Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904.cer
File: 4cf61af5-37b2-4fa5-a702-19a29bc38904.cer (raw, json)
Hash identifier: MnS20H4IRtgAqY/SDiBZo1QSQhDJZ306sihOHGimZAQ=
Subject key identifier: C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285842C481D2EB581D7BC62D1E3680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Aug 2023 00:45:16 +0000
Certificate not after: Thu 06 Nov 2025 01:45:16 +0000
Subordinate resources: AS: 6188
AS: 11555
AS: 19066
AS: 21679
AS: 22558
AS: 32244
AS: 36444
AS: 40819
AS: 53824
IP: 50.28.0.0/17
IP: 50.56.148.0/22
IP: 50.57.240.0/20
IP: 64.91.224.0/19
IP: 67.20.48.0/20
IP: 67.43.0.0/20
IP: 67.225.128.0/17
IP: 67.227.128.0/17
IP: 68.66.211.0/24
IP: 69.16.192.0/18
IP: 69.160.48.0/20
IP: 69.167.128.0/18
IP: 72.44.80.0/20
IP: 72.52.128.0/17
IP: 96.30.0.0/18
IP: 98.129.229.0/24
IP: 104.207.224.0/19
IP: 159.135.0.0/18
IP: 162.212.134.0/24
IP: 162.252.104.0/22
IP: 173.199.128.0/18
IP: 173.249.144.0/20
IP: 184.106.55.0/24
IP: 192.64.52.0/22
IP: 192.126.88.0/22
IP: 192.138.16.0/21
IP: 192.190.220.0/22
IP: 192.240.160.0/19
IP: 199.48.252.0/22
IP: 199.189.224.0/22
IP: 199.195.118.0/24
IP: 199.201.88.0/22
IP: 205.174.24.0/22
IP: 206.198.224.0/21
IP: 207.32.176.0/20
IP: 207.246.240.0/20
IP: 208.69.120.0/21
IP: 208.75.148.0/22
IP: 208.79.232.0/21
IP: 208.86.152.0/21
IP: 208.86.248.0/21
IP: 209.59.128.0/18
IP: 209.87.144.0/20
IP: 209.124.89.0/24
IP: 209.126.16.0/20
IP: 209.188.80.0/20
IP: 2604:d700::/32
IP: 2607:f7c0::/32
IP: 2607:fad0::/32
IP: 2607:fd60::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 May 2024 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:81:d2:eb:58:1d:7b:c6:2d:1e:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Aug 4 00:45:16 2023 GMT
Not After : Nov 6 01:45:16 2025 GMT
Subject: CN=4cf61af5-37b2-4fa5-a702-19a29bc38904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:7b:27:d0:91:92:c9:dc:c0:3b:4c:45:c4:
6a:71:d5:b0:c6:26:d0:b2:b4:93:62:e9:d5:52:02:
9e:f0:89:ba:4d:25:a6:fb:a9:60:43:f7:71:aa:57:
a8:c8:92:d0:79:ba:8b:a5:31:c4:a5:89:d8:94:0b:
aa:04:b5:e2:93:c6:91:d7:38:e6:cc:82:9e:6b:b1:
64:c0:ee:9a:f4:83:c9:df:5f:14:81:1c:7b:4a:7a:
2c:a9:5a:22:29:7d:a4:57:c8:35:9e:b0:3e:5d:ad:
c9:09:c6:2a:7b:0c:bf:ec:2a:be:e0:30:13:11:b2:
df:39:7b:0d:ce:24:86:0c:58:1e:bd:bc:06:5c:78:
bb:51:10:84:12:fa:56:0d:3c:0f:ad:82:e5:b8:71:
9e:7b:d3:9d:b7:4a:67:07:4d:22:e1:ec:4f:96:6a:
29:e3:30:9c:b7:77:26:64:0a:0e:5d:e2:3d:e2:1a:
be:f7:bd:5e:d2:3d:78:4b:8a:c4:c6:fc:38:0e:37:
60:80:1b:45:28:59:d4:a6:b8:c6:eb:1f:a2:8d:c4:
b9:9c:52:68:a3:63:50:b3:5f:14:3a:a5:f5:38:08:
c1:a1:49:85:d7:2a:e7:12:15:4e:3b:5a:25:a0:c4:
f0:21:ca:92:ee:1f:12:f9:b9:3b:ab:30:78:e9:32:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
50.28.0.0/17
50.56.148.0/22
50.57.240.0/20
64.91.224.0/19
67.20.48.0/20
67.43.0.0/20
67.225.128.0/17
67.227.128.0/17
68.66.211.0/24
69.16.192.0/18
69.160.48.0/20
69.167.128.0/18
72.44.80.0/20
72.52.128.0/17
96.30.0.0/18
98.129.229.0/24
104.207.224.0/19
159.135.0.0/18
162.212.134.0/24
162.252.104.0/22
173.199.128.0/18
173.249.144.0/20
184.106.55.0/24
192.64.52.0/22
192.126.88.0/22
192.138.16.0/21
192.190.220.0/22
192.240.160.0/19
199.48.252.0/22
199.189.224.0/22
199.195.118.0/24
199.201.88.0/22
205.174.24.0/22
206.198.224.0/21
207.32.176.0/20
207.246.240.0/20
208.69.120.0/21
208.75.148.0/22
208.79.232.0/21
208.86.152.0/21
208.86.248.0/21
209.59.128.0/18
209.87.144.0/20
209.124.89.0/24
209.126.16.0/20
209.188.80.0/20
IPv6:
2604:d700::/32
2607:f7c0::/32
2607:fad0::/32
2607:fd60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6188
11555
19066
21679
22558
32244
36444
40819
53824
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:07:40:72:1f:59:bd:31:64:a0:13:d5:c1:90:7f:b9:74:a0:
c9:0f:a5:d4:8f:f3:89:4a:7d:2f:21:07:cc:3b:df:48:aa:42:
58:d7:33:8a:80:18:4d:2c:53:38:cb:91:51:2c:7b:2e:6e:81:
92:0c:9d:4b:38:60:f3:a0:6a:b0:f4:ff:9c:c6:6c:c3:3e:5d:
76:a6:a5:e8:a5:59:67:4d:fa:5a:2f:d9:08:21:fe:f2:6c:26:
34:44:66:3a:ba:74:7b:16:49:8e:c8:e5:8b:69:ad:6e:e5:3b:
2d:b1:92:dc:cd:d9:8c:5e:5a:8d:c8:87:be:39:35:4f:b4:b9:
c5:06:88:3a:bc:58:66:bb:2f:dc:65:f4:64:e1:18:d6:92:20:
cb:10:1b:cd:fb:f4:aa:bf:83:c4:96:35:cc:d0:a4:bd:4e:88:
b1:68:ac:80:97:97:79:7f:e6:43:bf:ba:d7:c5:cf:9f:68:5d:
14:5b:2a:b7:a1:54:16:51:16:da:f8:61:f4:83:e0:e1:c1:09:
fa:c8:f6:5f:06:72:25:c8:f9:57:ea:3b:12:2f:8e:bd:64:2a:
e3:b0:21:a8:00:c8:f3:dc:67:3f:0a:43:71:6f:67:77:6a:40:
05:5c:fa:a3:63:15:9d:29:9b:d4:5b:e2:ec:2a:a3:77:e5:cc:
43:5b:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:24:31 2024 by rpki-client on console-ams.rpki-client.org