Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
File: 4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer (raw, json)
Hash identifier: /jbaLx8icYCnTW5En5lVdjUh9tBVNgnd1RIrA8OS0mE=
Subject key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858455C261E404367AF506335D900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 Mar 2024 17:57:15 +0000
Certificate not after: Sun 25 Jan 2026 01:45:14 +0000
Subordinate resources: AS: 163
AS: 547
AS: 1747
AS: 1786
AS: 1956
AS: 1997
AS: 2538
AS: 3082
AS: 3383
IP: 9.0.0.0 -- 9.9.8.255
IP: 9.9.10.0 -- 9.140.255.255
IP: 9.142.0.0 -- 9.144.255.255
IP: 9.147.0.0 -- 9.159.255.255
IP: 9.161.0.0 -- 9.162.255.255
IP: 9.164.0.0 -- 9.168.255.255
IP: 9.170.0.0 -- 9.204.255.255
IP: 9.206.0.0 -- 9.222.255.255
IP: 9.224.0.0 -- 9.233.255.255
IP: 9.236.0.0 -- 9.255.255.255
IP: 129.33.241.0 -- 129.33.242.255
IP: 129.34.0.0/16
IP: 129.41.0.0 -- 129.41.35.255
IP: 129.41.42.0/24
IP: 129.41.44.0/24
IP: 129.41.46.0/23
IP: 129.41.53.0 -- 129.41.61.255
IP: 129.41.64.0/21
IP: 129.41.84.0/22
IP: 129.41.91.0 -- 129.41.93.255
IP: 129.41.95.0 -- 129.41.111.255
IP: 129.41.160.0 -- 129.41.165.255
IP: 129.41.177.0 -- 129.41.187.255
IP: 129.41.190.0/23
IP: 129.41.210.0 -- 129.41.215.255
IP: 129.41.217.0 -- 129.41.219.255
IP: 129.41.224.0/19
IP: 137.42.0.0/16
IP: 146.84.128.0/17
IP: 149.131.152.0 -- 149.131.255.255
IP: 170.224.128.0/19
IP: 170.224.192.0/18
IP: 170.225.32.0 -- 170.225.95.255
IP: 170.225.112.0/20
IP: 170.225.144.0 -- 170.225.226.255
IP: 170.225.229.0 -- 170.225.231.255
IP: 170.225.234.0 -- 170.225.241.255
IP: 170.225.243.0 -- 170.225.251.255
IP: 170.226.0.0 -- 170.226.57.255
IP: 170.226.60.0/22
IP: 192.35.231.0 -- 192.35.232.255
IP: 192.35.234.0 -- 192.35.239.255
IP: 192.41.137.0/24
IP: 192.41.205.0/24
IP: 192.83.206.0/24
IP: 192.86.29.0 -- 192.86.65.255
IP: 192.91.192.0 -- 192.91.197.255
IP: 192.124.113.0/24
IP: 192.147.13.0/24
IP: 192.148.0.0 -- 192.148.32.255
IP: 192.150.122.0/24
IP: 192.156.133.0/24
IP: 192.157.175.0/24
IP: 192.195.29.0/24
IP: 192.207.88.0/24
IP: 192.229.32.0/19
IP: 192.231.8.0/24
IP: 192.231.10.0/24
IP: 192.231.12.0 -- 192.231.14.255
IP: 198.17.57.0/24
IP: 198.17.202.0 -- 198.17.204.255
IP: 198.49.195.0 -- 198.49.196.255
IP: 198.151.0.0/21
IP: 198.180.207.0/24
IP: 198.182.248.0/24
IP: 198.187.219.0/24
IP: 198.206.218.0/24
IP: 198.232.134.0/24
IP: 199.103.69.0 -- 199.103.72.255
IP: 199.164.149.0/24
IP: 199.181.149.0/24
IP: 199.201.254.0/24
IP: 199.242.142.0/24
IP: 204.79.144.0/23
IP: 204.79.175.0/24
IP: 204.79.184.0/24
IP: 204.107.195.0/24
IP: 204.231.227.0/24
IP: 204.231.239.0/24
IP: 205.210.232.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Apr 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:5c:26:1e:40:43:67:af:50:63:35:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Mar 28 17:57:15 2024 GMT
Not After : Jan 25 01:45:14 2026 GMT
Subject: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:01:eb:bf:b6:65:5a:e0:90:d2:fb:cc:88:
15:ac:42:62:c1:38:c5:0a:53:2b:98:ff:80:77:b4:
87:b4:d2:62:80:3d:51:d8:79:27:33:61:59:d1:36:
d6:a8:eb:90:38:c0:51:93:2d:74:90:a5:81:d1:fd:
0b:ea:38:77:19:2c:5f:3a:27:2e:a7:49:08:ac:f7:
bf:91:ed:9f:2a:71:ba:4d:8d:ae:b0:85:b5:66:19:
f0:e3:42:38:8a:b0:05:e7:66:95:0d:3f:5b:5f:d2:
b6:5c:96:11:fc:80:9e:7b:0f:d4:2e:d1:8e:30:87:
f4:45:55:4f:5c:3f:0d:0d:1e:23:37:0d:94:71:ed:
cd:a5:6d:bc:8c:0d:96:90:fa:48:3d:55:ba:23:3e:
f4:80:41:0d:e1:3d:b6:cd:03:6d:c9:df:53:a1:5c:
2d:f6:2d:fc:4f:45:38:73:89:d8:3a:de:04:37:5e:
12:d1:c3:63:dd:b9:31:89:5f:93:25:37:43:da:1d:
74:40:9b:dd:b1:82:a6:27:98:38:cb:50:58:f4:1e:
1c:ba:d2:55:c3:b1:16:f9:8d:ca:f7:a4:9f:be:d8:
84:8d:8b:4a:82:1c:c5:39:70:87:92:84:f0:eb:a5:
e8:e9:8a:e7:2b:57:cc:b5:e3:1c:aa:98:e2:3d:69:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
9.0.0.0-9.9.8.255
9.9.10.0-9.140.255.255
9.142.0.0-9.144.255.255
9.147.0.0-9.159.255.255
9.161.0.0-9.162.255.255
9.164.0.0-9.168.255.255
9.170.0.0-9.204.255.255
9.206.0.0-9.222.255.255
9.224.0.0-9.233.255.255
9.236.0.0-9.255.255.255
129.33.241.0-129.33.242.255
129.34.0.0/16
129.41.0.0-129.41.35.255
129.41.42.0/24
129.41.44.0/24
129.41.46.0/23
129.41.53.0-129.41.61.255
129.41.64.0/21
129.41.84.0/22
129.41.91.0-129.41.93.255
129.41.95.0-129.41.111.255
129.41.160.0-129.41.165.255
129.41.177.0-129.41.187.255
129.41.190.0/23
129.41.210.0-129.41.215.255
129.41.217.0-129.41.219.255
129.41.224.0/19
137.42.0.0/16
146.84.128.0/17
149.131.152.0-149.131.255.255
170.224.128.0/19
170.224.192.0/18
170.225.32.0-170.225.95.255
170.225.112.0/20
170.225.144.0-170.225.226.255
170.225.229.0-170.225.231.255
170.225.234.0-170.225.241.255
170.225.243.0-170.225.251.255
170.226.0.0-170.226.57.255
170.226.60.0/22
192.35.231.0-192.35.232.255
192.35.234.0-192.35.239.255
192.41.137.0/24
192.41.205.0/24
192.83.206.0/24
192.86.29.0-192.86.65.255
192.91.192.0-192.91.197.255
192.124.113.0/24
192.147.13.0/24
192.148.0.0-192.148.32.255
192.150.122.0/24
192.156.133.0/24
192.157.175.0/24
192.195.29.0/24
192.207.88.0/24
192.229.32.0/19
192.231.8.0/24
192.231.10.0/24
192.231.12.0-192.231.14.255
198.17.57.0/24
198.17.202.0-198.17.204.255
198.49.195.0-198.49.196.255
198.151.0.0/21
198.180.207.0/24
198.182.248.0/24
198.187.219.0/24
198.206.218.0/24
198.232.134.0/24
199.103.69.0-199.103.72.255
199.164.149.0/24
199.181.149.0/24
199.201.254.0/24
199.242.142.0/24
204.79.144.0/23
204.79.175.0/24
204.79.184.0/24
204.107.195.0/24
204.231.227.0/24
204.231.239.0/24
205.210.232.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
163
547
1747
1786
1956
1997
2538
3082
3383
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:fe:38:ce:1f:28:e3:73:f2:79:16:d5:0b:45:6c:bc:01:e8:
7d:33:9b:85:2b:b6:9f:4d:c1:7f:12:8e:6b:cb:e1:44:c7:7e:
f6:d5:7a:05:fc:cd:93:3c:7b:fd:e5:05:7d:9a:ef:7a:d0:be:
65:f3:88:f1:23:23:7a:1c:c1:11:a0:2d:0d:61:56:6d:e5:07:
99:6a:ac:0a:d3:9c:ae:ce:c7:c4:f9:e6:15:ee:05:7b:24:3d:
8a:c2:84:be:e5:21:d8:29:7e:7d:e2:97:0a:9e:9f:e8:1b:a1:
32:63:86:b0:33:e6:bc:92:71:74:de:12:2a:2a:c4:b5:b8:ae:
3f:ef:c3:5d:4a:45:6c:16:2d:8d:c1:42:02:62:80:cc:40:e1:
14:d7:28:3d:c4:5e:3f:30:97:d0:a8:99:48:9b:68:84:f8:13:
5a:d9:b8:f7:d5:63:ca:61:a4:bc:49:30:46:d5:99:ee:49:3c:
26:3a:60:be:72:bc:34:b9:9d:97:fb:bd:04:58:b4:9f:d0:8a:
46:3d:51:68:df:6c:0b:55:1c:3d:19:c3:26:ad:ca:7e:9b:fd:
08:4c:35:23:39:5e:98:fb:c5:a2:26:1b:70:db:5c:52:cb:8b:
54:32:4f:56:55:df:4c:b9:82:6b:cc:81:a6:d1:3c:ce:da:5d:
50:72:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:55:57 2024 by rpki-client on console-fra.rpki-client.org