Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
File: c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer (raw, json)
Hash identifier: AH/Ely5mmRUWsdPTusUg6lUkYTIysHTrcnhqlAwVUoA=
Subject key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F43285841E4834D319404A87D1D124280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 May 2023 19:06:39 +0000
Certificate not after: Tue 17 Jun 2025 19:06:39 +0000
Subordinate resources: AS: 20172
AS: 20362
AS: 20431
AS: 22547
AS: 26415
AS: 27544
AS: 29966
AS: 32409
AS: 32651
AS: 36616 -- 36632
AS: 40647
AS: 40717
AS: 396539 -- 396828
AS: 397193 -- 397212
IP: 64.6.66.0 -- 64.6.95.255
IP: 192.5.6.0/24
IP: 192.12.94.0/24
IP: 192.26.92.0/24
IP: 192.30.45.0 -- 192.30.49.255
IP: 192.31.80.0/24
IP: 192.33.14.0/24
IP: 192.34.234.0 -- 192.34.238.255
IP: 192.35.51.0/24
IP: 192.41.162.0/24
IP: 192.42.93.0/24
IP: 192.42.173.0 -- 192.42.178.255
IP: 192.43.172.0/24
IP: 192.48.79.0/24
IP: 192.52.178.0/24
IP: 192.54.112.0/24
IP: 192.55.83.0/24
IP: 192.58.128.0/24
IP: 192.68.126.0 -- 192.68.130.255
IP: 192.81.185.0 -- 192.81.189.255
IP: 192.82.133.0 -- 192.82.138.255
IP: 192.153.247.0/24
IP: 198.17.208.0/24
IP: 199.7.48.0/20
IP: 199.7.71.0 -- 199.7.76.255
IP: 199.7.78.0 -- 199.7.80.255
IP: 199.16.80.0/20
IP: 209.131.128.0/18
IP: 2001:500:120::/43
IP: 2001:500:3e5::/48
IP: 2001:500:30ff::/48
IP: 2001:500:4431::/48
IP: 2001:500:7967::/48
IP: 2001:500:856e::/48
IP: 2001:500:d937::/48
IP: 2001:500:ed30::/48
IP: 2001:501:8a29::/48
IP: 2001:501:b1f9::/48
IP: 2001:502:8cc::/48
IP: 2001:502:1ca1::/48
IP: 2001:502:7094::/48
IP: 2001:502:8c25::/48
IP: 2001:502:be98::/48
IP: 2001:502:cbe4::/48
IP: 2001:503:c27::/48
IP: 2001:503:d2d::/48
IP: 2001:503:231d::/48
IP: 2001:503:3227::/48
IP: 2001:503:39c1::/48
IP: 2001:503:4872::/48
IP: 2001:503:5419::/48
IP: 2001:503:5ae2::/48
IP: 2001:503:6810::/48
IP: 2001:503:7bbf::/48
IP: 2001:503:83eb::/48
IP: 2001:503:91ef::/48
IP: 2001:503:a83e::/48
IP: 2001:503:ba3e::/48
IP: 2001:503:bfb0::/48
IP: 2001:503:cc2c::/48
IP: 2001:503:d414::/48
IP: 2001:503:e8ef::/48
IP: 2001:503:eea3::/48
IP: 2001:503:f189::/48
IP: 2001:503:f261::/48
IP: 2001:503:f3da::/48
IP: 2001:503:ff39::/48
IP: 2620:0:5050::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Apr 2024 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:83:4d:31:94:04:a8:7d:1d:12:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: May 15 19:06:39 2023 GMT
Not After : Jun 17 19:06:39 2025 GMT
Subject: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:9c:50:31:70:af:83:4c:00:c6:7b:22:5d:
a7:ac:e9:fc:e8:21:98:b3:32:5e:93:0b:c2:ac:bc:
09:8c:36:27:9b:cc:ef:b3:5d:5d:d1:dc:b6:53:38:
7b:fb:a6:d7:e2:7d:5e:58:d5:c0:44:1f:6b:cb:f4:
7f:d4:70:90:dc:1c:80:22:ba:2a:3d:1f:72:05:9a:
b8:6f:d0:55:ba:94:10:95:36:fa:84:a2:e8:7c:81:
cf:6a:1a:0d:e3:c8:7d:ae:f2:25:a5:ec:89:ef:1c:
09:fe:d2:4c:14:f0:61:7b:86:77:e1:07:9c:1d:12:
e7:a8:f6:37:2d:63:d5:97:17:24:12:6e:dd:c8:d7:
a9:57:6e:d6:f1:22:9d:76:25:ef:4b:c3:d9:cc:49:
49:84:1e:45:fc:36:3b:47:0d:24:d3:ab:c1:21:7a:
c4:34:82:55:7b:b6:8d:9f:5c:d4:f0:56:d0:6e:3c:
d5:b9:17:d1:75:dd:4a:b4:f6:59:b1:43:46:2c:b1:
a1:84:60:54:ab:1f:21:93:93:0d:1c:d6:bc:db:45:
75:4f:e0:c9:9b:4b:1f:08:f1:e7:80:22:86:f5:85:
6e:f0:ec:db:90:72:a1:23:ee:ce:73:39:4e:70:6c:
0f:c4:93:d5:60:d0:cb:fa:b4:e9:92:ef:6f:64:a2:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.66.0-64.6.95.255
192.5.6.0/24
192.12.94.0/24
192.26.92.0/24
192.30.45.0-192.30.49.255
192.31.80.0/24
192.33.14.0/24
192.34.234.0-192.34.238.255
192.35.51.0/24
192.41.162.0/24
192.42.93.0/24
192.42.173.0-192.42.178.255
192.43.172.0/24
192.48.79.0/24
192.52.178.0/24
192.54.112.0/24
192.55.83.0/24
192.58.128.0/24
192.68.126.0-192.68.130.255
192.81.185.0-192.81.189.255
192.82.133.0-192.82.138.255
192.153.247.0/24
198.17.208.0/24
199.7.48.0/20
199.7.71.0-199.7.76.255
199.7.78.0-199.7.80.255
199.16.80.0/20
209.131.128.0/18
IPv6:
2001:500:120::/43
2001:500:3e5::/48
2001:500:30ff::/48
2001:500:4431::/48
2001:500:7967::/48
2001:500:856e::/48
2001:500:d937::/48
2001:500:ed30::/48
2001:501:8a29::/48
2001:501:b1f9::/48
2001:502:8cc::/48
2001:502:1ca1::/48
2001:502:7094::/48
2001:502:8c25::/48
2001:502:be98::/48
2001:502:cbe4::/48
2001:503:c27::/48
2001:503:d2d::/48
2001:503:231d::/48
2001:503:3227::/48
2001:503:39c1::/48
2001:503:4872::/48
2001:503:5419::/48
2001:503:5ae2::/48
2001:503:6810::/48
2001:503:7bbf::/48
2001:503:83eb::/48
2001:503:91ef::/48
2001:503:a83e::/48
2001:503:ba3e::/48
2001:503:bfb0::/48
2001:503:cc2c::/48
2001:503:d414::/48
2001:503:e8ef::/48
2001:503:eea3::/48
2001:503:f189::/48
2001:503:f261::/48
2001:503:f3da::/48
2001:503:ff39::/48
2620:0:5050::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20172
20362
20431
22547
26415
27544
29966
32409
32651
36616-36632
40647
40717
396539-396828
397193-397212
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:fc:e6:74:47:15:6e:06:49:f4:4e:bc:b1:30:cd:1d:2e:41:
33:9d:04:58:88:f0:a3:16:af:87:57:07:70:c5:4e:f3:2e:75:
51:47:bf:e7:e5:21:34:86:fa:78:e9:61:87:94:33:a1:7d:f8:
48:53:00:29:b7:1f:93:c5:fa:37:01:ef:f9:b6:70:d5:a4:50:
3d:09:d5:ff:1e:ad:9c:57:53:e8:da:40:f7:dc:14:23:f0:87:
e8:30:cd:4a:0d:aa:ce:7f:3b:2a:61:37:14:56:9b:e7:f2:db:
10:be:62:96:df:e5:39:25:e4:6d:05:bd:9e:8d:cf:66:9a:41:
86:f5:ff:7c:15:5e:01:c0:42:79:a2:3c:10:7a:de:9d:87:55:
55:da:05:47:9e:15:78:47:3b:32:56:a0:00:4c:dc:79:90:3f:
55:1d:7b:0e:1b:1e:ae:fa:70:08:58:3a:83:8e:64:26:b6:e3:
b8:93:e5:7f:b1:81:7c:9c:25:5e:ad:09:be:c2:be:9d:6a:d7:
42:e8:0f:c4:1d:c0:fe:8a:8e:46:e5:7c:0a:37:87:b7:e3:68:
da:ba:0b:93:95:27:77:02:ff:1a:a5:ce:51:87:66:33:53:05:
df:c7:90:2e:22:c7:58:b9:22:1c:43:81:58:cc:ac:87:67:4e:
fe:f7:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:41:32 2024 by rpki-client on console-fra.rpki-client.org