Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
File: 2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer (raw, json)
Hash identifier: 60QTL7omPbWokUnGtmusF8Mq7kFEKVW1NdKXu4hlXNI=
Subject key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858469F641B5C1FD833CE94C7BD80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 22 Jul 2024 12:48:15 +0000
Certificate not after: Fri 08 May 2026 00:45:21 +0000
Subordinate resources: AS: 14061
AS: 46652
AS: 62567
AS: 393406
AS: 394362
IP: 24.144.64.0/18
IP: 24.199.64.0/18
IP: 45.55.0.0/16
IP: 64.23.128.0/17
IP: 64.225.0.0/17
IP: 64.226.64.0/18
IP: 64.227.0.0 -- 64.227.191.255
IP: 67.205.128.0/18
IP: 67.207.64.0/19
IP: 68.183.0.0/16
IP: 69.55.48.0/20
IP: 104.131.0.0/16
IP: 104.236.0.0/16
IP: 104.248.0.0/16
IP: 107.170.0.0/16
IP: 134.122.0.0/17
IP: 134.199.128.0/17
IP: 134.209.0.0/16
IP: 137.184.0.0/16
IP: 138.68.0.0/16
IP: 138.197.0.0/16
IP: 142.93.0.0/16
IP: 143.110.128.0/17
IP: 143.198.0.0/16
IP: 143.244.128.0/17
IP: 144.126.192.0/18
IP: 146.190.0.0/16
IP: 147.182.128.0/17
IP: 152.42.128.0/17
IP: 157.230.0.0/16
IP: 157.245.0.0/16
IP: 159.65.0.0/16
IP: 159.89.0.0/16
IP: 159.203.0.0/16
IP: 159.223.0.0/16
IP: 161.35.0.0/16
IP: 162.243.0.0/16
IP: 164.90.128.0/17
IP: 164.92.64.0 -- 164.92.255.255
IP: 165.22.0.0/16
IP: 165.227.0.0/16
IP: 165.232.32.0 -- 165.232.191.255
IP: 167.71.0.0/16
IP: 167.99.0.0/16
IP: 168.144.0.0/16
IP: 170.64.128.0/17
IP: 174.138.0.0/17
IP: 192.34.56.0/21
IP: 192.81.208.0/20
IP: 192.241.128.0/17
IP: 198.199.64.0/18
IP: 198.211.96.0/19
IP: 198.232.147.0/24
IP: 199.4.223.0/24
IP: 204.48.16.0/20
IP: 206.81.0.0/19
IP: 206.189.0.0/16
IP: 207.154.192.0/18
IP: 208.68.36.0/22
IP: 209.38.0.0/16
IP: 209.97.128.0/18
IP: 2604:a880::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 25 Nov 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:9f:64:1b:5c:1f:d8:33:ce:94:c7:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jul 22 12:48:15 2024 GMT
Not After : May 8 00:45:21 2026 GMT
Subject: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:b2:53:c6:53:a5:a0:17:19:00:69:67:bd:
7a:85:25:4b:8a:34:b6:19:47:0c:26:a8:11:bb:26:
49:f7:b3:5f:60:c7:64:44:b1:e6:f2:49:fb:b9:37:
ca:9b:6b:20:a4:ee:ee:10:4f:bd:bf:de:db:9b:30:
e6:8e:fd:c6:b7:9b:45:fa:5d:89:c2:82:1d:2c:8a:
5a:04:da:bc:f1:38:e5:e6:2c:b7:6f:60:d9:ea:b7:
cb:8f:3a:de:46:b6:23:c1:1e:82:8d:2e:36:b1:38:
aa:3f:ef:b5:f1:ed:7f:80:dd:a0:63:2b:89:36:b6:
5d:ca:2b:7f:1c:25:41:c4:f9:3c:dc:95:30:f5:57:
6a:d5:f8:e7:cc:d9:82:28:8e:6a:48:83:a2:98:40:
14:46:ed:56:c7:89:ca:f4:c0:f8:13:cd:ef:b1:de:
24:27:37:75:b0:1d:62:3f:af:66:12:c5:0f:0a:6a:
68:26:11:43:5e:ae:a1:41:c5:03:87:33:8e:20:9c:
af:4f:e6:e0:11:9a:a2:38:1b:61:50:8a:a6:e1:3f:
66:24:6e:f7:51:e4:46:e8:eb:87:56:d7:ff:8c:fe:
4c:d9:2c:bf:73:b0:86:94:96:7e:5f:94:3d:fc:75:
48:4c:5e:3c:bf:13:df:6d:fe:0a:46:f4:1e:33:7a:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.64.0/18
24.199.64.0/18
45.55.0.0/16
64.23.128.0/17
64.225.0.0/17
64.226.64.0/18
64.227.0.0-64.227.191.255
67.205.128.0/18
67.207.64.0/19
68.183.0.0/16
69.55.48.0/20
104.131.0.0/16
104.236.0.0/16
104.248.0.0/16
107.170.0.0/16
134.122.0.0/17
134.199.128.0/17
134.209.0.0/16
137.184.0.0/16
138.68.0.0/16
138.197.0.0/16
142.93.0.0/16
143.110.128.0/17
143.198.0.0/16
143.244.128.0/17
144.126.192.0/18
146.190.0.0/16
147.182.128.0/17
152.42.128.0/17
157.230.0.0/16
157.245.0.0/16
159.65.0.0/16
159.89.0.0/16
159.203.0.0/16
159.223.0.0/16
161.35.0.0/16
162.243.0.0/16
164.90.128.0/17
164.92.64.0-164.92.255.255
165.22.0.0/16
165.227.0.0/16
165.232.32.0-165.232.191.255
167.71.0.0/16
167.99.0.0/16
168.144.0.0/16
170.64.128.0/17
174.138.0.0/17
192.34.56.0/21
192.81.208.0/20
192.241.128.0/17
198.199.64.0/18
198.211.96.0/19
198.232.147.0/24
199.4.223.0/24
204.48.16.0/20
206.81.0.0/19
206.189.0.0/16
207.154.192.0/18
208.68.36.0/22
209.38.0.0/16
209.97.128.0/18
IPv6:
2604:a880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14061
46652
62567
393406
394362
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:71:85:40:b6:b9:a6:43:d4:bf:b9:22:a8:8f:b2:44:5b:79:
5e:f0:b1:0d:bb:2c:9c:b6:61:c2:c7:0a:72:4b:60:a3:78:21:
a1:bc:24:56:34:68:5c:d1:f1:f7:c9:9a:07:00:43:05:de:bd:
d4:73:5d:6a:9a:f5:be:e0:e5:7f:e9:62:cf:3b:2d:14:b2:3a:
6d:6f:0c:32:bf:1f:16:e0:a9:8d:98:eb:8b:cc:c3:35:8a:4e:
ab:85:e5:71:ae:26:05:ba:b5:07:a9:cf:17:df:09:e5:62:17:
06:af:3c:29:47:6a:93:09:98:ce:fc:8e:be:08:92:ce:3e:a2:
f4:2f:7b:06:df:41:60:96:83:36:7a:f0:28:f6:34:24:89:40:
a0:33:75:ea:60:c2:8e:b1:e0:44:6b:c7:9b:bc:e6:69:4b:9b:
9c:c2:e3:42:15:16:80:c7:68:02:3c:a6:fc:d2:aa:85:0a:d5:
75:d1:3d:23:84:3d:a2:db:c4:83:60:34:8f:d8:93:2c:d5:80:
00:f3:12:56:26:3e:a4:55:9c:ea:07:e6:be:90:6f:87:c2:6f:
9b:eb:bb:3d:a5:10:3a:51:89:cb:1e:99:fb:3c:58:ee:bf:8a:
f2:d1:85:d5:6c:e9:e3:2f:26:33:fb:0a:4e:7f:bb:6b:42:8a:
49:e7:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:38:26 2024 by rpki-client on console-fra.rpki-client.org