Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer
File: b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer (raw, json)
Hash identifier: RYkW91ucIn4DyXrFjHdLk1gkmiWmfR8cXMKuGm0LZ+0=
Subject key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285841E4834ACF2BEB65F645B7FF00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 May 2023 19:06:39 +0000
Certificate not after: Sun 01 Jun 2025 19:06:39 +0000
Subordinate resources: AS: 21918
AS: 30600
AS: 63242
IP: 46.110.0.0/16
IP: 52.144.32.0/21
IP: 52.144.112.0/21
IP: 69.174.128.0 -- 69.174.175.255
IP: 104.218.144.0/21
IP: 104.254.216.0/21
IP: 139.60.120.0/21
IP: 147.92.96.0/20
IP: 149.154.0.0/18
IP: 152.117.64.0/18
IP: 162.211.32.0/21
IP: 162.221.216.0/21
IP: 172.87.16.0/21
IP: 184.170.160.0/20
IP: 192.69.176.0/21
IP: 192.195.36.0/24
IP: 192.198.56.0/21
IP: 195.252.192.0/18
IP: 199.27.248.0/21
IP: 199.48.92.0/22
IP: 199.66.64.0/21
IP: 199.168.72.0/21
IP: 199.204.80.0/21
IP: 206.225.72.0/21
IP: 208.38.224.0/19
IP: 208.64.168.0/21
IP: 216.82.0.0/18
IP: 216.173.160.0/19
IP: 217.180.192.0/18
IP: 2603:d000::/24
IP: 2606:5580::/32
IP: 2607:fce8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 May 2024 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:83:4a:cf:2b:eb:65:f6:45:b7:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: May 15 19:06:39 2023 GMT
Not After : Jun 1 19:06:39 2025 GMT
Subject: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:33:55:cd:8e:b2:b0:64:79:9c:a0:e5:86:
19:70:87:8e:45:8f:fd:f8:ee:a1:8f:ad:27:14:1e:
95:22:f6:55:05:08:63:ea:6d:c9:f2:f4:09:d7:d8:
51:d8:1c:4e:64:ee:2a:6e:93:a4:58:91:9d:ce:a2:
9d:ec:77:fe:d7:cc:ac:90:20:ac:49:45:d7:41:c5:
40:ee:c7:87:76:1a:b4:3a:7b:58:47:11:f4:e0:97:
8d:6b:3a:cf:a4:17:25:d7:0a:bb:71:7f:d9:6d:b3:
66:ac:df:6b:7e:f0:6b:a5:c2:54:21:53:f1:ed:2e:
2b:30:05:9a:1d:2e:65:07:2f:63:61:08:4b:ad:a3:
b2:7b:a1:0d:cd:6e:11:db:41:b3:bc:e7:2a:bf:14:
17:a3:61:4b:ea:77:c8:2c:d1:d4:24:a5:6e:0a:da:
0f:22:26:9e:6e:6a:4f:4c:71:13:9f:9a:4a:3a:f7:
3d:b7:7d:db:79:5a:4a:02:fe:c2:6f:3f:0c:6f:db:
3e:76:42:ba:61:4e:9a:da:ba:8b:e4:1e:50:fc:dc:
24:5a:a1:39:38:0b:3a:c2:20:2b:e9:1f:7e:a7:9a:
fa:27:ec:8b:27:9f:07:39:8f:82:1d:b2:a3:06:70:
8c:ed:96:52:24:bd:b2:3e:19:dc:da:ee:38:dc:bc:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
46.110.0.0/16
52.144.32.0/21
52.144.112.0/21
69.174.128.0-69.174.175.255
104.218.144.0/21
104.254.216.0/21
139.60.120.0/21
147.92.96.0/20
149.154.0.0/18
152.117.64.0/18
162.211.32.0/21
162.221.216.0/21
172.87.16.0/21
184.170.160.0/20
192.69.176.0/21
192.195.36.0/24
192.198.56.0/21
195.252.192.0/18
199.27.248.0/21
199.48.92.0/22
199.66.64.0/21
199.168.72.0/21
199.204.80.0/21
206.225.72.0/21
208.38.224.0/19
208.64.168.0/21
216.82.0.0/18
216.173.160.0/19
217.180.192.0/18
IPv6:
2603:d000::/24
2606:5580::/32
2607:fce8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21918
30600
63242
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:22:6c:69:e4:ab:91:61:c5:1d:f4:62:4f:58:82:3e:3d:0b:
4c:06:8e:13:fa:a9:43:f5:d9:70:35:dd:72:40:6a:d4:79:8a:
69:9f:d5:2b:63:78:dc:7d:b4:9c:1b:86:af:62:f0:4f:b6:18:
da:3a:fe:cb:c1:3c:89:84:6e:92:13:d0:24:cd:be:91:c5:f5:
cb:2c:3d:2c:62:bd:48:bd:91:58:cf:39:aa:2d:c4:2b:62:4c:
52:ad:8b:a4:d7:53:fc:b1:20:91:26:bb:d6:2b:3f:4b:56:4c:
94:18:49:0d:74:af:b9:0f:08:3a:e6:4c:0d:38:21:bf:02:34:
a7:48:30:14:f6:bc:a9:34:59:c1:0b:29:69:f7:c3:f7:b1:b0:
6a:af:d5:36:a7:9d:80:fd:f3:bd:78:7d:71:15:3b:19:e4:d0:
8d:7a:eb:dc:5c:fe:4b:dc:7b:85:2a:54:c4:e4:4b:55:85:2b:
07:7e:66:db:6f:12:8e:7e:19:d0:c7:fd:c2:6f:88:49:16:bf:
dc:44:c4:52:e5:a6:fd:45:16:33:ff:78:a6:55:09:71:a9:16:
b3:2e:7a:d4:75:a7:67:4e:35:b9:81:dc:20:a2:a4:59:39:37:
2d:ff:53:f3:77:e5:e6:b0:ae:42:e6:c3:3e:9e:f9:1c:34:c9:
de:64:b0:0d
-----BEGIN CERTIFICATE-----
MIIH4TCCBsmgAwIBAgIUAQ0Mn0MoWEHkg0rPK+tl9kW3/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYwMTE5MDYzOVowLzEtMCsGA1UEAxMk
YjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZkNzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dwzVc2OsrBkeZyg5YYZcIeORY/9+O6hj60n
FB6VIvZVBQhj6m3J8vQJ19hR2BxOZO4qbpOkWJGdzqKd7Hf+18yskCCsSUXXQcVA
7seHdhq0OntYRxH04JeNazrPpBcl1wq7cX/ZbbNmrN9rfvBrpcJUIVPx7S4rMAWa
HS5lBy9jYQhLraOye6ENzW4R20GzvOcqvxQXo2FL6nfILNHUJKVuCtoPIiaebmpP
THETn5pKOvc9t33beVpKAv7Cbz8Mb9s+dkK6YU6a2rqL5B5Q/NwkWqE5OAs6wiAr
6R9+p5r6J+yLJ58HOY+CHbKjBnCM7ZZSJL2yPhnc2u443Lx3wwIDAQABo4IE8zCC
BO8wHQYDVR0OBBYEFOvpVxpdqULaUbLUioB6+ltR2lLiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i
NzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I3MWY5ZTRmLTQyNmMtNGQ1YS05
MGNiLTVlY2Y0MzZmZDc3My9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2
ZmQ3NzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwge4GCCsGAQUF
BwEHAQH/BIHeMIHbMIG8BAIAATCBtQMDAC5uAwQDNJAgAwQDNJBwMAwDBAdFroAD
BARFrqADBANo2pADBANo/tgDBAOLPHgDBASTXGADBAaVmgADBAaYdUADBAOi0yAD
BAOi3dgDBAOsVxADBAS4qqADBAPARbADBADAwyQDBAPAxjgDBAbD/MADBAPHG/gD
BALHMFwDBAPHQkADBAPHqEgDBAPHzFADBAPO4UgDBAXQJuADBAPQQKgDBAbYUgAD
BAXYraADBAbZtMAwGgQCAAIwFAMEACYD0AMFACYGVYADBQAmB/zoMCIGCCsGAQUF
BwEIAQH/BBMwEaAPMA0CAlWeAgJ3iAIDAPcKMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACgibGnkq5FhxR30
Yk9Ygj49C0wGjhP6qUP12XA13XJAatR5immf1StjeNx9tJwbhq9i8E+2GNo6/svB
PImEbpIT0CTNvpHF9cssPSxivUi9kVjPOaotxCtiTFKti6TXU/yxIJEmu9YrP0tW
TJQYSQ10r7kPCDrmTA04Ib8CNKdIMBT2vKk0WcELKWn3w/exsGqv1TannYD98714
fXEVOxnk0I1669xc/kvce4UqVMTkS1WFKwd+ZttvEo5+GdDH/cJviEkWv9xExFLl
pv1FFjP/eKZVCXGpFrMuetR1p2dONbmB3CCipFk5Ny3/U/N35eawrkLmwz6e+Rw0
yd5ksA0=
-----END CERTIFICATE-----
Generated at Sun May 12 15:05:36 2024 by rpki-client on console-fra.rpki-client.org