
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
File: d370c49e-f70c-46fb-a30f-df2475852cc2.cer (download)
Hash identifier: vAMd93N7nDjxvMOLH1xMnAEYsWAQK1/yj6NNGNEjztc=
Subject key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285840B49FED2BD08DCEB36ADB5440
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate valid until: Mon 11 Aug 2031 20:57:14 +0000
Subordinate resources:
1: AS: 1239 -- 1240
2: AS: 1799 -- 1808
3: AS: 3643
4: AS: 4999
5: AS: 6174 -- 6177
6: AS: 8106 -- 8110
7: IP: 144.223.0.0 -- 144.224.255.255
8: IP: 144.226.0.0/16
9: IP: 144.228.0.0 -- 144.230.255.255
10: IP: 144.232.0.0/16
11: IP: 192.157.38.0/24
12: IP: 198.67.0.0 -- 198.70.255.255
13: IP: 198.232.8.0/21
14: IP: 199.0.0.0/14
15: IP: 199.11.0.0 -- 199.14.255.255
16: IP: 199.160.0.0/14
17: IP: 204.94.0.0 -- 204.97.255.255
18: IP: 204.117.0.0 -- 204.120.255.255
19: IP: 204.180.0.0/14
20: IP: 204.204.0.0/14
21: IP: 204.212.0.0/14
22: IP: 204.248.0.0/14
23: IP: 205.160.0.0/14
24: IP: 205.240.0.0/13
25: IP: 206.61.0.0/16
26: IP: 206.104.0.0/14
27: IP: 206.158.0.0 -- 206.160.255.255
28: IP: 206.228.0.0/14
29: IP: 207.12.0.0/14
30: IP: 207.40.0.0/14
31: IP: 208.0.0.0 -- 208.35.255.255
32: IP: 209.120.0.0/17
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b4:9f:ed:2b:d0:8d:ce:b3:6a:db:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 26 22:39:07 2023 GMT
Not After : Aug 11 20:57:14 2031 GMT
Subject: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:7a:bb:23:9f:20:88:6d:5b:c8:f2:70:4e:
1f:7d:23:dc:0d:4f:71:f2:64:85:16:e3:0a:68:fd:
d1:37:da:bf:9f:66:0a:ba:0f:5e:47:21:46:c9:2f:
5f:67:88:e4:3e:c1:7c:34:85:ff:27:71:a2:d6:d0:
5a:c3:8a:b2:8b:24:2b:02:d9:d7:98:41:6e:57:8b:
ae:72:76:3c:83:41:53:50:7e:1e:da:70:f1:14:c1:
3f:91:fe:5a:9b:d8:da:81:f4:08:04:fc:11:d8:eb:
ed:f3:c0:e9:84:9c:de:71:f9:64:17:ff:8e:9a:b1:
ca:b1:07:cd:e3:e6:01:34:78:b3:2d:38:19:f3:74:
8a:0b:c5:ce:a5:6e:e3:f0:30:f7:98:1c:f4:64:35:
9a:d5:91:2d:01:9f:0b:7d:30:4d:3e:78:7e:92:87:
58:11:09:f4:38:03:8d:29:ba:e6:04:ab:34:d8:46:
6f:99:5b:29:a7:7d:3b:d3:13:71:b3:78:25:54:11:
3a:fa:12:18:66:77:98:cd:4f:8a:e5:06:0c:ac:85:
85:e3:54:75:01:f5:2c:c1:b1:6d:31:29:0d:e1:68:
00:ea:26:8b:ce:6f:93:a4:8a:af:e4:6a:d1:19:4d:
b4:f6:41:ab:0f:c3:8f:eb:42:70:7c:13:90:2a:ef:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
144.223.0.0-144.224.255.255
144.226.0.0/16
144.228.0.0-144.230.255.255
144.232.0.0/16
192.157.38.0/24
198.67.0.0-198.70.255.255
198.232.8.0/21
199.0.0.0/14
199.11.0.0-199.14.255.255
199.160.0.0/14
204.94.0.0-204.97.255.255
204.117.0.0-204.120.255.255
204.180.0.0/14
204.204.0.0/14
204.212.0.0/14
204.248.0.0/14
205.160.0.0/14
205.240.0.0/13
206.61.0.0/16
206.104.0.0/14
206.158.0.0-206.160.255.255
206.228.0.0/14
207.12.0.0/14
207.40.0.0/14
208.0.0.0-208.35.255.255
209.120.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1239-1240
1799-1808
3643
4999
6174-6177
8106-8110
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7a:57:8b:59:4f:73:42:fc:20:2d:7c:e5:d2:c7:6f:8c:f9:
6c:8f:e0:4c:a9:20:5e:d8:e3:4b:e9:38:00:1e:9b:b1:6a:fa:
6b:f2:e7:7f:de:f9:2e:68:90:82:ec:c9:34:2b:2e:c2:67:96:
70:fb:18:b5:66:03:91:95:11:de:f2:0e:7c:76:8c:99:38:f1:
f2:cd:1b:7c:0e:75:34:34:05:ad:b6:54:01:71:76:b1:80:63:
6a:03:37:a4:6d:c9:87:7d:72:4d:2b:a6:ad:f0:65:65:72:ed:
36:98:7c:78:d4:72:bc:ac:63:3e:7a:8e:1d:92:f8:d0:59:98:
13:e0:e2:7d:6c:89:d2:e4:7b:6c:2d:6e:7a:01:45:14:3d:7e:
06:5b:f0:e4:02:d5:9c:fa:52:b8:3a:8c:5d:55:63:5c:e5:75:
84:63:ab:57:4f:f6:78:27:99:a5:93:3d:2a:c7:77:d9:6b:a9:
c0:04:d9:7b:b5:56:b5:d0:89:cd:76:28:e7:93:f1:85:f8:f7:
ef:1a:ae:9b:ed:00:12:18:fe:9d:e7:8e:38:25:85:5d:85:f6:
c6:7b:64:7c:ad:1f:b6:78:c4:96:24:fe:77:8d:00:38:0e:cb:
2a:f9:b7:8c:fd:c7:c8:00:47:2a:4a:fd:e0:13:3d:c9:01:fb:
3c:cc:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 30 11:41:14 2023 by rpki-client.