Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
File: b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer (raw, json)
Hash identifier: dUXWd+Nu8Ueok0/RGtQclJNSSim6QiFDfxeP32bYdeE=
Subject key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285844F5C31FEBD893764F3CB26580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 21 Feb 2024 01:45:20 +0000
Certificate not after: Tue 26 May 2026 00:45:20 +0000
Subordinate resources: AS: 55286
IP: 23.229.0.0/17
IP: 23.236.128.0/17
IP: 69.4.80.0/20
IP: 69.58.0.0/20
IP: 192.157.48.0/20
IP: 192.186.128.0/18
IP: 192.198.96.0/19
IP: 192.241.64.0/18
IP: 198.20.160.0/19
IP: 198.154.80.0/20
IP: 198.245.64.0/20
IP: 209.127.0.0 -- 209.127.48.255
IP: 209.127.50.0 -- 209.127.62.255
IP: 209.127.72.0/21
IP: 209.127.96.0/22
IP: 209.127.104.0 -- 209.127.127.255
IP: 209.127.136.0 -- 209.127.138.255
IP: 209.127.142.0 -- 209.127.151.255
IP: 209.127.176.0 -- 209.127.189.255
IP: 209.127.191.0 -- 209.127.192.255
IP: 209.127.194.0/24
IP: 209.127.196.0/24
IP: 209.127.198.0/24
IP: 209.127.223.0/24
IP: 209.127.228.0/23
IP: 209.127.242.0 -- 209.127.245.255
IP: 209.127.252.0/23
IP: 2607:4300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 May 2024 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:f5:c3:1f:eb:d8:93:76:4f:3c:b2:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Feb 21 01:45:20 2024 GMT
Not After : May 26 00:45:20 2026 GMT
Subject: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:cc:a4:59:00:d5:ea:a9:b4:1c:f0:35:6e:
b3:9e:44:43:1f:8c:aa:13:d2:7a:d1:1e:65:c7:a5:
6a:bb:4e:bf:25:9a:45:fa:b3:f3:72:cf:80:12:3c:
49:7d:e0:9c:99:a9:b5:b5:f8:29:d3:a7:91:ab:17:
cd:f7:3e:ae:36:3c:8c:64:cd:59:62:5e:0c:cf:bb:
db:9e:59:09:40:a8:7d:c1:af:39:2f:14:4d:6c:6c:
d8:3e:c7:93:f5:e7:3a:7e:7a:a6:be:a8:32:7c:bd:
3b:ab:28:f7:4b:80:30:3a:03:7f:75:64:3b:b3:8a:
bf:9c:dc:bb:9d:c3:2b:f4:57:59:51:0f:34:24:ae:
37:d9:c7:03:1a:28:23:6a:84:c4:6d:17:7f:73:2c:
dc:7f:d8:08:a9:18:94:37:21:88:12:56:8d:5d:4b:
ac:c2:f5:be:92:38:3b:14:63:12:f0:48:9f:fe:2b:
13:d1:fd:8c:e1:a5:f9:bf:fe:22:40:10:bf:29:7c:
d8:e5:3e:3e:3c:d5:4c:14:81:3f:80:9b:9b:dc:12:
50:76:cd:15:16:36:45:9b:65:a5:f4:ce:b8:69:44:
c6:de:6a:c5:b2:a8:b1:a6:85:b1:eb:48:d4:91:c8:
d1:33:41:31:ef:fc:d8:04:ee:ae:61:83:2b:5e:ce:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.0.0/17
23.236.128.0/17
69.4.80.0/20
69.58.0.0/20
192.157.48.0/20
192.186.128.0/18
192.198.96.0/19
192.241.64.0/18
198.20.160.0/19
198.154.80.0/20
198.245.64.0/20
209.127.0.0-209.127.48.255
209.127.50.0-209.127.62.255
209.127.72.0/21
209.127.96.0/22
209.127.104.0-209.127.127.255
209.127.136.0-209.127.138.255
209.127.142.0-209.127.151.255
209.127.176.0-209.127.189.255
209.127.191.0-209.127.192.255
209.127.194.0/24
209.127.196.0/24
209.127.198.0/24
209.127.223.0/24
209.127.228.0/23
209.127.242.0-209.127.245.255
209.127.252.0/23
IPv6:
2607:4300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55286
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:7a:8f:d4:ac:74:4b:6e:72:fa:98:91:ac:96:bd:ec:2b:56:
2f:c9:80:18:8c:03:f2:49:91:9a:6c:46:0c:9d:b8:bb:83:c6:
ec:ec:ae:83:56:f2:25:ef:eb:20:e4:9d:25:d5:bc:41:28:8a:
84:4b:23:64:b3:e2:a0:9d:17:31:18:74:76:11:0b:db:5b:65:
4b:86:a2:61:9f:73:2a:b6:78:be:d1:09:51:ee:1a:d7:75:fb:
1d:4f:27:7d:e3:d2:cb:1d:99:a6:11:76:66:c0:56:b6:5b:8a:
2a:e3:92:8d:dd:31:ba:8b:2f:a5:2c:62:15:75:42:c5:ad:f1:
43:89:b0:d7:d1:89:64:4b:74:87:d5:a4:d7:db:35:67:f1:dd:
2c:58:fc:20:66:91:e6:60:ff:e5:e3:d9:0c:3f:3f:17:1e:20:
bb:d0:a4:54:39:6a:34:ee:3b:de:5d:f5:e5:7c:25:6c:8d:01:
c5:9d:4e:ca:3d:f4:ab:42:bb:c3:bc:16:1d:06:ad:16:d8:80:
40:20:ec:2f:c6:6f:45:9d:97:fa:cc:d9:bd:03:46:e6:70:65:
af:1b:d9:75:77:7a:b8:ba:9a:8a:3d:58:34:18:7b:65:ff:d3:
b4:d0:b5:65:7b:4d:bc:83:55:72:b1:c5:37:a2:e0:f0:e1:df:
58:2a:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:31 2024 by rpki-client on console-fra.rpki-client.org