Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
File: 7e463b2c-538a-4f93-bfa3-fe1643a77085.cer (raw, json)
Hash identifier: VuTEIW0ylvrLr9vnbnQ+GScPXANK/+MeuWfr2XT8GIc=
Subject key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858474DDE790A28292E4223336668
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 23 Sep 2024 00:45:26 +0000
Certificate not after: Sun 27 Dec 2026 01:45:26 +0000
Subordinate resources: AS: 11055
AS: 11232
AS: 16739
AS: 18817
AS: 62896
IP: 24.49.112.0/20
IP: 24.52.12.0 -- 24.52.17.255
IP: 24.52.24.0/21
IP: 24.52.36.0 -- 24.52.43.255
IP: 24.52.52.0 -- 24.52.63.255
IP: 24.54.150.0 -- 24.54.155.255
IP: 24.54.166.0/23
IP: 24.56.144.0/21
IP: 24.56.168.0/23
IP: 24.56.182.0/23
IP: 24.56.190.0/23
IP: 24.111.0.0/16
IP: 24.124.0.0/17
IP: 24.143.32.0/19
IP: 24.220.0.0/16
IP: 24.225.96.0/20
IP: 24.230.32.0 -- 24.230.191.255
IP: 24.236.40.0/21
IP: 24.236.60.0/22
IP: 64.17.64.0/22
IP: 64.17.74.0/23
IP: 64.33.64.0/18
IP: 66.45.128.0/19
IP: 67.217.4.0/22
IP: 67.217.18.0 -- 67.217.23.255
IP: 67.217.28.0/22
IP: 69.9.192.0/18
IP: 96.2.0.0/15
IP: 129.101.0.0/18
IP: 137.22.32.0/19
IP: 137.22.96.0/19
IP: 140.186.0.0/16
IP: 162.253.108.0/22
IP: 162.254.156.0/22
IP: 163.123.0.0/17
IP: 165.23.0.0/16
IP: 172.103.0.0/19
IP: 184.83.0.0/16
IP: 184.169.112.0/20
IP: 192.208.29.0/24
IP: 208.72.144.0/21
IP: 208.107.0.0/16
IP: 209.169.192.0/22
IP: 209.169.198.0 -- 209.169.201.255
IP: 209.169.208.0/21
IP: 209.169.218.0/23
IP: 216.12.176.0/20
IP: 216.71.0.0/18
IP: 2001:48f8::/32
IP: 2604:7a00::/28
IP: 2605:4a80::/28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4d:de:79:0a:28:29:2e:42:23:33:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Sep 23 00:45:26 2024 GMT
Not After : Dec 27 01:45:26 2026 GMT
Subject: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:bf:b4:5e:8d:01:ea:3f:a4:23:b1:69:3c:
0a:d5:b3:cc:c4:8a:01:23:cf:65:92:92:4b:82:7d:
80:67:31:5c:eb:06:98:0a:e7:c8:57:36:40:41:a7:
ea:94:da:df:4d:f1:0e:7d:05:3d:1e:7c:08:00:df:
d4:03:98:fd:cc:56:49:fb:e3:2d:f0:8d:bb:b0:ba:
9f:6c:7a:72:1c:80:e0:e9:9b:eb:3b:e6:3a:b1:37:
2d:6b:28:98:b3:9b:20:b5:ee:c3:48:55:e6:29:7b:
fa:51:4b:c5:16:c1:06:7b:52:2e:41:e3:00:cd:4a:
73:4b:34:0e:89:44:e9:87:8d:fb:a3:97:30:02:72:
93:1e:b1:f4:96:bf:d1:76:2a:c8:8a:1f:78:ed:a7:
2d:e3:28:55:69:de:75:ae:4b:51:40:2f:5b:59:1c:
1e:fa:9f:a1:1c:8d:b8:97:b5:7d:08:d4:2e:c9:33:
c4:b8:71:56:a2:44:ab:c9:16:f8:bc:3e:06:6a:8c:
90:31:6e:22:7e:b7:04:1f:57:ef:58:f2:41:16:0d:
ab:76:51:b4:27:79:f2:2a:a3:28:eb:12:52:5b:f1:
52:d6:15:01:a4:c1:3d:ff:5e:0f:72:e5:96:e9:85:
0f:48:d6:09:74:69:7f:9d:da:dd:2a:e6:b7:43:2e:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.112.0/20
24.52.12.0-24.52.17.255
24.52.24.0/21
24.52.36.0-24.52.43.255
24.52.52.0-24.52.63.255
24.54.150.0-24.54.155.255
24.54.166.0/23
24.56.144.0/21
24.56.168.0/23
24.56.182.0/23
24.56.190.0/23
24.111.0.0/16
24.124.0.0/17
24.143.32.0/19
24.220.0.0/16
24.225.96.0/20
24.230.32.0-24.230.191.255
24.236.40.0/21
24.236.60.0/22
64.17.64.0/22
64.17.74.0/23
64.33.64.0/18
66.45.128.0/19
67.217.4.0/22
67.217.18.0-67.217.23.255
67.217.28.0/22
69.9.192.0/18
96.2.0.0/15
129.101.0.0/18
137.22.32.0/19
137.22.96.0/19
140.186.0.0/16
162.253.108.0/22
162.254.156.0/22
163.123.0.0/17
165.23.0.0/16
172.103.0.0/19
184.83.0.0/16
184.169.112.0/20
192.208.29.0/24
208.72.144.0/21
208.107.0.0/16
209.169.192.0/22
209.169.198.0-209.169.201.255
209.169.208.0/21
209.169.218.0/23
216.12.176.0/20
216.71.0.0/18
IPv6:
2001:48f8::/32
2604:7a00::/28
2605:4a80::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11055
11232
16739
18817
62896
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:99:9f:3a:25:b7:e4:ea:3f:48:c8:19:cb:9d:12:d1:cd:c0:
26:da:94:53:65:ec:bf:83:d5:c8:20:f9:89:da:89:97:8c:c6:
93:66:00:65:3c:30:6d:0b:9b:48:4a:80:ad:4a:84:df:31:86:
be:f9:e2:26:ad:53:9f:2d:88:1b:e0:70:62:d4:f8:bf:7e:8a:
1f:74:00:5f:a9:ce:32:9b:99:20:a2:00:f6:08:a3:db:e9:e7:
da:59:2c:3d:0a:cd:06:04:29:cc:e1:d5:3b:f2:d4:6a:56:9f:
32:73:0a:15:2b:30:c6:fc:f3:4f:c4:e1:04:6a:87:c7:db:ae:
b6:dd:a3:98:66:86:c7:3a:3d:23:fb:f2:f3:d9:fc:36:29:08:
3e:1d:e8:59:ea:5f:33:b9:c1:0a:df:57:f7:b3:1b:7c:3a:9e:
78:ab:2a:dc:4b:73:d1:57:c9:16:22:ea:60:f4:21:f6:cc:e0:
3b:68:72:d7:23:fd:ae:8a:02:db:b5:56:0c:00:cb:6c:4f:ca:
1a:85:fb:d1:66:10:08:63:f8:32:a4:41:b1:76:da:53:c9:9e:
7c:5a:e5:d8:f0:a1:9a:61:65:87:e3:4e:4d:4d:8f:38:d7:05:
db:d9:71:e4:1f:1d:42:bf:f8:38:f5:fe:1c:79:64:11:57:cb:
0b:f7:59:30
-----BEGIN CERTIFICATE-----
MIIIizCCB3OgAwIBAgIUAQ0Mn0MoWEdN3nkKKCkuQiMzZmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDkyMzAwNDUyNloXDTI2MTIyNzAxNDUyNlowLzEtMCsGA1UEAxMk
N2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3MDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBW/tF6NAeo/pCOxaTwK1bPMxIoBI89lkpJL
gn2AZzFc6waYCufIVzZAQafqlNrfTfEOfQU9HnwIAN/UA5j9zFZJ++Mt8I27sLqf
bHpyHIDg6ZvrO+Y6sTctayiYs5sgte7DSFXmKXv6UUvFFsEGe1IuQeMAzUpzSzQO
iUTph437o5cwAnKTHrH0lr/RdirIih947act4yhVad51rktRQC9bWRwe+p+hHI24
l7V9CNQuyTPEuHFWokSryRb4vD4GaoyQMW4ifrcEH1fvWPJBFg2rdlG0J3nyKqMo
6xJSW/FS1hUBpME9/14PcuWW6YUPSNYJdGl/ndrdKua3Qy5TuwIDAQABo4IFnTCC
BZkwHQYDVR0OBBYEFCkw7Q+FpgF6L0K9QJzgx5CUFBdCMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlNDYzYjJjLTUzOGEtNGY5My1i
ZmEzLWZlMTY0M2E3NzA4NS83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNh
NzcwODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwggGPBggrBgEF
BQcBBwEB/wSCAX4wggF6MIIBWQQCAAEwggFRAwQEGDFwMAwDBAIYNAwDBAEYNBAD
BAMYNBgwDAMEAhg0JAMEAhg0KDAMAwQCGDQ0AwQGGDQAMAwDBAEYNpYDBAIYNpgD
BAEYNqYDBAMYOJADBAEYOKgDBAEYOLYDBAEYOL4DAwAYbwMEBxh8AAMEBRiPIAMD
ABjcAwQEGOFgMAwDBAUY5iADBAYY5oADBAMY7CgDBAIY7DwDBAJAEUADBAFAEUoD
BAZAIUADBAVCLYADBAJD2QQwDAMEAUPZEgMEA0PZEAMEAkPZHAMEBkUJwAMDAWAC
AwQGgWUAAwQFiRYgAwQFiRZgAwMAjLoDBAKi/WwDBAKi/pwDBAejewADAwClFwME
BaxnAAMDALhTAwQEuKlwAwQAwNAdAwQD0EiQAwMA0GsDBALRqcAwDAMEAdGpxgME
AdGpyAMEA9Gp0AMEAdGp2gMEBNgMsAMEBthHADAbBAIAAjAVAwUAIAFI+AMFBCYE
egADBQQmBUqAMCoGCCsGAQUFBwEIAQH/BBswGaAXMBUCAisvAgIr4AICQWMCAkmB
AgMA9bAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAHpmfOiW35Oo/SMgZy50S0c3AJtqUU2Xsv4PVyCD5idqJ
l4zGk2YAZTwwbQubSEqArUqE3zGGvvniJq1Tny2IG+BwYtT4v36KH3QAX6nOMpuZ
IKIA9gij2+nn2lksPQrNBgQpzOHVO/LUalafMnMKFSswxvzzT8ThBGqHx9uutt2j
mGaGxzo9I/vy89n8NikIPh3oWepfM7nBCt9X97MbfDqeeKsq3Etz0VfJFiLqYPQh
9szgO2hy1yP9rooC27VWDADLbE/KGoX70WYQCGP4MqRBsXbaU8mefFrl2PChmmFl
h+NOTU2PONcF29lx5B8dQr/4OPX+HHlkEVfLC/dZMA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:02 2024 by rpki-client on console-fra.rpki-client.org