Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
File: 2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer (raw, json)
Hash identifier: Ms0daT0x3mMPnq+b3PVKUcESfoZpE3dGTmuxglkgCqY=
Subject key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F43285844C382D2D07EB7E92DE194FCD0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 03 Feb 2024 01:45:21 +0000
Certificate not after: Fri 08 May 2026 00:45:21 +0000
Subordinate resources: AS: 14061
AS: 62567
AS: 393406
AS: 394362
IP: 24.144.64.0/18
IP: 24.199.64.0/18
IP: 45.55.0.0/16
IP: 64.23.128.0/17
IP: 64.225.0.0/17
IP: 64.226.64.0/18
IP: 64.227.0.0 -- 64.227.191.255
IP: 67.205.128.0/18
IP: 67.207.64.0/19
IP: 68.183.0.0/16
IP: 104.131.0.0/16
IP: 104.236.0.0/16
IP: 104.248.0.0/16
IP: 107.170.0.0/16
IP: 134.122.0.0/17
IP: 134.199.128.0/17
IP: 134.209.0.0/16
IP: 137.184.0.0/16
IP: 138.68.0.0/16
IP: 138.197.0.0/16
IP: 142.93.0.0/16
IP: 143.110.128.0/17
IP: 143.198.0.0/16
IP: 143.244.128.0/17
IP: 144.126.192.0/18
IP: 146.190.0.0/16
IP: 147.182.128.0/17
IP: 152.42.128.0/17
IP: 157.230.0.0/16
IP: 157.245.0.0/16
IP: 159.65.0.0/16
IP: 159.89.0.0/16
IP: 159.203.0.0/16
IP: 159.223.0.0/16
IP: 161.35.0.0/16
IP: 162.243.0.0/16
IP: 164.90.128.0/17
IP: 164.92.64.0 -- 164.92.255.255
IP: 165.22.0.0/16
IP: 165.227.0.0/16
IP: 165.232.32.0 -- 165.232.191.255
IP: 167.71.0.0/16
IP: 167.99.0.0/16
IP: 168.144.0.0/16
IP: 170.64.128.0/17
IP: 174.138.0.0/17
IP: 192.34.56.0/21
IP: 192.81.208.0/20
IP: 192.241.128.0/17
IP: 198.199.64.0/18
IP: 198.211.96.0/19
IP: 198.232.147.0/24
IP: 199.4.223.0/24
IP: 204.48.16.0/20
IP: 206.81.0.0/19
IP: 206.189.0.0/16
IP: 207.154.192.0/18
IP: 208.68.36.0/22
IP: 209.38.0.0/16
IP: 209.97.128.0/18
IP: 2604:a880::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 27 Apr 2024 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c3:82:d2:d0:7e:b7:e9:2d:e1:94:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Feb 3 01:45:21 2024 GMT
Not After : May 8 00:45:21 2026 GMT
Subject: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:b2:53:c6:53:a5:a0:17:19:00:69:67:bd:
7a:85:25:4b:8a:34:b6:19:47:0c:26:a8:11:bb:26:
49:f7:b3:5f:60:c7:64:44:b1:e6:f2:49:fb:b9:37:
ca:9b:6b:20:a4:ee:ee:10:4f:bd:bf:de:db:9b:30:
e6:8e:fd:c6:b7:9b:45:fa:5d:89:c2:82:1d:2c:8a:
5a:04:da:bc:f1:38:e5:e6:2c:b7:6f:60:d9:ea:b7:
cb:8f:3a:de:46:b6:23:c1:1e:82:8d:2e:36:b1:38:
aa:3f:ef:b5:f1:ed:7f:80:dd:a0:63:2b:89:36:b6:
5d:ca:2b:7f:1c:25:41:c4:f9:3c:dc:95:30:f5:57:
6a:d5:f8:e7:cc:d9:82:28:8e:6a:48:83:a2:98:40:
14:46:ed:56:c7:89:ca:f4:c0:f8:13:cd:ef:b1:de:
24:27:37:75:b0:1d:62:3f:af:66:12:c5:0f:0a:6a:
68:26:11:43:5e:ae:a1:41:c5:03:87:33:8e:20:9c:
af:4f:e6:e0:11:9a:a2:38:1b:61:50:8a:a6:e1:3f:
66:24:6e:f7:51:e4:46:e8:eb:87:56:d7:ff:8c:fe:
4c:d9:2c:bf:73:b0:86:94:96:7e:5f:94:3d:fc:75:
48:4c:5e:3c:bf:13:df:6d:fe:0a:46:f4:1e:33:7a:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.64.0/18
24.199.64.0/18
45.55.0.0/16
64.23.128.0/17
64.225.0.0/17
64.226.64.0/18
64.227.0.0-64.227.191.255
67.205.128.0/18
67.207.64.0/19
68.183.0.0/16
104.131.0.0/16
104.236.0.0/16
104.248.0.0/16
107.170.0.0/16
134.122.0.0/17
134.199.128.0/17
134.209.0.0/16
137.184.0.0/16
138.68.0.0/16
138.197.0.0/16
142.93.0.0/16
143.110.128.0/17
143.198.0.0/16
143.244.128.0/17
144.126.192.0/18
146.190.0.0/16
147.182.128.0/17
152.42.128.0/17
157.230.0.0/16
157.245.0.0/16
159.65.0.0/16
159.89.0.0/16
159.203.0.0/16
159.223.0.0/16
161.35.0.0/16
162.243.0.0/16
164.90.128.0/17
164.92.64.0-164.92.255.255
165.22.0.0/16
165.227.0.0/16
165.232.32.0-165.232.191.255
167.71.0.0/16
167.99.0.0/16
168.144.0.0/16
170.64.128.0/17
174.138.0.0/17
192.34.56.0/21
192.81.208.0/20
192.241.128.0/17
198.199.64.0/18
198.211.96.0/19
198.232.147.0/24
199.4.223.0/24
204.48.16.0/20
206.81.0.0/19
206.189.0.0/16
207.154.192.0/18
208.68.36.0/22
209.38.0.0/16
209.97.128.0/18
IPv6:
2604:a880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14061
62567
393406
394362
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:1a:cb:66:dc:f4:98:d4:fb:a6:31:3c:51:df:cf:96:dd:4a:
6e:3f:19:2f:f8:d3:4e:59:d8:08:57:fb:48:99:95:be:be:5d:
e0:c2:95:14:c7:8c:a2:f3:43:d7:14:e1:d5:83:b9:c5:ca:89:
79:01:7e:aa:2e:69:25:e8:a5:a2:d8:b7:e9:06:79:e9:65:42:
70:54:da:e1:0b:33:0e:84:15:0e:8c:66:94:7d:97:ee:80:f5:
07:5b:93:ff:da:b6:b5:f3:79:da:d9:0a:47:ab:eb:8a:f2:1b:
02:88:55:7a:fd:05:29:8a:4a:e9:f3:03:f1:dd:bb:d1:9d:a9:
1e:a7:54:6f:71:ae:a6:7f:27:e2:c7:42:04:36:40:18:57:de:
16:ec:bc:49:c9:10:eb:b2:ce:6e:ec:96:d9:cf:ec:9b:ff:f8:
68:38:ec:84:76:e4:c7:b1:da:b1:58:60:1c:fd:e3:0c:c5:21:
ac:d8:d0:bb:24:0e:f8:56:3b:21:ef:14:2b:7e:7e:bf:1f:a6:
f7:5d:4f:7c:3a:9b:d1:23:a5:9e:8e:b8:97:91:2b:23:f3:1c:
fd:70:bb:b4:87:35:eb:31:d0:6a:4f:fe:55:e3:84:6f:a9:9d:
20:e0:dc:11:c9:26:34:e8:45:11:5b:56:6f:d9:f8:5e:8a:ba:
3d:5c:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:26:18 2024 by rpki-client on console-fra.rpki-client.org