:52:b6:d6:14:61:d9:d2:0e:8a:11:5e:05:
ac:b1:53:48:92:70:5c:84:3e:0c:00:59:81:fa:83:
76:60:78:2a:a1:76:cc:6b:f5:cb:11:9b:c5:78:5c:
82:db:59:97:e0:47:06:74:9c:77:77:12:36:be:33:
27:22:8b:53:c8:c3:bd:5b:60:1b:06:e8:ce:21:2b:
9b:28:01:d3:d2:b7:a8:86:91:a1:a7:93:8f:62:46:
01:bc:8e:69:86:31:b8:2b:78:bf:8d:0e:1e:50:88:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:07:86:F6:5F:11:0C:19:BD:CE:14:B4:93:A2:C6:82:0B:F6:6E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/9cc85aca-3fd8-4f20-8694-fe51dbf42484.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:170::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:b5:c1:cc:c6:93:26:9e:71:c7:62:12:30:05:ca:51:bd:3c:
a0:07:b3:7c:3f:7b:29:65:99:84:78:bd:44:b8:bc:5c:79:f1:
c7:64:23:7a:e7:84:5e:4e:dd:ac:fa:68:d3:b1:c0:5e:f0:1d:
db:9f:ad:ac:1a:ad:df:20:22:42:34:b1:f9:4f:e2:98:15:71:
27:43:b3:90:18:13:28:75:1e:f2:17:a4:ae:a4:e1:02:26:a4:
1f:93:47:08:59:f9:fd:27:b0:14:60:60:87:22:b3:29:aa:a1:
a3:b7:e7:52:8e:7b:27:68:58:6d:56:f0:26:e7:66:60:c9:71:
85:fb:f6:c1:58:7e:06:05:7f:36:cd:ff:8e:42:ad:f3:ec:5e:
2b:42:e6:2b:72:f3:f8:a2:25:66:f4:f9:9b:0d:e8:cc:3f:8c:
20:5e:d2:80:ac:61:c0:b1:ba:d7:66:b0:36:0b:8c:d8:d7:c8:
32:fb:2d:9d:0e:55:e1:1e:d9:59:92:47:89:bb:11:cd:50:5c:
fe:39:fe:2c:e3:d3:fc:0b:9e:fc:85:0a:df:67:62:06:25:d4:
e1:8e:74:e0:66:dc:e6:b4:aa:75:85:17:2d:d6:53:9b:98:15:
1e:ea:a5:fc:a4:d7:ae:7b:59:dd:23:e7:0c:a0:3f:a8:2b:1f:
78:07:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:25:19 2025 by rpki-client