Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
File: 249140ca-277e-4871-a100-451d066d1c5b.cer (raw, json)
Hash identifier: kzOnZSIKCmZlBxS3+r5SjcXiLhGkRI43FcAPP/lS+8w=
Subject key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285848A401F53B291156CB642B1A50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 23 Jan 2025 14:03:24 +0000
Certificate not after: Wed 23 Dec 2026 01:45:26 +0000
Subordinate resources: AS: 6391
AS: 11478
AS: 21513
AS: 21548
AS: 21949
AS: 23498
AS: 40191
AS: 53364
AS: 395570
AS: 397177
AS: 397778
IP: 45.42.8.0 -- 45.42.14.255
IP: 50.21.16.0/21
IP: 50.21.64.0/21
IP: 64.18.64.0/19
IP: 64.137.128.0/19
IP: 64.254.224.0/19
IP: 65.97.32.0/20
IP: 66.11.32.0/20
IP: 66.23.0.0/17
IP: 66.171.160.0/20
IP: 66.199.32.0/20
IP: 66.207.192.0/19
IP: 66.234.32.0/19
IP: 66.241.128.0/20
IP: 67.22.224.0/20
IP: 67.213.71.0/24
IP: 67.213.80.0/23
IP: 67.213.87.0/24
IP: 67.213.92.0/24
IP: 69.77.160.0/19
IP: 72.15.48.0/20
IP: 74.114.100.0/22
IP: 74.123.92.0/22
IP: 74.213.160.0/19
IP: 75.98.192.0/20
IP: 76.9.192.0/19
IP: 96.45.192.0/20
IP: 97.107.176.0/20
IP: 104.192.44.0/22
IP: 104.193.52.0/22
IP: 134.128.192.0/19
IP: 134.231.32.0/19
IP: 142.59.160.0/20
IP: 149.248.176.0/20
IP: 158.106.64.0/18
IP: 162.249.160.0/22
IP: 162.250.170.0 -- 162.250.174.255
IP: 172.85.124.0/22
IP: 173.243.192.0/20
IP: 173.246.64.0/19
IP: 192.69.1.0/24
IP: 198.22.225.0/24
IP: 198.98.96.0/19
IP: 199.7.144.0/22
IP: 199.33.112.0/22
IP: 199.45.144.0/21
IP: 199.45.164.0/23
IP: 199.68.120.0/21
IP: 199.167.152.0/21
IP: 199.247.192.0/21
IP: 204.9.80.0/22
IP: 204.11.218.0/24
IP: 205.175.212.0/22
IP: 206.55.80.0/20
IP: 206.214.240.0/20
IP: 206.223.160.0/19
IP: 206.253.136.0/21
IP: 207.22.0.0/19
IP: 207.66.120.0/22
IP: 207.115.96.0/20
IP: 208.71.8.0/22
IP: 208.85.112.0/22
IP: 209.195.248.0/21
IP: 216.46.0.0/19
IP: 216.81.48.0/20
IP: 216.120.194.0/23
IP: 2605:8c80::/32
IP: 2606:880::/32
IP: 2607:5e00::/32
IP: 2607:f0c8::/32
IP: 2607:f3d8::/32
IP: 2610:98::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:01:f5:3b:29:11:56:cb:64:2b:1a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 23 14:03:24 2025 GMT
Not After : Dec 23 01:45:26 2026 GMT
Subject: CN=249140ca-277e-4871-a100-451d066d1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:8b:da:bc:64:fd:ae:65:dc:41:67:61:35:
7f:84:0a:9b:57:69:9d:70:a4:32:d1:6a:74:78:ff:
4a:18:94:af:bd:07:a7:54:0a:c6:c0:1f:40:24:4e:
29:ac:f2:62:0a:fb:f0:64:45:19:38:10:f3:be:9b:
1d:77:75:d9:1b:4b:9e:9e:b5:9c:c2:20:68:18:f5:
cd:cd:ac:57:d7:fa:79:c4:2b:86:68:6a:6d:48:64:
36:ab:f2:36:40:1f:49:e3:ba:37:d5:e4:db:92:23:
34:81:a0:1e:e1:ae:1c:1b:58:66:e1:d5:25:08:63:
e3:d4:12:3e:ae:56:a5:e3:b6:e0:53:1f:47:46:1a:
1b:84:a8:b6:95:6f:3c:0c:7d:d4:af:97:51:99:63:
a0:90:26:c6:86:e0:03:67:e4:51:b1:12:ea:d3:ff:
3a:a1:09:4b:f6:47:f2:fc:2a:14:3d:f0:93:de:49:
9b:82:53:1f:5d:11:b3:2f:04:ea:83:e4:50:5b:63:
ac:ab:a4:5e:72:fe:e3:9f:21:41:ee:f8:1f:60:8b:
39:3b:73:81:64:92:1c:a6:fc:db:cd:91:a4:65:4b:
90:27:34:47:c6:a3:81:e6:14:d4:eb:e1:ba:b0:ad:
69:5e:e8:90:63:ab:c1:77:44:aa:02:48:98:66:06:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.8.0-45.42.14.255
50.21.16.0/21
50.21.64.0/21
64.18.64.0/19
64.137.128.0/19
64.254.224.0/19
65.97.32.0/20
66.11.32.0/20
66.23.0.0/17
66.171.160.0/20
66.199.32.0/20
66.207.192.0/19
66.234.32.0/19
66.241.128.0/20
67.22.224.0/20
67.213.71.0/24
67.213.80.0/23
67.213.87.0/24
67.213.92.0/24
69.77.160.0/19
72.15.48.0/20
74.114.100.0/22
74.123.92.0/22
74.213.160.0/19
75.98.192.0/20
76.9.192.0/19
96.45.192.0/20
97.107.176.0/20
104.192.44.0/22
104.193.52.0/22
134.128.192.0/19
134.231.32.0/19
142.59.160.0/20
149.248.176.0/20
158.106.64.0/18
162.249.160.0/22
162.250.170.0-162.250.174.255
172.85.124.0/22
173.243.192.0/20
173.246.64.0/19
192.69.1.0/24
198.22.225.0/24
198.98.96.0/19
199.7.144.0/22
199.33.112.0/22
199.45.144.0/21
199.45.164.0/23
199.68.120.0/21
199.167.152.0/21
199.247.192.0/21
204.9.80.0/22
204.11.218.0/24
205.175.212.0/22
206.55.80.0/20
206.214.240.0/20
206.223.160.0/19
206.253.136.0/21
207.22.0.0/19
207.66.120.0/22
207.115.96.0/20
208.71.8.0/22
208.85.112.0/22
209.195.248.0/21
216.46.0.0/19
216.81.48.0/20
216.120.194.0/23
IPv6:
2605:8c80::/32
2606:880::/32
2607:5e00::/32
2607:f0c8::/32
2607:f3d8::/32
2610:98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6391
11478
21513
21548
21949
23498
40191
53364
395570
397177
397778
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:56:ee:52:6f:28:42:76:7e:5a:8a:96:59:65:84:b9:b1:f2:
be:90:21:02:8c:97:de:07:48:95:a0:0f:6c:e3:2e:6b:51:0b:
23:87:97:c6:94:c4:18:ce:2d:78:1e:91:8b:28:b4:f8:f8:16:
c4:6b:8c:7b:d0:fc:21:38:25:be:0b:ba:89:43:98:30:44:ea:
29:3c:f7:7a:6f:7d:ea:3d:7c:ff:03:ad:e4:16:95:d5:1a:19:
e9:af:a1:fb:9d:52:0d:8e:16:a4:c3:ce:c2:36:03:32:d5:f4:
b7:93:f2:d9:9a:bc:e3:19:8c:c1:57:fc:98:c8:54:c3:96:59:
be:77:e7:0c:30:04:14:01:c5:97:4c:1f:4e:41:1f:0e:b8:71:
73:9d:77:51:08:bb:1b:e4:f9:0b:09:86:b3:79:66:b7:ab:40:
a5:f7:2c:34:ea:cf:61:8a:84:8c:6a:95:a3:48:57:2d:58:2e:
e3:a2:62:bb:22:a3:c5:09:70:ee:6d:45:b7:11:1d:00:8a:b5:
9e:19:65:62:a9:32:a0:c8:f0:38:50:11:82:12:9f:bf:25:12:
d7:4b:9e:b5:54:6f:5b:e0:fa:e8:4c:56:12:c3:72:11:51:c0:
e7:ac:d2:26:1c:16:07:e4:80:52:18:ab:f8:89:ef:fb:8d:69:
9f:6c:11:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:13 2025 by rpki-client