Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
File: 9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer (raw, json)
Hash identifier: ZDSAjQJGGGiiJuQCmOzfgzi1vrVN8lOrlGEMPwj42zQ=
Subject key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858479D883AC459E24F1A644BEF00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 21 Oct 2024 13:36:21 +0000
Certificate not after: Fri 07 Aug 2026 00:45:20 +0000
Subordinate resources: AS: 16892
AS: 26496
AS: 31815
AS: 397513 -- 397522
AS: 398101 -- 398110
AS: 398785 -- 398794
AS: 400746 -- 400755
IP: 23.229.128.0/17
IP: 45.40.128.0/18
IP: 50.62.0.0/15
IP: 64.13.192.0/18
IP: 64.96.128.0 -- 64.97.255.255
IP: 64.202.160.0/19
IP: 64.207.128.0/18
IP: 68.178.128.0/17
IP: 70.32.64.0/18
IP: 72.10.32.0/19
IP: 72.47.192.0/18
IP: 72.167.0.0/16
IP: 97.74.0.0/16
IP: 104.238.64.0/18
IP: 107.180.0.0/17
IP: 132.148.0.0/16
IP: 148.72.0.0/17
IP: 148.72.129.0/24
IP: 148.72.135.0/24
IP: 148.72.145.0 -- 148.72.148.255
IP: 148.72.150.0/23
IP: 148.72.154.0/24
IP: 148.72.156.0/23
IP: 148.72.160.0/22
IP: 148.72.178.0 -- 148.72.255.255
IP: 160.153.0.0/16
IP: 166.62.0.0/17
IP: 173.201.0.0/20
IP: 173.201.48.0 -- 173.201.255.255
IP: 184.168.0.0/16
IP: 192.169.128.0/17
IP: 192.186.192.0/18
IP: 198.12.128.0/17
IP: 198.71.128.0/17
IP: 205.186.128.0/18
IP: 207.38.90.0/23
IP: 208.109.0.0/16
IP: 216.69.128.0/18
IP: 216.70.64.0/18
IP: 2603::/20
IP: 2606:2300::/32
IP: 2607:f208::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Jul 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:9d:88:3a:c4:59:e2:4f:1a:64:4b:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Oct 21 13:36:21 2024 GMT
Not After : Aug 7 00:45:20 2026 GMT
Subject: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:f2:d7:37:ab:b8:fa:66:a2:50:0f:6a:e0:
e8:d1:f9:58:0f:43:e5:97:21:16:2f:b0:39:29:f0:
85:d3:a3:d3:68:86:d1:91:a9:8e:1a:a9:5e:9e:b7:
95:47:3a:7c:d1:8e:c3:e9:86:8c:37:3a:fd:31:75:
7d:68:e1:ce:18:c7:e5:ed:c9:8c:94:12:4a:f1:ea:
26:56:c1:b6:46:7c:b9:af:c5:09:90:32:a0:78:39:
12:26:28:66:1a:ce:25:da:95:f0:54:3f:ba:68:7e:
a5:e8:13:fe:85:71:4a:ba:05:26:fb:55:4f:b1:21:
4e:10:c1:c0:b6:a8:a2:92:86:3d:3d:f0:af:c9:94:
a4:0f:5d:d7:39:af:e0:ed:c2:5c:68:a5:0d:91:8a:
9a:f3:7f:a1:fe:27:4e:6c:fc:fe:3f:96:dd:81:77:
77:2d:a4:19:15:c3:e4:87:dc:8a:67:10:99:06:e6:
84:42:9e:39:e1:db:a0:ab:79:4d:56:97:02:c2:e4:
fe:91:4d:12:31:eb:b5:83:5e:67:43:54:4f:3f:4d:
b1:0f:99:1f:07:17:e5:96:b0:08:eb:31:64:f3:48:
36:53:61:1c:99:e7:27:2e:86:c7:53:1c:f2:aa:5a:
87:80:2e:b3:4a:c3:12:6c:de:36:fd:1b:32:35:6a:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.128.0/17
45.40.128.0/18
50.62.0.0/15
64.13.192.0/18
64.96.128.0-64.97.255.255
64.202.160.0/19
64.207.128.0/18
68.178.128.0/17
70.32.64.0/18
72.10.32.0/19
72.47.192.0/18
72.167.0.0/16
97.74.0.0/16
104.238.64.0/18
107.180.0.0/17
132.148.0.0/16
148.72.0.0/17
148.72.129.0/24
148.72.135.0/24
148.72.145.0-148.72.148.255
148.72.150.0/23
148.72.154.0/24
148.72.156.0/23
148.72.160.0/22
148.72.178.0-148.72.255.255
160.153.0.0/16
166.62.0.0/17
173.201.0.0/20
173.201.48.0-173.201.255.255
184.168.0.0/16
192.169.128.0/17
192.186.192.0/18
198.12.128.0/17
198.71.128.0/17
205.186.128.0/18
207.38.90.0/23
208.109.0.0/16
216.69.128.0/18
216.70.64.0/18
IPv6:
2603::/20
2606:2300::/32
2607:f208::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16892
26496
31815
397513-397522
398101-398110
398785-398794
400746-400755
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:30:c6:9b:d3:ed:c0:0b:3c:4e:f3:dd:cf:6b:09:1b:e7:a0:
5e:c5:5a:df:eb:f3:80:7c:fc:9c:03:93:86:ca:92:87:43:63:
57:69:3c:6c:25:2e:2a:ca:61:c3:94:cb:36:28:e0:9f:75:37:
d6:0e:05:5c:c9:97:5d:c9:a8:1d:1d:fa:55:ee:9e:4b:24:16:
91:0e:3e:aa:28:9e:37:64:5e:ae:64:32:1f:79:dc:02:af:49:
ef:90:8f:73:a3:3b:46:0f:17:55:ee:b3:7b:e5:71:c7:1d:09:
a1:87:d9:d9:2c:b6:e6:33:92:c2:d9:ca:6e:51:6f:06:cc:50:
2e:bd:a7:ea:01:03:08:4a:ef:56:f9:3f:9a:d0:1c:51:33:5c:
03:67:f5:0b:85:6d:74:f7:0b:fd:e3:aa:fa:94:1c:49:25:18:
a4:e7:37:d7:5f:36:c9:72:c6:06:7b:ce:47:7a:f9:b3:3c:9f:
e4:42:1c:95:38:98:bb:c9:bc:94:a9:5b:22:b0:a1:7c:d3:c9:
5c:a9:85:b8:65:4a:89:0c:75:63:53:53:b7:96:70:66:82:71:
23:ac:7c:17:dd:99:99:6f:23:93:dd:e5:8c:97:f0:6a:e4:01:
8d:5d:8a:e9:9c:65:a5:4b:3e:ea:1f:51:e9:36:9d:bd:2f:f9:
c7:50:28:54
-----BEGIN CERTIFICATE-----
MIIIYDCCB0igAwIBAgIUAQ0Mn0MoWEediDrEWeJPGmRL7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MTAyMTEzMzYyMVoXDTI2MDgwNzAwNDUyMFowLzEtMCsGA1UEAxMk
OWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2NmMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTny1zeruPpmolAPauDo0flYD0PllyEWL7A5
KfCF06PTaIbRkamOGqlenreVRzp80Y7D6YaMNzr9MXV9aOHOGMfl7cmMlBJK8eom
VsG2Rny5r8UJkDKgeDkSJihmGs4l2pXwVD+6aH6l6BP+hXFKugUm+1VPsSFOEMHA
tqiikoY9PfCvyZSkD13XOa/g7cJcaKUNkYqa83+h/idObPz+P5bdgXd3LaQZFcPk
h9yKZxCZBuaEQp454dugq3lNVpcCwuT+kU0SMeu1g15nQ1RPP02xD5kfBxfllrAI
6zFk80g2U2EcmecnLobHUxzyqlqHgC6zSsMSbN42/RsyNWq2/wIDAQABo4IFcjCC
BW4wHQYDVR0OBBYEFDgdn6a6fMGoRK4J/loAlp07/OEPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85
ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzllZDVjZTgwLTIyNGUtNDZhYi05
NGYxLTFhZmNlOGNjZjEzZi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThj
Y2YxM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwggE9BggrBgEF
BQcBBwEB/wSCASwwggEoMIIBCAQCAAEwggEAAwQHF+WAAwQGLSiAAwMBMj4DBAZA
DcAwCwMEB0BggAMDAUBgAwQFQMqgAwQGQM+AAwQHRLKAAwQGRiBAAwQFSAogAwQG
SC/AAwMASKcDAwBhSgMEBmjuQAMEB2u0AAMDAISUAwQHlEgAAwQAlEiBAwQAlEiH
MAwDBACUSJEDBACUSJQDBAGUSJYDBACUSJoDBAGUSJwDBAKUSKAwCwMEAZRIsgMD
AJRIAwMAoJkDBAemPgADBAStyQAwCwMEBK3JMAMDAa3IAwMAuKgDBAfAqYADBAbA
usADBAfGDIADBAfGR4ADBAbNuoADBAHPJloDAwDQbQMEBthFgAMEBthGQDAaBAIA
AjAUAwQEJgMAAwUAJgYjAAMFACYH8ggwUQYIKwYBBQUHAQgBAf8EQjBAoD4wPAIC
QfwCAmeAAgJ8RzAKAgMGEMkCAwYQ0jAKAgMGExUCAwYTHjAKAgMGFcECAwYVyjAK
AgMGHWoCAwYdczBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC0MMab0+3ACzxO893Pawkb56BexVrf6/OAfPyc
A5OGypKHQ2NXaTxsJS4qymHDlMs2KOCfdTfWDgVcyZddyagdHfpV7p5LJBaRDj6q
KJ43ZF6uZDIfedwCr0nvkI9zoztGDxdV7rN75XHHHQmhh9nZLLbmM5LC2cpuUW8G
zFAuvafqAQMISu9W+T+a0BxRM1wDZ/ULhW109wv946r6lBxJJRik5zfXXzbJcsYG
e85HevmzPJ/kQhyVOJi7ybyUqVsisKF808lcqYW4ZUqJDHVjU1O3lnBmgnEjrHwX
3ZmZbyOT3eWMl/Bq5AGNXYrpnGWlSz7qH1HpNp29L/nHUChU
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:50:43 2025 by rpki-client