Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
File: 249140ca-277e-4871-a100-451d066d1c5b.cer (raw, json)
Hash identifier: gAuIlX4Bqll6mlJOBpRQTlh3JeRRG/MAAqTil7WpzTI=
Subject key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584742B3BB81889E8A5C0ECFE9B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 19 Sep 2024 00:45:26 +0000
Certificate not after: Wed 23 Dec 2026 01:45:26 +0000
Subordinate resources: AS: 6391
AS: 11478
AS: 21513
AS: 21548
AS: 21949
AS: 23498
AS: 40191
AS: 53364
AS: 395570
AS: 397177
AS: 397778
IP: 45.42.8.0 -- 45.42.14.255
IP: 50.21.64.0/21
IP: 64.18.64.0/19
IP: 64.137.128.0/19
IP: 64.254.224.0/19
IP: 66.11.32.0/20
IP: 66.23.0.0/17
IP: 66.171.160.0/20
IP: 66.199.32.0/20
IP: 66.207.192.0/19
IP: 66.234.32.0/19
IP: 66.241.128.0/20
IP: 67.22.224.0/20
IP: 67.213.71.0/24
IP: 67.213.80.0/23
IP: 67.213.87.0/24
IP: 67.213.92.0/24
IP: 69.77.160.0/19
IP: 72.15.48.0/20
IP: 74.114.100.0/22
IP: 74.123.92.0/22
IP: 74.213.160.0/19
IP: 75.98.192.0/20
IP: 76.9.192.0/19
IP: 96.45.192.0/20
IP: 97.107.176.0/20
IP: 104.192.44.0/22
IP: 104.193.52.0/22
IP: 134.231.32.0/19
IP: 142.59.160.0/20
IP: 149.248.176.0/20
IP: 158.106.64.0/18
IP: 162.249.160.0/22
IP: 162.250.170.0 -- 162.250.174.255
IP: 172.85.124.0/22
IP: 173.243.192.0/20
IP: 173.246.64.0/19
IP: 192.69.1.0/24
IP: 198.22.225.0/24
IP: 198.98.96.0/19
IP: 199.7.144.0/22
IP: 199.33.112.0/22
IP: 199.45.144.0/21
IP: 199.45.164.0/23
IP: 199.68.120.0/21
IP: 199.167.152.0/21
IP: 199.247.192.0/21
IP: 204.9.80.0/22
IP: 204.11.218.0/24
IP: 205.175.212.0/22
IP: 206.55.80.0/20
IP: 206.214.240.0/20
IP: 206.223.160.0/19
IP: 206.253.136.0/21
IP: 207.66.120.0/22
IP: 207.115.96.0/20
IP: 208.71.8.0/22
IP: 208.85.112.0/22
IP: 209.195.248.0/21
IP: 216.46.0.0/19
IP: 216.81.48.0/20
IP: 216.120.194.0/23
IP: 2605:8c80::/32
IP: 2606:880::/32
IP: 2607:5e00::/32
IP: 2607:f0c8::/32
IP: 2607:f3d8::/32
IP: 2610:98::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:42:b3:bb:81:88:9e:8a:5c:0e:cf:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Sep 19 00:45:26 2024 GMT
Not After : Dec 23 01:45:26 2026 GMT
Subject: CN=249140ca-277e-4871-a100-451d066d1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:8b:da:bc:64:fd:ae:65:dc:41:67:61:35:
7f:84:0a:9b:57:69:9d:70:a4:32:d1:6a:74:78:ff:
4a:18:94:af:bd:07:a7:54:0a:c6:c0:1f:40:24:4e:
29:ac:f2:62:0a:fb:f0:64:45:19:38:10:f3:be:9b:
1d:77:75:d9:1b:4b:9e:9e:b5:9c:c2:20:68:18:f5:
cd:cd:ac:57:d7:fa:79:c4:2b:86:68:6a:6d:48:64:
36:ab:f2:36:40:1f:49:e3:ba:37:d5:e4:db:92:23:
34:81:a0:1e:e1:ae:1c:1b:58:66:e1:d5:25:08:63:
e3:d4:12:3e:ae:56:a5:e3:b6:e0:53:1f:47:46:1a:
1b:84:a8:b6:95:6f:3c:0c:7d:d4:af:97:51:99:63:
a0:90:26:c6:86:e0:03:67:e4:51:b1:12:ea:d3:ff:
3a:a1:09:4b:f6:47:f2:fc:2a:14:3d:f0:93:de:49:
9b:82:53:1f:5d:11:b3:2f:04:ea:83:e4:50:5b:63:
ac:ab:a4:5e:72:fe:e3:9f:21:41:ee:f8:1f:60:8b:
39:3b:73:81:64:92:1c:a6:fc:db:cd:91:a4:65:4b:
90:27:34:47:c6:a3:81:e6:14:d4:eb:e1:ba:b0:ad:
69:5e:e8:90:63:ab:c1:77:44:aa:02:48:98:66:06:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.8.0-45.42.14.255
50.21.64.0/21
64.18.64.0/19
64.137.128.0/19
64.254.224.0/19
66.11.32.0/20
66.23.0.0/17
66.171.160.0/20
66.199.32.0/20
66.207.192.0/19
66.234.32.0/19
66.241.128.0/20
67.22.224.0/20
67.213.71.0/24
67.213.80.0/23
67.213.87.0/24
67.213.92.0/24
69.77.160.0/19
72.15.48.0/20
74.114.100.0/22
74.123.92.0/22
74.213.160.0/19
75.98.192.0/20
76.9.192.0/19
96.45.192.0/20
97.107.176.0/20
104.192.44.0/22
104.193.52.0/22
134.231.32.0/19
142.59.160.0/20
149.248.176.0/20
158.106.64.0/18
162.249.160.0/22
162.250.170.0-162.250.174.255
172.85.124.0/22
173.243.192.0/20
173.246.64.0/19
192.69.1.0/24
198.22.225.0/24
198.98.96.0/19
199.7.144.0/22
199.33.112.0/22
199.45.144.0/21
199.45.164.0/23
199.68.120.0/21
199.167.152.0/21
199.247.192.0/21
204.9.80.0/22
204.11.218.0/24
205.175.212.0/22
206.55.80.0/20
206.214.240.0/20
206.223.160.0/19
206.253.136.0/21
207.66.120.0/22
207.115.96.0/20
208.71.8.0/22
208.85.112.0/22
209.195.248.0/21
216.46.0.0/19
216.81.48.0/20
216.120.194.0/23
IPv6:
2605:8c80::/32
2606:880::/32
2607:5e00::/32
2607:f0c8::/32
2607:f3d8::/32
2610:98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6391
11478
21513
21548
21949
23498
40191
53364
395570
397177
397778
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:0c:c2:52:64:59:07:6f:c2:47:b9:da:56:92:6e:b0:e2:31:
5b:d1:00:35:8c:1a:39:91:0f:c5:4b:64:74:44:c1:85:4d:0c:
a7:a2:9e:07:69:01:81:c5:36:c5:24:d4:a3:86:f6:c3:b8:7d:
71:86:b0:83:fe:cc:9d:db:b3:11:b3:cf:04:62:cb:a9:da:ff:
02:1d:b4:39:88:56:95:4a:d1:89:06:5e:43:92:e0:c8:a6:c6:
e9:4d:5f:a6:3e:02:3b:31:3b:4b:2f:9b:31:83:05:74:e7:10:
b8:7e:7f:06:e4:db:5a:99:34:21:52:f1:a9:91:20:94:0e:2e:
14:e0:1c:d5:c7:0d:ef:03:49:67:76:d2:f0:ab:c2:45:6c:60:
60:ad:95:af:47:96:31:ee:58:e2:5e:6c:21:41:12:81:45:a9:
35:e5:d6:cf:08:85:e7:6c:36:a0:b6:b0:2b:f4:66:85:c3:44:
49:1a:05:80:25:96:6f:8e:fb:6c:36:32:e0:73:8d:f7:59:e6:
4c:31:25:47:d9:e8:b2:db:54:a6:eb:e6:27:88:84:1f:dc:39:
c7:93:05:e4:ec:f8:5d:15:ab:e6:10:b6:a8:83:ee:53:25:39:
10:54:1b:88:b5:6c:76:cc:7f:29:44:4a:32:62:a5:e8:63:74:
83:4e:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:49 2024 by rpki-client on console-fra.rpki-client.org