Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
File: ac9a6201-fe8c-49a4-985d-5463076b397d.cer (raw, json)
Hash identifier: vVcZibuvZqpy38Z9mT5qWFmdLcY5io+KJInjxxQKiCQ=
Subject key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F432858436C02EA63E9666004436604A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 03 Oct 2023 00:45:22 +0000
Certificate not after: Mon 05 Jan 2026 01:45:22 +0000
Subordinate resources: AS: 3770
AS: 5738
AS: 6311
AS: 8120
AS: 10314
AS: 10809
AS: 11524
AS: 13536
AS: 14477
AS: 14877
AS: 15320
AS: 16425
AS: 20225
AS: 21547
AS: 27382
AS: 62929
IP: 64.17.96.0/19
IP: 64.25.208.0/20
IP: 64.140.192.0/18
IP: 66.109.32.0/19
IP: 66.152.96.0/19
IP: 66.186.160.0/19
IP: 66.211.128.0/19
IP: 66.231.192.0/19
IP: 67.217.96.0/19
IP: 68.65.124.0/23
IP: 68.70.48.0/20
IP: 68.233.160.0/20
IP: 69.24.0.0/20
IP: 69.49.128.0/19
IP: 69.84.128.0/19
IP: 69.84.208.0/20
IP: 69.168.0.0/20
IP: 72.0.128.0/19
IP: 72.12.64.0/19
IP: 72.15.0.0/19
IP: 72.55.224.0/19
IP: 74.220.224.0/20
IP: 98.159.208.0/20
IP: 162.223.16.0/22
IP: 162.223.204.0/22
IP: 162.246.192.0/22
IP: 173.242.96.0/20
IP: 173.243.160.0/20
IP: 176.115.176.0/21
IP: 206.128.96.0/20
IP: 207.136.192.0/18
IP: 208.103.188.0/24
IP: 209.94.96.0/19
IP: 209.198.64.0/18
IP: 216.27.112.0/20
IP: 216.59.64.0/19
IP: 216.107.192.0 -- 216.107.239.255
IP: 216.114.128.0/18
IP: 216.130.224.0/20
IP: 216.179.0.0/17
IP: 216.234.138.0/23
IP: 216.238.160.0/20
IP: 2001:4940::/32
IP: 2604:900::/32
IP: 2604:3f00::/32
IP: 2605:da80::/32
IP: 2606:9800::/32
IP: 2606:d780::/32
IP: 2607:3180::/32
IP: 2607:3900::/32
IP: 2607:fc58::/32
IP: 2607:fd48::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 19 Apr 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:6c:02:ea:63:e9:66:60:04:43:66:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Oct 3 00:45:22 2023 GMT
Not After : Jan 5 01:45:22 2026 GMT
Subject: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:d3:42:9b:63:c4:2b:85:41:e7:5b:10:1e:
56:35:9e:66:16:7b:32:69:42:5a:7c:9b:b4:48:6c:
c1:45:80:fb:aa:69:fb:d4:d1:73:36:e4:24:32:11:
0d:3e:9a:a4:46:06:1f:47:70:43:0f:f1:dd:c8:fa:
99:7c:11:6a:39:db:c0:de:b6:bc:fc:fd:f6:7e:d7:
06:20:ca:03:28:b6:65:03:38:c5:26:4c:c8:ea:2a:
56:c9:6b:26:fd:74:b0:7c:99:31:d9:77:c8:b6:d0:
59:03:26:d4:16:9d:a0:5c:bf:23:f5:5d:63:0a:9a:
f5:99:5e:d5:e1:61:9d:82:41:06:09:c5:c1:7b:0e:
ac:76:4d:68:ff:56:a7:5e:2c:8a:8f:f3:8e:9f:76:
68:bb:07:a5:7d:b5:0c:8d:f9:4b:cd:ba:57:b7:22:
5d:ee:f4:82:22:51:26:cd:0e:e3:0c:ff:a3:28:2b:
2e:d0:04:20:33:aa:33:17:2b:89:89:f2:e7:72:2d:
73:8a:d7:27:29:4b:4c:f2:f8:68:f0:2a:a8:04:4d:
6e:5b:ee:ef:c9:67:32:f8:18:ce:c3:05:7b:15:f2:
e1:88:96:f4:eb:1a:46:d6:e8:da:5c:ac:c4:87:7e:
49:6b:02:fa:af:98:be:fe:eb:b6:73:4d:4a:74:f6:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.17.96.0/19
64.25.208.0/20
64.140.192.0/18
66.109.32.0/19
66.152.96.0/19
66.186.160.0/19
66.211.128.0/19
66.231.192.0/19
67.217.96.0/19
68.65.124.0/23
68.70.48.0/20
68.233.160.0/20
69.24.0.0/20
69.49.128.0/19
69.84.128.0/19
69.84.208.0/20
69.168.0.0/20
72.0.128.0/19
72.12.64.0/19
72.15.0.0/19
72.55.224.0/19
74.220.224.0/20
98.159.208.0/20
162.223.16.0/22
162.223.204.0/22
162.246.192.0/22
173.242.96.0/20
173.243.160.0/20
176.115.176.0/21
206.128.96.0/20
207.136.192.0/18
208.103.188.0/24
209.94.96.0/19
209.198.64.0/18
216.27.112.0/20
216.59.64.0/19
216.107.192.0-216.107.239.255
216.114.128.0/18
216.130.224.0/20
216.179.0.0/17
216.234.138.0/23
216.238.160.0/20
IPv6:
2001:4940::/32
2604:900::/32
2604:3f00::/32
2605:da80::/32
2606:9800::/32
2606:d780::/32
2607:3180::/32
2607:3900::/32
2607:fc58::/32
2607:fd48::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3770
5738
6311
8120
10314
10809
11524
13536
14477
14877
15320
16425
20225
21547
27382
62929
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:70:d9:8b:a0:3a:2c:6d:5a:32:36:2e:1f:bf:d8:a8:c4:53:
62:e6:04:05:25:f8:48:78:be:c2:cd:7a:c1:76:7b:49:10:c8:
43:73:68:0d:18:fa:20:e4:c3:98:15:64:b5:02:a1:e4:ad:28:
a2:de:02:9f:34:39:8f:0a:7e:1b:ab:9c:e0:5e:6c:84:46:8c:
a3:b1:da:b4:cd:88:f9:98:6b:ac:c2:c7:cd:f9:c0:1e:de:b8:
e6:27:63:a6:06:b0:02:46:24:ba:e5:a7:ac:ec:36:e8:b8:d7:
c5:62:ab:ac:b2:06:95:c7:99:73:3d:fa:f5:aa:84:a3:94:aa:
e4:3a:23:fe:76:60:d3:e1:87:63:c7:7c:a3:25:d2:7c:13:21:
db:e4:82:e6:5c:05:9c:7f:88:8d:e5:66:70:68:f9:fc:66:76:
0d:8e:d1:ac:ba:38:7c:1e:7a:e2:c7:5c:79:23:59:6b:dd:09:
cf:49:11:7c:18:46:69:32:80:b3:41:c9:ed:8a:e1:a9:00:33:
1d:ef:19:70:c7:9b:6e:f6:2d:bf:41:c6:42:1e:cd:20:3a:86:
9b:fc:04:b8:f2:94:60:dc:a4:f8:58:97:7b:39:4f:03:ca:e5:
07:dc:d2:69:ce:b0:52:93:75:3c:f7:df:ba:fe:6c:59:63:4c:
18:9a:b7:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 18 03:45:15 2024 by rpki-client on console-ams.rpki-client.org