Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
File: 249140ca-277e-4871-a100-451d066d1c5b.cer (raw, json)
Hash identifier: lRN4v1vd4PjNZDjbKogx3mL6INncivDFTn1nocfJOcc=
Subject key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858455C49D806967C54F5E8B39C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 Mar 2024 19:09:14 +0000
Certificate not after: Fri 19 Sep 2025 00:45:16 +0000
Subordinate resources: AS: 6391
AS: 11478
AS: 21513
AS: 21548
AS: 21949
AS: 23498
AS: 40191
AS: 53364
AS: 395570
AS: 397177
AS: 397778
IP: 45.42.8.0 -- 45.42.14.255
IP: 50.21.64.0/21
IP: 64.18.64.0/19
IP: 64.137.128.0/19
IP: 64.254.224.0/19
IP: 66.11.32.0/20
IP: 66.23.0.0/17
IP: 66.171.160.0/20
IP: 66.199.32.0/20
IP: 66.207.192.0/19
IP: 66.234.32.0/19
IP: 66.241.128.0/20
IP: 67.22.224.0/20
IP: 67.213.71.0/24
IP: 67.213.80.0/23
IP: 67.213.87.0/24
IP: 67.213.92.0/24
IP: 69.77.160.0/19
IP: 72.15.48.0/20
IP: 74.114.100.0/22
IP: 74.123.92.0/22
IP: 74.213.160.0/19
IP: 75.98.192.0/20
IP: 76.9.192.0/19
IP: 96.45.192.0/20
IP: 97.107.176.0/20
IP: 104.192.44.0/22
IP: 104.193.52.0/22
IP: 142.59.160.0/20
IP: 149.248.176.0/20
IP: 158.106.64.0/18
IP: 162.249.160.0/22
IP: 162.250.170.0 -- 162.250.174.255
IP: 172.85.124.0/22
IP: 173.243.192.0/20
IP: 173.246.64.0/19
IP: 192.69.1.0/24
IP: 198.22.225.0/24
IP: 198.98.96.0/19
IP: 199.7.144.0/22
IP: 199.33.112.0/22
IP: 199.45.144.0/21
IP: 199.45.164.0/23
IP: 199.68.120.0/21
IP: 199.167.152.0/21
IP: 199.247.192.0/21
IP: 204.9.80.0/22
IP: 204.11.218.0/24
IP: 205.175.212.0/22
IP: 206.55.80.0/20
IP: 206.214.240.0/20
IP: 206.223.160.0/19
IP: 206.253.136.0/21
IP: 207.66.120.0/22
IP: 207.115.96.0/20
IP: 208.71.8.0/22
IP: 208.85.112.0/22
IP: 209.195.248.0/21
IP: 216.46.0.0/19
IP: 216.81.48.0/20
IP: 216.120.194.0/23
IP: 2605:8c80::/32
IP: 2606:880::/32
IP: 2607:5e00::/32
IP: 2607:f0c8::/32
IP: 2607:f3d8::/32
IP: 2610:98::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 May 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:5c:49:d8:06:96:7c:54:f5:e8:b3:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Mar 28 19:09:14 2024 GMT
Not After : Sep 19 00:45:16 2025 GMT
Subject: CN=249140ca-277e-4871-a100-451d066d1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:8b:da:bc:64:fd:ae:65:dc:41:67:61:35:
7f:84:0a:9b:57:69:9d:70:a4:32:d1:6a:74:78:ff:
4a:18:94:af:bd:07:a7:54:0a:c6:c0:1f:40:24:4e:
29:ac:f2:62:0a:fb:f0:64:45:19:38:10:f3:be:9b:
1d:77:75:d9:1b:4b:9e:9e:b5:9c:c2:20:68:18:f5:
cd:cd:ac:57:d7:fa:79:c4:2b:86:68:6a:6d:48:64:
36:ab:f2:36:40:1f:49:e3:ba:37:d5:e4:db:92:23:
34:81:a0:1e:e1:ae:1c:1b:58:66:e1:d5:25:08:63:
e3:d4:12:3e:ae:56:a5:e3:b6:e0:53:1f:47:46:1a:
1b:84:a8:b6:95:6f:3c:0c:7d:d4:af:97:51:99:63:
a0:90:26:c6:86:e0:03:67:e4:51:b1:12:ea:d3:ff:
3a:a1:09:4b:f6:47:f2:fc:2a:14:3d:f0:93:de:49:
9b:82:53:1f:5d:11:b3:2f:04:ea:83:e4:50:5b:63:
ac:ab:a4:5e:72:fe:e3:9f:21:41:ee:f8:1f:60:8b:
39:3b:73:81:64:92:1c:a6:fc:db:cd:91:a4:65:4b:
90:27:34:47:c6:a3:81:e6:14:d4:eb:e1:ba:b0:ad:
69:5e:e8:90:63:ab:c1:77:44:aa:02:48:98:66:06:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.8.0-45.42.14.255
50.21.64.0/21
64.18.64.0/19
64.137.128.0/19
64.254.224.0/19
66.11.32.0/20
66.23.0.0/17
66.171.160.0/20
66.199.32.0/20
66.207.192.0/19
66.234.32.0/19
66.241.128.0/20
67.22.224.0/20
67.213.71.0/24
67.213.80.0/23
67.213.87.0/24
67.213.92.0/24
69.77.160.0/19
72.15.48.0/20
74.114.100.0/22
74.123.92.0/22
74.213.160.0/19
75.98.192.0/20
76.9.192.0/19
96.45.192.0/20
97.107.176.0/20
104.192.44.0/22
104.193.52.0/22
142.59.160.0/20
149.248.176.0/20
158.106.64.0/18
162.249.160.0/22
162.250.170.0-162.250.174.255
172.85.124.0/22
173.243.192.0/20
173.246.64.0/19
192.69.1.0/24
198.22.225.0/24
198.98.96.0/19
199.7.144.0/22
199.33.112.0/22
199.45.144.0/21
199.45.164.0/23
199.68.120.0/21
199.167.152.0/21
199.247.192.0/21
204.9.80.0/22
204.11.218.0/24
205.175.212.0/22
206.55.80.0/20
206.214.240.0/20
206.223.160.0/19
206.253.136.0/21
207.66.120.0/22
207.115.96.0/20
208.71.8.0/22
208.85.112.0/22
209.195.248.0/21
216.46.0.0/19
216.81.48.0/20
216.120.194.0/23
IPv6:
2605:8c80::/32
2606:880::/32
2607:5e00::/32
2607:f0c8::/32
2607:f3d8::/32
2610:98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6391
11478
21513
21548
21949
23498
40191
53364
395570
397177
397778
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:fd:62:b8:67:dd:7f:51:1c:ba:47:82:a2:1f:68:e8:7d:fa:
bc:30:5c:ab:77:eb:79:8e:fd:c4:9c:8c:7a:f6:cd:d0:93:cd:
f1:61:7f:8a:64:8a:db:41:4d:b1:37:7c:a7:78:d4:7b:76:0b:
bf:71:1f:5e:2a:4d:69:5c:de:b2:55:42:f4:d9:08:22:0c:db:
22:9a:56:56:e0:61:fe:7c:1a:3c:b3:7f:83:3b:84:57:f1:44:
e5:3f:6a:5f:9c:f1:ce:1f:67:68:72:eb:56:61:b0:f4:eb:4c:
6d:bd:56:1e:fd:e5:6a:85:10:f0:30:03:1b:2f:5d:c7:c0:54:
61:e7:66:ec:8b:fe:03:2a:9e:c2:c0:36:41:a4:f5:47:96:7c:
41:b6:b3:fc:a3:f5:53:ce:db:f7:00:11:34:9a:4e:42:f8:12:
3c:90:28:82:39:c4:cc:67:bb:f4:a5:1c:40:41:68:a2:a8:d4:
7b:89:4c:3f:e5:c7:43:40:ff:2c:af:13:26:c0:c7:ad:c3:59:
95:43:df:f6:0d:bb:33:64:2b:8d:2b:36:24:c4:a1:26:ce:3d:
96:c4:3e:26:9d:06:2b:27:6e:04:d8:a6:21:5f:81:6c:cf:62:
0c:94:26:83:5c:37:21:39:e5:c3:f1:ca:96:d6:99:4d:5c:76:
50:40:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:01:41 2024 by rpki-client on console-ams.rpki-client.org