Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
File: c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer (raw, json)
Hash identifier: 4QZklGs1KsrcfFCy1KAmOf9XOcMOZVcmVETKxo+t1+I=
Subject key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858463F120ED24F0CEEC69F6EDD88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Jun 2024 00:45:19 +0000
Certificate not after: Mon 21 Sep 2026 00:45:19 +0000
Subordinate resources: AS: 20172
AS: 20362
AS: 20431
AS: 22547
AS: 26415
AS: 27544
AS: 29966
AS: 32409
AS: 32651
AS: 36616 -- 36632
AS: 40647
AS: 40717
AS: 396539 -- 396828
AS: 397193 -- 397212
IP: 64.6.66.0 -- 64.6.95.255
IP: 192.5.6.0/24
IP: 192.12.94.0/24
IP: 192.26.92.0/24
IP: 192.30.45.0 -- 192.30.49.255
IP: 192.31.80.0/24
IP: 192.33.14.0/24
IP: 192.34.234.0 -- 192.34.238.255
IP: 192.35.51.0/24
IP: 192.41.162.0/24
IP: 192.42.93.0/24
IP: 192.42.173.0 -- 192.42.178.255
IP: 192.43.172.0/24
IP: 192.48.79.0/24
IP: 192.52.178.0/24
IP: 192.54.112.0/24
IP: 192.55.83.0/24
IP: 192.58.128.0/24
IP: 192.68.126.0 -- 192.68.130.255
IP: 192.81.185.0 -- 192.81.189.255
IP: 192.82.133.0 -- 192.82.138.255
IP: 192.153.247.0/24
IP: 198.17.208.0/24
IP: 199.7.48.0/20
IP: 199.7.71.0 -- 199.7.76.255
IP: 199.7.78.0 -- 199.7.80.255
IP: 199.16.80.0/20
IP: 209.131.128.0/18
IP: 2001:500:120::/43
IP: 2001:500:3e5::/48
IP: 2001:500:30ff::/48
IP: 2001:500:4431::/48
IP: 2001:500:7967::/48
IP: 2001:500:856e::/48
IP: 2001:500:d937::/48
IP: 2001:500:ed30::/48
IP: 2001:501:8a29::/48
IP: 2001:501:b1f9::/48
IP: 2001:502:8cc::/48
IP: 2001:502:1ca1::/48
IP: 2001:502:7094::/48
IP: 2001:502:8c25::/48
IP: 2001:502:be98::/48
IP: 2001:502:cbe4::/48
IP: 2001:503:c27::/48
IP: 2001:503:d2d::/48
IP: 2001:503:231d::/48
IP: 2001:503:3227::/48
IP: 2001:503:39c1::/48
IP: 2001:503:4872::/48
IP: 2001:503:5419::/48
IP: 2001:503:5ae2::/48
IP: 2001:503:6810::/48
IP: 2001:503:7bbf::/48
IP: 2001:503:83eb::/48
IP: 2001:503:91ef::/48
IP: 2001:503:a83e::/48
IP: 2001:503:ba3e::/48
IP: 2001:503:bfb0::/48
IP: 2001:503:cc2c::/48
IP: 2001:503:d414::/48
IP: 2001:503:e8ef::/48
IP: 2001:503:eea3::/48
IP: 2001:503:f189::/48
IP: 2001:503:f261::/48
IP: 2001:503:f3da::/48
IP: 2001:503:ff39::/48
IP: 2620:0:5050::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3f:12:0e:d2:4f:0c:ee:c6:9f:6e:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jun 18 00:45:19 2024 GMT
Not After : Sep 21 00:45:19 2026 GMT
Subject: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:9c:50:31:70:af:83:4c:00:c6:7b:22:5d:
a7:ac:e9:fc:e8:21:98:b3:32:5e:93:0b:c2:ac:bc:
09:8c:36:27:9b:cc:ef:b3:5d:5d:d1:dc:b6:53:38:
7b:fb:a6:d7:e2:7d:5e:58:d5:c0:44:1f:6b:cb:f4:
7f:d4:70:90:dc:1c:80:22:ba:2a:3d:1f:72:05:9a:
b8:6f:d0:55:ba:94:10:95:36:fa:84:a2:e8:7c:81:
cf:6a:1a:0d:e3:c8:7d:ae:f2:25:a5:ec:89:ef:1c:
09:fe:d2:4c:14:f0:61:7b:86:77:e1:07:9c:1d:12:
e7:a8:f6:37:2d:63:d5:97:17:24:12:6e:dd:c8:d7:
a9:57:6e:d6:f1:22:9d:76:25:ef:4b:c3:d9:cc:49:
49:84:1e:45:fc:36:3b:47:0d:24:d3:ab:c1:21:7a:
c4:34:82:55:7b:b6:8d:9f:5c:d4:f0:56:d0:6e:3c:
d5:b9:17:d1:75:dd:4a:b4:f6:59:b1:43:46:2c:b1:
a1:84:60:54:ab:1f:21:93:93:0d:1c:d6:bc:db:45:
75:4f:e0:c9:9b:4b:1f:08:f1:e7:80:22:86:f5:85:
6e:f0:ec:db:90:72:a1:23:ee:ce:73:39:4e:70:6c:
0f:c4:93:d5:60:d0:cb:fa:b4:e9:92:ef:6f:64:a2:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.66.0-64.6.95.255
192.5.6.0/24
192.12.94.0/24
192.26.92.0/24
192.30.45.0-192.30.49.255
192.31.80.0/24
192.33.14.0/24
192.34.234.0-192.34.238.255
192.35.51.0/24
192.41.162.0/24
192.42.93.0/24
192.42.173.0-192.42.178.255
192.43.172.0/24
192.48.79.0/24
192.52.178.0/24
192.54.112.0/24
192.55.83.0/24
192.58.128.0/24
192.68.126.0-192.68.130.255
192.81.185.0-192.81.189.255
192.82.133.0-192.82.138.255
192.153.247.0/24
198.17.208.0/24
199.7.48.0/20
199.7.71.0-199.7.76.255
199.7.78.0-199.7.80.255
199.16.80.0/20
209.131.128.0/18
IPv6:
2001:500:120::/43
2001:500:3e5::/48
2001:500:30ff::/48
2001:500:4431::/48
2001:500:7967::/48
2001:500:856e::/48
2001:500:d937::/48
2001:500:ed30::/48
2001:501:8a29::/48
2001:501:b1f9::/48
2001:502:8cc::/48
2001:502:1ca1::/48
2001:502:7094::/48
2001:502:8c25::/48
2001:502:be98::/48
2001:502:cbe4::/48
2001:503:c27::/48
2001:503:d2d::/48
2001:503:231d::/48
2001:503:3227::/48
2001:503:39c1::/48
2001:503:4872::/48
2001:503:5419::/48
2001:503:5ae2::/48
2001:503:6810::/48
2001:503:7bbf::/48
2001:503:83eb::/48
2001:503:91ef::/48
2001:503:a83e::/48
2001:503:ba3e::/48
2001:503:bfb0::/48
2001:503:cc2c::/48
2001:503:d414::/48
2001:503:e8ef::/48
2001:503:eea3::/48
2001:503:f189::/48
2001:503:f261::/48
2001:503:f3da::/48
2001:503:ff39::/48
2620:0:5050::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20172
20362
20431
22547
26415
27544
29966
32409
32651
36616-36632
40647
40717
396539-396828
397193-397212
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:3a:1b:8c:0d:fb:63:e4:e5:fc:32:61:4c:2f:20:c4:83:41:
22:88:6a:82:7e:3e:e8:bb:97:ff:9e:4b:da:f6:e1:e8:3c:4e:
e9:dc:95:75:1a:81:83:f2:74:c0:a0:94:57:44:41:f3:38:76:
8f:59:53:c7:01:a0:4c:01:54:78:09:b4:ce:7f:62:5d:22:8c:
18:8c:43:1f:ca:fb:84:d2:3f:87:0f:1a:b5:13:0a:c7:2a:36:
db:98:d9:59:c4:99:b1:be:3f:9c:ad:5e:40:1c:68:0f:fe:5e:
de:b9:61:54:ce:73:03:4d:33:b1:cb:a3:22:a1:d4:2f:df:8d:
42:e5:a0:04:04:a4:70:19:e0:e3:8a:52:1b:c9:23:23:44:b5:
04:f2:de:59:26:ba:0d:47:89:a9:81:48:bb:f9:50:3c:56:39:
40:4a:77:b0:53:b6:bb:49:4e:0b:1e:b9:69:a5:30:4e:79:cd:
19:f7:f6:4e:df:77:3f:58:be:f9:b1:ba:e9:dd:33:53:a5:a0:
ba:6f:2d:db:21:49:81:31:52:23:4c:ec:92:40:73:b9:6a:82:
b0:27:c1:de:13:c0:7d:19:5c:13:23:e6:c4:6c:e0:27:71:10:
f5:a0:58:40:b9:ec:ec:44:71:7b:36:d3:32:df:fc:71:9d:92:
e5:3a:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:30 2024 by rpki-client on console-fra.rpki-client.org