Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
File: 2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer (raw, json)
Hash identifier: Fx95H5pm/9otep6mFk097SmTvS57ABJAmxbafWNdET8=
Subject key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584919ADE54F223F1270E5513180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 06 Mar 2025 17:39:25 +0000
Certificate not after: Fri 08 May 2026 00:45:21 +0000
Subordinate resources: AS: 14061
AS: 46652
AS: 62567
AS: 393406
AS: 394362
IP: 24.144.64.0/18
IP: 24.199.64.0/18
IP: 45.55.0.0/16
IP: 64.23.128.0/17
IP: 64.225.0.0/17
IP: 64.226.64.0/18
IP: 64.227.0.0 -- 64.227.191.255
IP: 67.205.128.0/18
IP: 67.207.64.0/19
IP: 68.183.0.0/16
IP: 69.55.48.0/20
IP: 104.131.0.0/16
IP: 104.236.0.0/16
IP: 104.248.0.0/16
IP: 107.170.0.0/16
IP: 129.212.128.0/17
IP: 134.122.0.0/17
IP: 134.199.128.0/17
IP: 134.209.0.0/16
IP: 137.184.0.0/16
IP: 138.68.0.0/16
IP: 138.197.0.0/16
IP: 142.93.0.0/16
IP: 143.110.128.0/17
IP: 143.198.0.0/16
IP: 143.244.128.0/17
IP: 144.126.192.0/18
IP: 146.190.0.0/16
IP: 147.182.128.0/17
IP: 152.42.128.0/17
IP: 157.230.0.0/16
IP: 157.245.0.0/16
IP: 159.65.0.0/16
IP: 159.89.0.0/16
IP: 159.203.0.0/16
IP: 159.223.0.0/16
IP: 161.35.0.0/16
IP: 162.243.0.0/16
IP: 164.90.128.0/17
IP: 164.92.64.0 -- 164.92.255.255
IP: 165.22.0.0/16
IP: 165.227.0.0/16
IP: 165.232.32.0 -- 165.232.191.255
IP: 167.71.0.0/16
IP: 167.99.0.0/16
IP: 168.144.0.0/16
IP: 170.64.128.0/17
IP: 174.138.0.0/17
IP: 192.34.56.0/21
IP: 192.81.208.0/20
IP: 192.241.128.0/17
IP: 198.199.64.0/18
IP: 198.211.96.0/19
IP: 198.232.147.0/24
IP: 199.4.223.0/24
IP: 204.48.16.0/20
IP: 206.81.0.0/19
IP: 206.189.0.0/16
IP: 207.154.192.0/18
IP: 208.68.36.0/22
IP: 209.38.0.0/16
IP: 209.97.128.0/18
IP: 2604:a880::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:ad:e5:4f:22:3f:12:70:e5:51:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Mar 6 17:39:25 2025 GMT
Not After : May 8 00:45:21 2026 GMT
Subject: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:b2:53:c6:53:a5:a0:17:19:00:69:67:bd:
7a:85:25:4b:8a:34:b6:19:47:0c:26:a8:11:bb:26:
49:f7:b3:5f:60:c7:64:44:b1:e6:f2:49:fb:b9:37:
ca:9b:6b:20:a4:ee:ee:10:4f:bd:bf:de:db:9b:30:
e6:8e:fd:c6:b7:9b:45:fa:5d:89:c2:82:1d:2c:8a:
5a:04:da:bc:f1:38:e5:e6:2c:b7:6f:60:d9:ea:b7:
cb:8f:3a:de:46:b6:23:c1:1e:82:8d:2e:36:b1:38:
aa:3f:ef:b5:f1:ed:7f:80:dd:a0:63:2b:89:36:b6:
5d:ca:2b:7f:1c:25:41:c4:f9:3c:dc:95:30:f5:57:
6a:d5:f8:e7:cc:d9:82:28:8e:6a:48:83:a2:98:40:
14:46:ed:56:c7:89:ca:f4:c0:f8:13:cd:ef:b1:de:
24:27:37:75:b0:1d:62:3f:af:66:12:c5:0f:0a:6a:
68:26:11:43:5e:ae:a1:41:c5:03:87:33:8e:20:9c:
af:4f:e6:e0:11:9a:a2:38:1b:61:50:8a:a6:e1:3f:
66:24:6e:f7:51:e4:46:e8:eb:87:56:d7:ff:8c:fe:
4c:d9:2c:bf:73:b0:86:94:96:7e:5f:94:3d:fc:75:
48:4c:5e:3c:bf:13:df:6d:fe:0a:46:f4:1e:33:7a:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.64.0/18
24.199.64.0/18
45.55.0.0/16
64.23.128.0/17
64.225.0.0/17
64.226.64.0/18
64.227.0.0-64.227.191.255
67.205.128.0/18
67.207.64.0/19
68.183.0.0/16
69.55.48.0/20
104.131.0.0/16
104.236.0.0/16
104.248.0.0/16
107.170.0.0/16
129.212.128.0/17
134.122.0.0/17
134.199.128.0/17
134.209.0.0/16
137.184.0.0/16
138.68.0.0/16
138.197.0.0/16
142.93.0.0/16
143.110.128.0/17
143.198.0.0/16
143.244.128.0/17
144.126.192.0/18
146.190.0.0/16
147.182.128.0/17
152.42.128.0/17
157.230.0.0/16
157.245.0.0/16
159.65.0.0/16
159.89.0.0/16
159.203.0.0/16
159.223.0.0/16
161.35.0.0/16
162.243.0.0/16
164.90.128.0/17
164.92.64.0-164.92.255.255
165.22.0.0/16
165.227.0.0/16
165.232.32.0-165.232.191.255
167.71.0.0/16
167.99.0.0/16
168.144.0.0/16
170.64.128.0/17
174.138.0.0/17
192.34.56.0/21
192.81.208.0/20
192.241.128.0/17
198.199.64.0/18
198.211.96.0/19
198.232.147.0/24
199.4.223.0/24
204.48.16.0/20
206.81.0.0/19
206.189.0.0/16
207.154.192.0/18
208.68.36.0/22
209.38.0.0/16
209.97.128.0/18
IPv6:
2604:a880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14061
46652
62567
393406
394362
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:6b:ad:ca:34:28:c6:ea:55:4c:b4:b9:87:cc:23:c4:6d:ab:
c0:4d:b9:e6:10:c6:a5:45:f7:28:a8:01:a9:76:92:02:fd:21:
7f:e8:b5:3d:99:89:15:4e:43:9d:13:12:d2:88:2a:74:71:d9:
19:00:6f:41:73:4d:d8:80:16:9e:6f:38:ea:94:a7:a0:ea:fa:
52:2d:c4:d7:9d:24:8f:f0:99:85:8d:27:3c:c3:7c:ff:36:af:
46:ed:4e:e1:e7:2e:92:b2:40:12:97:11:24:43:25:f2:37:b7:
e2:01:4d:a8:d4:07:aa:4f:15:13:50:00:f5:f7:1d:b6:2b:8c:
a1:24:e4:65:a8:74:f1:33:ae:6a:d3:54:df:b6:38:00:7d:97:
60:52:c6:fd:1e:86:26:4b:15:2c:80:1c:d9:b6:ca:ff:38:7f:
a3:2e:a2:f4:58:18:50:26:e8:69:de:a7:3b:66:0b:26:32:3b:
c7:18:76:e7:55:39:f9:56:04:82:f5:e9:7b:c6:49:aa:5e:2a:
8f:b5:31:41:9d:a9:1c:c4:b0:87:6e:6b:a3:61:96:cc:47:09:
02:03:54:79:7b:c0:ea:1a:cd:65:22:00:bb:f3:c7:07:8c:fb:
98:e0:e5:fe:52:95:81:5a:56:eb:3e:58:c6:f4:0a:c4:68:17:
4f:f6:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:45 2025 by rpki-client