Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
File: 7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer (raw, json)
Hash identifier: 3ECK2J1ebc9zQvNZAsT4PuFUMVu8hmfjHXYuTamZWGo=
Subject key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285846BCB2E0D91166D9EBDC273EC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 02 Aug 2024 00:45:24 +0000
Certificate not after: Thu 05 Nov 2026 01:45:24 +0000
Subordinate resources: AS: 19108
AS: 25994
IP: 24.31.17.0/24
IP: 24.48.160.0/24
IP: 24.49.189.0/24
IP: 24.49.194.0/24
IP: 24.49.200.0/24
IP: 24.54.114.0/24
IP: 24.54.116.0/22
IP: 24.72.175.0/24
IP: 24.72.186.0/23
IP: 24.75.113.0/24
IP: 24.75.116.0/23
IP: 24.75.123.0 -- 24.75.124.255
IP: 24.75.126.0/24
IP: 24.121.0.0/16
IP: 24.156.0.0/17
IP: 24.213.120.0/24
IP: 24.223.81.0/24
IP: 24.223.86.0/24
IP: 24.224.36.0/23
IP: 24.224.44.0/24
IP: 24.224.55.0 -- 24.224.56.255
IP: 24.224.58.0 -- 24.224.63.255
IP: 24.245.68.0/23
IP: 24.245.72.0/22
IP: 47.208.0.0/12
IP: 50.24.0.0/14
IP: 64.139.227.0/24
IP: 64.139.229.0/24
IP: 64.139.234.0/24
IP: 64.139.246.0/24
IP: 64.234.0.0/23
IP: 64.234.8.0/24
IP: 64.234.13.0/24
IP: 64.234.16.0/24
IP: 64.234.30.0/23
IP: 64.234.34.0/24
IP: 64.234.47.0/24
IP: 64.234.52.0/24
IP: 64.234.55.0/24
IP: 64.234.67.0 -- 64.234.68.255
IP: 64.234.74.0/24
IP: 64.234.78.0/24
IP: 66.76.0.0/16
IP: 67.21.185.0/24
IP: 69.59.64.0/24
IP: 69.59.73.0/24
IP: 69.59.82.0/24
IP: 69.59.95.0/24
IP: 69.59.100.0/24
IP: 69.59.104.0/24
IP: 74.192.0.0 -- 74.197.255.255
IP: 75.108.0.0/14
IP: 173.80.0.0/15
IP: 173.216.0.0/14
IP: 207.192.192.0/18
IP: 208.91.57.0/24
IP: 208.180.0.0/16
IP: 209.207.0.0/18
IP: 2600:5400::/27
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:bc:b2:e0:d9:11:66:d9:eb:dc:27:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Aug 2 00:45:24 2024 GMT
Not After : Nov 5 01:45:24 2026 GMT
Subject: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:9e:df:b9:33:51:17:ec:13:95:f1:85:05:
43:41:bd:1d:2b:2a:c5:59:69:19:ec:fa:64:6c:53:
f6:ec:fc:59:73:13:cf:91:f3:da:77:22:fc:f5:b3:
12:2b:89:e5:68:dd:1e:b8:78:74:56:49:7d:42:32:
42:10:53:f7:f4:1c:34:fe:5a:ff:a1:8b:cb:b7:27:
a4:78:6c:9c:df:bf:1b:d9:f1:b6:a3:03:40:08:d5:
68:d4:56:a5:59:01:8f:bc:c1:58:b2:f0:99:f6:46:
0e:3d:6b:87:ab:cb:d0:ac:01:3a:da:a0:97:5d:3b:
b3:03:f7:43:bd:47:2b:5d:e5:29:c8:cd:aa:5d:6d:
ff:27:f0:64:b4:2c:51:dd:ef:be:60:6f:f9:58:48:
f5:52:15:dc:39:ba:a8:ce:5d:e4:df:0d:05:e1:a2:
76:c7:a2:29:d5:be:f3:bf:24:48:02:6f:bc:1a:31:
bc:45:50:80:2d:7a:2e:8a:41:23:1e:eb:4b:e5:f7:
76:f2:2b:d5:43:5d:22:d3:51:53:2d:9d:52:14:85:
d8:73:35:dc:9d:5e:92:ca:6b:2f:13:53:5e:55:ea:
e8:22:72:fd:10:8b:22:c4:d8:b5:72:b5:e7:0e:62:
34:0d:ad:5e:fa:9e:8f:99:77:af:fd:93:fc:17:f6:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
24.31.17.0/24
24.48.160.0/24
24.49.189.0/24
24.49.194.0/24
24.49.200.0/24
24.54.114.0/24
24.54.116.0/22
24.72.175.0/24
24.72.186.0/23
24.75.113.0/24
24.75.116.0/23
24.75.123.0-24.75.124.255
24.75.126.0/24
24.121.0.0/16
24.156.0.0/17
24.213.120.0/24
24.223.81.0/24
24.223.86.0/24
24.224.36.0/23
24.224.44.0/24
24.224.55.0-24.224.56.255
24.224.58.0-24.224.63.255
24.245.68.0/23
24.245.72.0/22
47.208.0.0/12
50.24.0.0/14
64.139.227.0/24
64.139.229.0/24
64.139.234.0/24
64.139.246.0/24
64.234.0.0/23
64.234.8.0/24
64.234.13.0/24
64.234.16.0/24
64.234.30.0/23
64.234.34.0/24
64.234.47.0/24
64.234.52.0/24
64.234.55.0/24
64.234.67.0-64.234.68.255
64.234.74.0/24
64.234.78.0/24
66.76.0.0/16
67.21.185.0/24
69.59.64.0/24
69.59.73.0/24
69.59.82.0/24
69.59.95.0/24
69.59.100.0/24
69.59.104.0/24
74.192.0.0-74.197.255.255
75.108.0.0/14
173.80.0.0/15
173.216.0.0/14
207.192.192.0/18
208.91.57.0/24
208.180.0.0/16
209.207.0.0/18
IPv6:
2600:5400::/27
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19108
25994
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c4:db:31:9d:d1:e4:f1:25:e4:12:e1:fc:dd:71:86:d9:77:
d7:71:39:fb:59:ed:13:6f:f9:29:d6:13:ad:bd:5a:cf:57:f9:
dd:9e:01:52:8d:52:32:57:e0:c4:c1:76:a9:b7:fc:a6:5b:30:
18:7c:fb:85:f3:d7:49:9b:71:f7:e9:b4:02:11:85:46:a5:3f:
69:e5:35:47:0d:4a:57:d8:92:02:90:d5:53:07:38:e9:7a:18:
9e:96:91:c4:cb:95:aa:36:2a:8e:6c:b6:20:4d:b9:e8:75:38:
68:46:a9:94:89:88:94:25:ba:55:0f:01:b7:f9:25:4f:a1:18:
39:ad:ec:b6:9f:6b:5e:fb:90:01:d3:e4:a7:f7:a9:4d:bd:fd:
6d:6b:11:bd:b8:94:28:b8:7e:a9:b8:62:ea:b3:49:cc:6c:ec:
be:ca:b7:ac:5c:b2:a2:ee:a8:c3:6f:2f:32:1c:ba:5f:e3:91:
11:1f:30:06:c7:31:9e:d3:f7:12:e1:57:40:93:75:41:25:a9:
2d:b3:38:90:f1:f7:28:a4:d4:f8:49:4a:95:5c:2e:e1:ba:6b:
4d:b8:56:28:56:d5:fd:4e:88:8b:b6:25:d5:b8:7a:96:1a:00:
8b:0a:07:9c:6a:75:5a:36:a1:d3:a3:be:c1:65:c2:d3:5c:6b:
7d:91:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:44 2024 by rpki-client on console-ams.rpki-client.org