Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer
File: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer (raw, json)
Hash identifier: FVIMw4v/K08aXksdDubLMoxm1lwingB2ihIDmmZ4dtQ=
Subject key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F432858487859F0AC03F3C417945623F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 07 Jan 2025 22:45:06 +0000
Certificate not after: Mon 12 Apr 2027 21:45:06 +0000
Subordinate resources: AS: 401328
IP: 23.131.20.0/24
IP: 2602:f769::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:59:f0:ac:03:f3:c4:17:94:56:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jan 7 22:45:06 2025 GMT
Not After : Apr 12 21:45:06 2027 GMT
Subject: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:23:b9:8c:34:64:15:9a:f0:d9:d9:b2:48:
38:f0:ea:46:60:0a:11:01:4a:37:0d:b6:9f:3a:66:
f9:a4:0e:ee:01:43:8c:70:a7:fd:e4:db:c4:a8:42:
c5:61:0a:9f:1a:c6:9b:8f:f5:31:b2:d4:b8:02:6d:
9c:46:b5:91:4c:34:f0:02:d6:61:ab:ab:8c:12:4c:
2d:0a:37:59:03:6e:97:66:33:4f:bd:d1:aa:fd:43:
a5:78:30:ad:3c:e0:c0:5f:d7:bb:ab:e4:f5:b3:be:
2b:48:da:31:82:b9:d3:97:08:b5:10:e2:70:25:6d:
d8:f9:28:08:78:23:9c:d4:af:da:44:c9:15:68:35:
56:00:8e:10:d9:d9:94:6b:f2:a2:a4:4f:bc:e9:80:
a8:21:37:80:f0:33:32:68:61:f3:ce:f6:0f:5f:35:
aa:f3:c2:13:00:0d:09:83:96:7b:96:bf:eb:17:2b:
1c:1f:79:48:16:a7:a5:c2:20:a5:ba:4b:ca:2f:f0:
ed:8b:a0:73:73:d3:19:63:9c:73:5f:35:1b:64:d0:
e7:4d:0c:a1:35:ee:e4:84:1c:07:c1:e6:53:8e:0e:
14:54:41:3e:be:64:d3:aa:0a:28:38:ef:7f:5f:8c:
66:14:d3:18:c0:89:63:1b:79:3b:d0:df:2f:b5:26:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.20.0/24
IPv6:
2602:f769::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401328
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b7:0a:2a:65:a1:ab:a3:f0:43:da:30:9e:62:4a:51:2e:0e:
7a:bf:bb:73:5d:89:8c:1c:f6:06:ec:79:db:d9:1d:8d:f0:0a:
19:72:35:e3:94:b4:65:e1:45:46:23:8b:c6:32:57:36:83:e7:
fb:9f:39:3d:d1:66:ea:ff:8e:bc:2e:cc:dd:bd:8b:c4:f3:ad:
7b:f5:b8:c3:48:23:01:00:f6:32:aa:a7:d3:f3:39:65:95:75:
a8:76:7a:03:cf:79:af:16:e6:6a:c8:2e:65:f6:8b:bc:94:80:
79:3c:d4:ae:6a:b1:7c:37:63:e9:9d:bf:27:e6:bc:dd:6b:3e:
c8:b1:c6:49:66:2a:5a:31:62:d0:d7:6e:94:58:ce:6b:47:97:
fb:ac:f6:96:9d:0c:4d:f2:67:34:43:ee:69:b1:17:bb:56:89:
8b:d5:b7:7e:eb:c3:74:21:a4:fd:ae:5e:44:d5:4b:ab:99:9f:
c1:37:ac:f7:a5:b6:f4:21:af:79:97:77:5b:d2:17:71:f6:b0:
08:aa:d9:77:d2:04:b9:22:51:20:fa:e9:a1:d4:49:77:ee:4f:
c2:43:1d:5d:26:b0:a4:ef:f8:ab:36:21:4a:7f:20:f8:23:00:
21:0c:8b:e1:1c:a5:ec:6a:f3:a2:2c:2d:f0:41:ef:14:4d:2c:
ca:bf:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:32 2025 by rpki-client