Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
File: 4e95a28e-27fe-479a-b086-2cc9809d54f6.cer (raw, json)
Hash identifier: fZJ8F8cNKZFur5MORyDPx0IvI2dpfUZBE/AxdOznALg=
Subject key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858464D077C80475AF79888540C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 23 Jun 2024 00:45:20 +0000
Certificate not after: Sat 26 Sep 2026 00:45:20 +0000
Subordinate resources: AS: 6161
AS: 7015 -- 7016
AS: 7725
AS: 7757
AS: 7853
AS: 7922
AS: 11025
AS: 13367
AS: 13385
AS: 14668
AS: 16748
AS: 20214
AS: 21508
AS: 22258
AS: 22909
AS: 23253
AS: 23266
AS: 33287
AS: 33351
AS: 33489 -- 33491
AS: 33542
AS: 33650 -- 33668
AS: 36196
AS: 36377
AS: 36732 -- 36733
AS: 53297
AS: 393232
AS: 395974
AS: 395976
AS: 395980
AS: 396017
AS: 396019
AS: 396021
AS: 396415
IP: 23.24.0.0/15
IP: 23.30.0.0/15
IP: 23.68.0.0/14
IP: 24.0.0.0 -- 24.23.255.255
IP: 24.30.0.0/17
IP: 24.34.0.0/16
IP: 24.40.0.0 -- 24.40.79.255
IP: 24.60.0.0/14
IP: 24.91.0.0/16
IP: 24.98.0.0/15
IP: 24.104.0.0 -- 24.104.159.255
IP: 24.118.0.0/16
IP: 24.124.128.0 -- 24.129.127.255
IP: 24.130.0.0/15
IP: 24.147.0.0/16
IP: 24.149.128.0/17
IP: 24.153.64.0/19
IP: 24.218.0.0/16
IP: 24.245.0.0/18
IP: 50.73.0.0/16
IP: 50.76.0.0/14
IP: 50.128.0.0/9
IP: 64.56.32.0/19
IP: 64.78.64.0/18
IP: 64.139.64.0/19
IP: 64.235.160.0/19
IP: 65.34.128.0/17
IP: 65.96.0.0 -- 65.97.31.255
IP: 66.30.0.0/15
IP: 66.41.0.0/16
IP: 66.56.0.0/18
IP: 66.176.0.0/15
IP: 66.208.192.0/18
IP: 66.229.0.0/16
IP: 66.240.0.0/18
IP: 67.160.0.0/11
IP: 68.32.0.0/11
IP: 68.80.0.0/13
IP: 69.136.0.0/13
IP: 69.180.0.0/15
IP: 69.240.0.0/12
IP: 70.88.0.0/14
IP: 71.24.0.0/14
IP: 71.56.0.0/13
IP: 71.192.0.0/12
IP: 71.224.0.0/12
IP: 72.55.0.0/17
IP: 73.0.0.0/8
IP: 74.16.0.0/12
IP: 74.81.128.0/19
IP: 74.92.0.0/14
IP: 75.64.0.0 -- 75.75.191.255
IP: 75.144.0.0/13
IP: 76.16.0.0/12
IP: 76.96.0.0 -- 76.159.255.255
IP: 96.64.0.0 -- 96.124.255.255
IP: 96.128.0.0 -- 96.223.255.255
IP: 98.32.0.0/11
IP: 98.192.0.0/10
IP: 107.0.0.0 -- 107.5.255.255
IP: 108.171.224.0/20
IP: 162.17.0.0/16
IP: 162.148.0.0/14
IP: 169.152.0.0/16
IP: 172.244.0.0/16
IP: 173.8.0.0/13
IP: 173.160.0.0/13
IP: 174.48.0.0/12
IP: 174.160.0.0/11
IP: 184.108.0.0 -- 184.127.255.255
IP: 198.0.0.0/16
IP: 198.137.252.0/23
IP: 199.182.100.0/22
IP: 204.11.116.0/22
IP: 207.223.0.0/20
IP: 208.39.128.0/18
IP: 208.110.192.0/19
IP: 209.23.192.0/18
IP: 216.45.128.0/17
IP: 2001:558::/29
IP: 2601::/20
IP: 2603:2000:: -- 2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff
IP: 2604:6a00::/32
IP: 2620:fd:8000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Jul 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:4d:07:7c:80:47:5a:f7:98:88:54:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jun 23 00:45:20 2024 GMT
Not After : Sep 26 00:45:20 2026 GMT
Subject: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:8c:51:3c:d3:13:61:77:7f:4c:f9:9f:74:
1f:32:cf:0a:89:fa:5c:a0:ad:59:ab:4a:02:8d:45:
03:03:f4:98:3a:19:1e:a0:06:7b:16:8a:28:f0:00:
11:71:10:87:3e:78:50:6d:f8:54:1f:a1:02:b4:33:
e1:43:64:4e:0c:5c:94:53:d6:14:b0:bb:a9:2e:f6:
95:1d:12:54:76:26:1c:90:01:00:2f:df:ed:7f:0a:
68:bb:e5:e9:dc:c6:41:92:a1:85:67:46:47:a9:ef:
b0:cb:1e:a4:77:be:d5:d4:13:41:be:63:67:c6:76:
9f:bf:11:df:75:58:9f:93:00:0e:07:7c:99:e8:ba:
22:6d:00:62:47:fa:fa:92:21:5e:9f:e0:23:4b:15:
a5:14:21:92:ba:a7:d4:a9:f8:7e:d5:0f:1b:31:4f:
a5:ca:d6:6e:75:97:ff:e5:0d:e7:a2:c6:9c:1d:70:
05:9e:47:ac:18:eb:23:23:31:4f:e9:5c:f2:10:1d:
e0:f6:26:cc:86:e4:44:90:ed:89:89:68:e0:0c:04:
f7:80:d2:96:17:2b:c9:08:a3:4e:d3:9d:4a:87:bb:
68:3a:35:2e:e5:f9:9d:b9:8b:46:a6:fe:3d:bd:d3:
73:4f:dc:ec:93:92:dc:a5:d1:8c:a8:66:79:7c:b9:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.24.0.0/15
23.30.0.0/15
23.68.0.0/14
24.0.0.0-24.23.255.255
24.30.0.0/17
24.34.0.0/16
24.40.0.0-24.40.79.255
24.60.0.0/14
24.91.0.0/16
24.98.0.0/15
24.104.0.0-24.104.159.255
24.118.0.0/16
24.124.128.0-24.129.127.255
24.130.0.0/15
24.147.0.0/16
24.149.128.0/17
24.153.64.0/19
24.218.0.0/16
24.245.0.0/18
50.73.0.0/16
50.76.0.0/14
50.128.0.0/9
64.56.32.0/19
64.78.64.0/18
64.139.64.0/19
64.235.160.0/19
65.34.128.0/17
65.96.0.0-65.97.31.255
66.30.0.0/15
66.41.0.0/16
66.56.0.0/18
66.176.0.0/15
66.208.192.0/18
66.229.0.0/16
66.240.0.0/18
67.160.0.0/11
68.32.0.0/11
68.80.0.0/13
69.136.0.0/13
69.180.0.0/15
69.240.0.0/12
70.88.0.0/14
71.24.0.0/14
71.56.0.0/13
71.192.0.0/12
71.224.0.0/12
72.55.0.0/17
73.0.0.0/8
74.16.0.0/12
74.81.128.0/19
74.92.0.0/14
75.64.0.0-75.75.191.255
75.144.0.0/13
76.16.0.0/12
76.96.0.0-76.159.255.255
96.64.0.0-96.124.255.255
96.128.0.0-96.223.255.255
98.32.0.0/11
98.192.0.0/10
107.0.0.0-107.5.255.255
108.171.224.0/20
162.17.0.0/16
162.148.0.0/14
169.152.0.0/16
172.244.0.0/16
173.8.0.0/13
173.160.0.0/13
174.48.0.0/12
174.160.0.0/11
184.108.0.0-184.127.255.255
198.0.0.0/16
198.137.252.0/23
199.182.100.0/22
204.11.116.0/22
207.223.0.0/20
208.39.128.0/18
208.110.192.0/19
209.23.192.0/18
216.45.128.0/17
IPv6:
2001:558::/29
2601::/20
2603:2000::-2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff
2604:6a00::/32
2620:fd:8000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6161
7015-7016
7725
7757
7853
7922
11025
13367
13385
14668
16748
20214
21508
22258
22909
23253
23266
33287
33351
33489-33491
33542
33650-33668
36196
36377
36732-36733
53297
393232
395974
395976
395980
396017
396019
396021
396415
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:4a:93:eb:10:53:2a:f2:cd:4c:5e:54:9f:9a:33:87:bf:93:
3e:f7:29:9e:00:3d:17:a5:96:dd:cd:7e:6b:66:b3:8e:16:74:
f3:a2:2c:7f:8b:d0:59:b1:9d:34:2e:64:38:8f:7c:3b:af:c2:
be:8c:7f:37:93:b6:16:e8:85:22:1f:45:70:2f:95:2e:38:de:
1d:80:e2:c5:6c:5c:49:d0:6b:e6:36:7a:89:1f:70:1c:db:a8:
10:9f:e7:25:6d:f5:23:44:13:29:1c:c0:5a:11:f5:85:ea:93:
0f:8e:7d:1e:d3:f2:c6:2c:1d:21:31:3f:b1:67:04:86:f3:e6:
9d:9e:a9:db:cb:1c:e7:f2:53:83:41:ab:41:ef:b4:7f:b6:7d:
e0:01:ec:41:5a:c9:8f:f5:d6:a4:0e:d6:0a:4d:9b:35:17:6d:
86:2b:6a:61:cb:c3:b2:f5:17:45:a0:78:33:e8:36:07:ec:ef:
83:e7:2f:ca:07:7b:9e:f6:83:a5:a6:2c:02:7e:26:bd:b3:af:
42:71:ab:4b:5c:d0:b2:c8:3f:91:40:26:17:d4:be:88:da:ca:
e9:4b:b1:aa:8e:ff:5b:81:11:45:c8:f5:8b:3c:47:f3:19:db:
f3:54:b0:af:ad:b3:c8:8d:e6:17:bf:be:dd:2b:84:39:32:c1:
00:03:57:02
-----BEGIN CERTIFICATE-----
MIIJ5jCCCM6gAwIBAgIUAQ0Mn0MoWEZNB3yAR1r3mIhUDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDYyMzAwNDUyMFoXDTI2MDkyNjAwNDUyMFowLzEtMCsGA1UEAxMk
NGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1NGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lGMUTzTE2F3f0z5n3QfMs8KifpcoK1Zq0oC
jUUDA/SYOhkeoAZ7Fooo8AARcRCHPnhQbfhUH6ECtDPhQ2RODFyUU9YUsLupLvaV
HRJUdiYckAEAL9/tfwpou+Xp3MZBkqGFZ0ZHqe+wyx6kd77V1BNBvmNnxnafvxHf
dVifkwAOB3yZ6LoibQBiR/r6kiFen+AjSxWlFCGSuqfUqfh+1Q8bMU+lytZudZf/
5Q3nosacHXAFnkesGOsjIzFP6VzyEB3g9ibMhuREkO2JiWjgDAT3gNKWFyvJCKNO
051Kh7toOjUu5fmduYtGpv49vdNzT9zsk5LcpdGMqGZ5fLmO2QIDAQABo4IG+DCC
BvQwHQYDVR0OBBYEFFVDKDErohHpDGMqa8F+DdaSdj5hMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80
ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlOTVhMjhlLTI3ZmUtNDc5YS1i
MDg2LTJjYzk4MDlkNTRmNi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5
ZDU0ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwggJGBggrBgEF
BQcBBwEB/wSCAjUwggIxMIIB+gQCAAEwggHyAwMBFxgDAwEXHgMDAhdEMAkDAgMY
AwMDGBADBAcYHgADAwAYIjALAwMDGCgDBAQYKEADAwIYPAMDABhbAwMBGGIwCwMD
AxhoAwQFGGiAAwMAGHYwDAMEBxh8gAMEBxiBAAMDARiCAwMAGJMDBAcYlYADBAUY
mUADAwAY2gMEBhj1AAMDADJJAwMCMkwDAwcygAMEBUA4IAMEBkBOQAMEBUCLQAME
BUDroAMEB0EigDALAwMFQWADBAVBYQADAwFCHgMDAEIpAwQGQjgAAwMBQrADBAZC
0MADAwBC5QMEBkLwAAMDBUOgAwMFRCADAwNEUAMDA0WIAwMBRbQDAwRF8AMDAkZY
AwMCRxgDAwNHOAMDBEfAAwMER+ADBAdINwADAgBJAwMEShADBAVKUYADAwJKXDAL
AwMGS0ADBAZLS4ADAwNLkAMDBEwQMAoDAwVMYAMDBUyAMAoDAwZgQAMDAGB8MAoD
AwdggAMDBWDAAwMFYiADAwZiwDAJAwIAawMDAWsEAwQEbKvgAwMAohEDAwKilAMD
AKmYAwMArPQDAwOtCAMDA62gAwMErjADAwWuoDAKAwMCuGwDAwe4AAMDAMYAAwQB
xon8AwQCx7ZkAwQCzAt0AwQEz98AAwQG0CeAAwQF0G7AAwQG0RfAAwQH2C2AMDEE
AgACMCsDBQMgAQVYAwQEJgEAMAwDBAUmAyADBAAmAzADBQAmBGoAAwcAJiAA/YAA
MIHNBggrBgEFBQcBCAEB/wSBvTCBuqCBtzCBtAICGBEwCAICG2cCAhtoAgIeLQIC
Hk0CAh6tAgIe8gICKxECAjQ3AgI0SQICOUwCAkFsAgJO9gICVAQCAlbyAgJZfQIC
WtUCAlriAgMAggcCAwCCRzAKAgMAgtECAwCC0wIDAIMGMAoCAwCDcgIDAIOEAgMA
jWQCAwCOGTAKAgMAj3wCAwCPfQIDANAxAgMGABACAwYKxgIDBgrIAgMGCswCAwYK
8QIDBgrzAgMGCvUCAwYMfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHSpPrEFMq8s1MXlSfmjOHv5M+9yme
AD0XpZbdzX5rZrOOFnTzoix/i9BZsZ00LmQ4j3w7r8K+jH83k7YW6IUiH0VwL5Uu
ON4dgOLFbFxJ0GvmNnqJH3Ac26gQn+clbfUjRBMpHMBaEfWF6pMPjn0e0/LGLB0h
MT+xZwSG8+adnqnbyxzn8lODQatB77R/tn3gAexBWsmP9dakDtYKTZs1F22GK2ph
y8Oy9RdFoHgz6DYH7O+D5y/KB3ue9oOlpiwCfia9s69CcatLXNCyyD+RQCYX1L6I
2srpS7Gqjv9bgRFFyPWLPEfzGdvzVLCvrbPIjeYXv77dK4Q5MsEAA1cC
-----END CERTIFICATE-----
Generated at Wed Jul 9 16:40:02 2025 by rpki-client