Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
File: 4d4940f4-61c2-4251-acdb-36be83cdc744.cer (raw, json)
Hash identifier: hd48SKPszB6z5HqUqBLdjOMR5Ys1Uoq6MJ992Qngyig=
Subject key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285843EC8C1A0EE867C6CFFBC5D300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 18 Nov 2023 01:45:15 +0000
Certificate not after: Fri 20 Feb 2026 01:45:15 +0000
Subordinate resources: AS: 3672
AS: 5688
AS: 6407
AS: 7036
AS: 7443
IP: 67.230.128.0/19
IP: 108.63.0.0 -- 108.63.13.255
IP: 108.63.18.0 -- 108.63.21.255
IP: 108.63.30.0 -- 108.63.255.255
IP: 173.206.0.0/16
IP: 204.48.0.0/21
IP: 205.207.88.0 -- 205.207.90.255
IP: 205.210.104.0/24
IP: 207.112.0.0/22
IP: 207.112.8.0/24
IP: 207.112.16.0 -- 207.112.45.255
IP: 207.112.47.0 -- 207.112.69.255
IP: 207.112.71.0 -- 207.112.127.255
IP: 209.90.128.0/21
IP: 209.90.141.0 -- 209.90.157.255
IP: 209.90.159.0 -- 209.90.170.255
IP: 209.90.172.0/23
IP: 209.90.177.0 -- 209.90.187.255
IP: 209.90.190.0/23
IP: 209.183.0.0 -- 209.183.11.255
IP: 209.183.13.0 -- 209.183.19.255
IP: 209.183.21.0 -- 209.183.31.255
IP: 209.216.128.0 -- 209.216.136.255
IP: 209.216.138.0 -- 209.216.159.255
IP: 209.225.128.0/18
IP: 209.227.128.0/18
IP: 216.181.0.0/24
IP: 216.181.3.0/24
IP: 216.181.5.0 -- 216.181.18.255
IP: 216.181.21.0 -- 216.181.97.255
IP: 216.181.109.0 -- 216.181.119.255
IP: 216.181.121.0/24
IP: 216.181.124.0/24
IP: 216.181.126.0 -- 216.181.129.255
IP: 216.181.131.0 -- 216.181.157.255
IP: 216.181.166.0 -- 216.181.229.255
IP: 216.181.232.0 -- 216.181.247.255
IP: 216.181.250.0 -- 216.181.255.255
IP: 216.254.128.0 -- 216.254.157.255
IP: 216.254.160.0 -- 216.254.168.255
IP: 216.254.170.0 -- 216.254.196.255
IP: 216.254.198.0/23
IP: 216.254.204.0 -- 216.254.208.255
IP: 216.254.210.0 -- 216.254.222.255
IP: 2604:7f00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 03 May 2024 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ec:8c:1a:0e:e8:67:c6:cf:fb:c5:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Nov 18 01:45:15 2023 GMT
Not After : Feb 20 01:45:15 2026 GMT
Subject: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:23:91:79:3c:9a:50:65:cf:aa:fb:93:58:
b1:02:d6:34:3b:f0:34:ee:5f:12:76:a3:65:ad:bc:
79:37:1b:8a:aa:18:23:47:be:61:d1:b1:14:1c:51:
f8:b2:85:a5:b5:dd:e2:9c:e2:71:d8:a7:63:5b:67:
ba:d3:d8:62:4d:2a:01:51:f3:c9:0f:07:b1:bb:a0:
59:5d:74:11:7a:4c:75:6e:4a:75:69:7e:4a:c0:8f:
e0:dd:ff:99:8a:7d:c4:60:09:fd:f5:e0:f0:ca:95:
9e:fd:a0:87:3e:56:87:52:ce:31:8c:54:27:e0:1d:
09:5a:f0:12:74:6c:95:01:95:a1:d8:fc:04:7c:3a:
75:11:3b:6d:64:61:bc:fd:46:25:5d:87:2c:e0:d3:
05:7f:e0:9e:f0:24:e5:6c:c8:95:bb:bf:15:90:81:
f7:31:4a:45:9b:ca:a4:07:9e:45:cb:12:02:e8:a8:
df:6c:90:6d:6e:01:85:5f:c1:e2:78:57:b2:9c:3c:
d7:ea:35:e0:0a:19:46:5a:de:48:17:50:01:28:5e:
5f:34:fa:00:d2:40:c8:b5:6c:41:cc:6a:47:d3:17:
fb:55:bc:b7:22:bb:fd:e1:28:67:f0:5e:c6:f0:94:
9a:e6:41:09:7c:2e:19:f1:97:ba:19:4e:fa:e3:ff:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.230.128.0/19
108.63.0.0-108.63.13.255
108.63.18.0-108.63.21.255
108.63.30.0-108.63.255.255
173.206.0.0/16
204.48.0.0/21
205.207.88.0-205.207.90.255
205.210.104.0/24
207.112.0.0/22
207.112.8.0/24
207.112.16.0-207.112.45.255
207.112.47.0-207.112.69.255
207.112.71.0-207.112.127.255
209.90.128.0/21
209.90.141.0-209.90.157.255
209.90.159.0-209.90.170.255
209.90.172.0/23
209.90.177.0-209.90.187.255
209.90.190.0/23
209.183.0.0-209.183.11.255
209.183.13.0-209.183.19.255
209.183.21.0-209.183.31.255
209.216.128.0-209.216.136.255
209.216.138.0-209.216.159.255
209.225.128.0/18
209.227.128.0/18
216.181.0.0/24
216.181.3.0/24
216.181.5.0-216.181.18.255
216.181.21.0-216.181.97.255
216.181.109.0-216.181.119.255
216.181.121.0/24
216.181.124.0/24
216.181.126.0-216.181.129.255
216.181.131.0-216.181.157.255
216.181.166.0-216.181.229.255
216.181.232.0-216.181.247.255
216.181.250.0-216.181.255.255
216.254.128.0-216.254.157.255
216.254.160.0-216.254.168.255
216.254.170.0-216.254.196.255
216.254.198.0/23
216.254.204.0-216.254.208.255
216.254.210.0-216.254.222.255
IPv6:
2604:7f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3672
5688
6407
7036
7443
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:d1:ee:01:ec:e8:7c:d7:bf:99:27:e8:e3:36:52:d4:fb:7d:
cb:85:71:27:ba:48:40:a8:90:4e:69:41:d7:29:05:1f:b0:81:
59:dc:f1:ca:46:04:6b:e0:0b:f8:8f:e4:58:33:eb:00:a2:99:
c6:3e:7e:21:f9:93:f0:01:72:8b:75:44:68:c1:8c:ba:ed:0d:
ae:8c:10:17:08:2d:9d:40:dc:1b:a6:f0:0c:3d:c6:e2:8d:99:
cc:64:dd:77:b3:29:c2:af:da:b1:37:10:af:46:43:84:e9:24:
90:27:78:ac:4f:28:19:37:c6:eb:d4:6e:a9:d0:74:a4:ef:87:
7b:b0:d3:48:ec:4d:95:38:e7:4d:d3:d9:67:12:b4:d0:49:43:
34:07:0d:ff:47:00:e4:00:24:73:9b:3a:5d:59:ba:65:53:6e:
bb:ac:77:a3:bc:ae:84:d1:ca:f9:68:6c:2d:40:48:55:1d:22:
89:95:b5:3c:a2:c5:38:60:46:5c:2b:b9:6a:c6:54:43:66:44:
89:a0:ad:bf:7f:bc:53:c1:ee:7e:f6:dd:4b:ab:ac:bf:af:d9:
d9:50:68:c8:fd:a1:2e:3c:b7:7c:a9:e5:34:e2:81:96:6e:5d:
c7:06:2b:81:5b:fa:82:f5:2f:d5:c6:7a:49:ac:7c:b0:a9:01:
6e:b0:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:26 2024 by rpki-client on console-fra.rpki-client.org