Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
File: 4e95a28e-27fe-479a-b086-2cc9809d54f6.cer (download)
Hash identifier: 3sdE7ozQTinQL77bR8TvpUAgX8czkySRh7RMmVfrTSI=
Subject key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328583F710721934ED0C72A1DB40D80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate valid until: Sun 05 Jan 2025 01:45:10 +0000
Subordinate resources:
1: AS: 6161
2: AS: 7015 -- 7016
3: AS: 7725
4: AS: 7757
5: AS: 7853
6: AS: 7922
7: AS: 11025
8: AS: 13367
9: AS: 13385
10: AS: 14668
11: AS: 16748
12: AS: 20214
13: AS: 21508
14: AS: 22258
15: AS: 22909
16: AS: 23253
17: AS: 23266
18: AS: 33287
19: AS: 33351
20: AS: 33489 -- 33491
21: AS: 33542
22: AS: 33650 -- 33668
23: AS: 36196
24: AS: 36377
25: AS: 36732 -- 36733
26: AS: 53297
27: AS: 393232
28: AS: 395974
29: AS: 395976
30: AS: 395980
31: AS: 396017
32: AS: 396019
33: AS: 396021
34: AS: 396415
35: IP: 23.24.0.0/15
36: IP: 23.30.0.0/15
37: IP: 23.68.0.0/14
38: IP: 24.0.0.0 -- 24.23.255.255
39: IP: 24.30.0.0/17
40: IP: 24.34.0.0/16
41: IP: 24.40.0.0 -- 24.40.79.255
42: IP: 24.60.0.0/14
43: IP: 24.91.0.0/16
44: IP: 24.98.0.0/15
45: IP: 24.104.0.0 -- 24.104.159.255
46: IP: 24.118.0.0/16
47: IP: 24.124.128.0 -- 24.129.127.255
48: IP: 24.130.0.0/15
49: IP: 24.147.0.0/16
50: IP: 24.149.128.0/17
51: IP: 24.153.64.0/19
52: IP: 24.218.0.0/16
53: IP: 24.245.0.0/18
54: IP: 50.73.0.0/16
55: IP: 50.76.0.0/14
56: IP: 50.128.0.0/9
57: IP: 64.56.32.0/19
58: IP: 64.78.64.0/18
59: IP: 64.139.64.0/19
60: IP: 64.235.160.0/19
61: IP: 65.34.128.0/17
62: IP: 65.96.0.0 -- 65.97.31.255
63: IP: 66.30.0.0/15
64: IP: 66.41.0.0/16
65: IP: 66.56.0.0/18
66: IP: 66.176.0.0/15
67: IP: 66.208.192.0/18
68: IP: 66.229.0.0/16
69: IP: 66.240.0.0/18
70: IP: 67.160.0.0/11
71: IP: 68.32.0.0/11
72: IP: 68.80.0.0/13
73: IP: 69.136.0.0/13
74: IP: 69.180.0.0/15
75: IP: 69.240.0.0/12
76: IP: 70.88.0.0/14
77: IP: 71.24.0.0/14
78: IP: 71.56.0.0/13
79: IP: 71.192.0.0/12
80: IP: 71.224.0.0/12
81: IP: 72.55.0.0/17
82: IP: 73.0.0.0/8
83: IP: 74.16.0.0/12
84: IP: 74.81.128.0/19
85: IP: 74.92.0.0/14
86: IP: 74.144.0.0/12
87: IP: 75.64.0.0 -- 75.75.191.255
88: IP: 75.144.0.0/13
89: IP: 76.16.0.0/12
90: IP: 76.96.0.0 -- 76.159.255.255
91: IP: 96.64.0.0 -- 96.124.255.255
92: IP: 96.128.0.0 -- 96.223.255.255
93: IP: 98.32.0.0/11
94: IP: 98.192.0.0/10
95: IP: 107.0.0.0 -- 107.5.255.255
96: IP: 108.171.224.0/20
97: IP: 162.17.0.0/16
98: IP: 162.148.0.0/14
99: IP: 169.152.0.0/16
100: IP: 172.244.0.0/16
101: IP: 173.8.0.0/13
102: IP: 173.160.0.0/13
103: IP: 174.48.0.0/12
104: IP: 174.160.0.0/11
105: IP: 184.108.0.0 -- 184.127.255.255
106: IP: 198.0.0.0/16
107: IP: 198.137.252.0/23
108: IP: 199.182.100.0/22
109: IP: 204.11.116.0/22
110: IP: 207.223.0.0/20
111: IP: 208.39.128.0/18
112: IP: 208.110.192.0/19
113: IP: 209.23.192.0/18
114: IP: 216.45.128.0/17
115: IP: 2001:558::/29
116: IP: 2601::/20
117: IP: 2603:2000:: -- 2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff
118: IP: 2604:6a00::/32
119: IP: 2620:fd:8000::/48
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:71:07:21:93:4e:d0:c7:2a:1d:b4:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Oct 3 00:45:10 2022 GMT
Not After : Jan 5 01:45:10 2025 GMT
Subject: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:8c:51:3c:d3:13:61:77:7f:4c:f9:9f:74:
1f:32:cf:0a:89:fa:5c:a0:ad:59:ab:4a:02:8d:45:
03:03:f4:98:3a:19:1e:a0:06:7b:16:8a:28:f0:00:
11:71:10:87:3e:78:50:6d:f8:54:1f:a1:02:b4:33:
e1:43:64:4e:0c:5c:94:53:d6:14:b0:bb:a9:2e:f6:
95:1d:12:54:76:26:1c:90:01:00:2f:df:ed:7f:0a:
68:bb:e5:e9:dc:c6:41:92:a1:85:67:46:47:a9:ef:
b0:cb:1e:a4:77:be:d5:d4:13:41:be:63:67:c6:76:
9f:bf:11:df:75:58:9f:93:00:0e:07:7c:99:e8:ba:
22:6d:00:62:47:fa:fa:92:21:5e:9f:e0:23:4b:15:
a5:14:21:92:ba:a7:d4:a9:f8:7e:d5:0f:1b:31:4f:
a5:ca:d6:6e:75:97:ff:e5:0d:e7:a2:c6:9c:1d:70:
05:9e:47:ac:18:eb:23:23:31:4f:e9:5c:f2:10:1d:
e0:f6:26:cc:86:e4:44:90:ed:89:89:68:e0:0c:04:
f7:80:d2:96:17:2b:c9:08:a3:4e:d3:9d:4a:87:bb:
68:3a:35:2e:e5:f9:9d:b9:8b:46:a6:fe:3d:bd:d3:
73:4f:dc:ec:93:92:dc:a5:d1:8c:a8:66:79:7c:b9:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.24.0.0/15
23.30.0.0/15
23.68.0.0/14
24.0.0.0-24.23.255.255
24.30.0.0/17
24.34.0.0/16
24.40.0.0-24.40.79.255
24.60.0.0/14
24.91.0.0/16
24.98.0.0/15
24.104.0.0-24.104.159.255
24.118.0.0/16
24.124.128.0-24.129.127.255
24.130.0.0/15
24.147.0.0/16
24.149.128.0/17
24.153.64.0/19
24.218.0.0/16
24.245.0.0/18
50.73.0.0/16
50.76.0.0/14
50.128.0.0/9
64.56.32.0/19
64.78.64.0/18
64.139.64.0/19
64.235.160.0/19
65.34.128.0/17
65.96.0.0-65.97.31.255
66.30.0.0/15
66.41.0.0/16
66.56.0.0/18
66.176.0.0/15
66.208.192.0/18
66.229.0.0/16
66.240.0.0/18
67.160.0.0/11
68.32.0.0/11
68.80.0.0/13
69.136.0.0/13
69.180.0.0/15
69.240.0.0/12
70.88.0.0/14
71.24.0.0/14
71.56.0.0/13
71.192.0.0/12
71.224.0.0/12
72.55.0.0/17
73.0.0.0/8
74.16.0.0/12
74.81.128.0/19
74.92.0.0/14
74.144.0.0/12
75.64.0.0-75.75.191.255
75.144.0.0/13
76.16.0.0/12
76.96.0.0-76.159.255.255
96.64.0.0-96.124.255.255
96.128.0.0-96.223.255.255
98.32.0.0/11
98.192.0.0/10
107.0.0.0-107.5.255.255
108.171.224.0/20
162.17.0.0/16
162.148.0.0/14
169.152.0.0/16
172.244.0.0/16
173.8.0.0/13
173.160.0.0/13
174.48.0.0/12
174.160.0.0/11
184.108.0.0-184.127.255.255
198.0.0.0/16
198.137.252.0/23
199.182.100.0/22
204.11.116.0/22
207.223.0.0/20
208.39.128.0/18
208.110.192.0/19
209.23.192.0/18
216.45.128.0/17
IPv6:
2001:558::/29
2601::/20
2603:2000::-2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff
2604:6a00::/32
2620:fd:8000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6161
7015-7016
7725
7757
7853
7922
11025
13367
13385
14668
16748
20214
21508
22258
22909
23253
23266
33287
33351
33489-33491
33542
33650-33668
36196
36377
36732-36733
53297
393232
395974
395976
395980
396017
396019
396021
396415
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:2c:3d:f9:41:0a:46:a9:5d:86:c7:0c:b2:66:b8:d3:b9:4d:
34:c3:1c:b4:a2:50:19:5c:d3:fd:61:10:5e:0c:76:1a:a9:74:
06:4c:a9:23:6e:ae:aa:55:ac:d0:4a:27:cb:e3:2e:85:11:97:
2c:08:af:94:ba:80:6c:cf:a2:c4:49:4f:cc:aa:e6:31:68:51:
74:ec:6d:82:a0:25:84:17:2e:13:1a:63:95:2b:03:56:96:46:
7c:32:b4:5e:80:b1:75:e2:e9:fe:e0:ee:f8:42:c7:82:0b:98:
88:11:6a:3d:df:ca:48:b7:dd:f7:dd:b1:d2:4c:84:4f:db:a1:
70:47:94:ba:27:70:02:86:fc:d8:96:47:d2:68:b6:e9:fa:ca:
fe:55:0d:5c:56:50:85:4e:d1:f7:7b:50:bb:e0:3d:08:62:3c:
7b:4e:75:ef:06:ca:13:84:98:04:c4:4a:c1:33:01:48:d9:21:
9b:d8:24:1b:15:27:d7:29:b7:c6:55:c6:84:68:07:e1:f7:1c:
80:8a:66:55:ae:65:5a:99:af:b1:be:09:aa:87:db:d7:dc:8f:
78:18:0b:ae:31:d1:69:07:e4:e1:df:d1:8b:03:48:88:24:0d:
6b:a7:0a:bc:0d:eb:27:28:4c:5a:7a:03:7b:4f:c3:78:91:74:
36:8a:99:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 6 16:55:49 2023 by rpki-client.