Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
File: 1f1cee84-663d-43bc-bc24-3b0050eff749.cer (raw, json)
Hash identifier: kF6vKYQHsbxSbgGcQI855Uo+IcykRFiVaLBkf2qgnHc=
Subject key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F43285846407BD0D1C837351E820D9C40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Jun 2024 12:54:13 +0000
Certificate not after: Wed 26 Nov 2025 17:35:45 +0000
Subordinate resources: AS: 13672 -- 13675
AS: 13977
AS: 14154
AS: 17093
AS: 22647
AS: 32645
IP: 64.222.64.0 -- 64.222.255.255
IP: 64.223.64.0 -- 64.223.255.255
IP: 66.243.192.0 -- 66.243.211.255
IP: 66.243.216.0 -- 66.243.222.255
IP: 66.243.224.0/24
IP: 66.243.227.0 -- 66.243.231.255
IP: 67.158.128.0/18
IP: 68.237.128.0/20
IP: 68.238.48.0/20
IP: 69.50.32.0/19
IP: 69.53.0.0/17
IP: 70.16.64.0/20
IP: 70.16.96.0/20
IP: 70.16.192.0/19
IP: 70.20.32.0/19
IP: 70.105.224.0/19
IP: 70.109.128.0/18
IP: 71.161.64.0 -- 71.161.75.255
IP: 71.161.80.0 -- 71.161.127.255
IP: 71.161.192.0/19
IP: 71.168.64.0/18
IP: 71.169.128.0/18
IP: 71.173.64.0/19
IP: 71.181.0.0/17
IP: 71.241.128.0/20
IP: 71.241.192.0/19
IP: 71.254.0.0/20
IP: 71.254.96.0/20
IP: 71.255.112.0 -- 71.255.159.255
IP: 72.64.0.0/20
IP: 72.65.96.0/19
IP: 72.71.192.0/18
IP: 72.73.64.0/18
IP: 72.87.48.0/20
IP: 72.92.128.0/19
IP: 72.95.80.0 -- 72.95.127.255
IP: 74.209.0.0/21
IP: 74.209.12.0 -- 74.209.51.255
IP: 74.209.56.0/21
IP: 209.105.128.0 -- 209.105.179.255
IP: 209.105.188.0/22
IP: 216.212.0.0/17
IP: 216.227.0.0 -- 216.227.5.255
IP: 216.227.8.0 -- 216.227.39.255
IP: 216.227.56.0 -- 216.227.99.255
IP: 216.227.118.0 -- 216.227.127.255
IP: 2604:6e00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:40:7b:d0:d1:c8:37:35:1e:82:0d:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jun 18 12:54:13 2024 GMT
Not After : Nov 26 17:35:45 2025 GMT
Subject: CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:10:b6:40:15:3b:4b:81:5e:4d:94:73:2d:
95:a9:ed:05:bf:92:34:28:bf:23:85:51:ec:f6:a0:
c9:ae:fd:38:9a:6e:de:79:f2:a7:41:b2:be:58:0f:
cc:b5:f1:de:58:80:f7:3c:f4:c0:ed:21:f0:49:72:
41:26:cf:6e:fb:43:05:8d:ec:3b:a0:63:df:bd:52:
04:3b:a5:41:25:bc:04:37:ee:2c:c9:1f:59:4f:e9:
8e:5b:2a:69:ca:62:7e:1d:1f:2f:1e:d0:7d:0d:23:
d9:db:b5:03:21:8b:79:55:bf:6d:21:d3:03:13:b4:
d7:78:57:77:18:c0:bb:0d:26:41:c6:68:a5:09:37:
aa:1a:b2:f9:e0:2a:e3:82:c4:09:88:53:3a:3b:00:
96:90:ec:52:86:6c:95:ac:dd:ff:22:92:19:bb:ae:
16:89:23:77:d2:45:e9:02:7a:7b:7c:4e:05:10:28:
d0:99:60:19:60:70:86:50:67:d4:66:fb:ec:11:07:
a7:34:f8:74:e0:66:71:57:2a:16:8d:f2:a6:f8:c6:
6c:5f:3c:c1:82:eb:07:5a:c2:3c:88:fe:4d:bf:43:
17:40:0f:51:cf:68:e0:1e:66:d4:02:41:4f:9e:25:
1e:2f:29:3f:29:a5:20:e3:cc:fa:cf:aa:0e:6e:c2:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.222.64.0-64.222.255.255
64.223.64.0-64.223.255.255
66.243.192.0-66.243.211.255
66.243.216.0-66.243.222.255
66.243.224.0/24
66.243.227.0-66.243.231.255
67.158.128.0/18
68.237.128.0/20
68.238.48.0/20
69.50.32.0/19
69.53.0.0/17
70.16.64.0/20
70.16.96.0/20
70.16.192.0/19
70.20.32.0/19
70.105.224.0/19
70.109.128.0/18
71.161.64.0-71.161.75.255
71.161.80.0-71.161.127.255
71.161.192.0/19
71.168.64.0/18
71.169.128.0/18
71.173.64.0/19
71.181.0.0/17
71.241.128.0/20
71.241.192.0/19
71.254.0.0/20
71.254.96.0/20
71.255.112.0-71.255.159.255
72.64.0.0/20
72.65.96.0/19
72.71.192.0/18
72.73.64.0/18
72.87.48.0/20
72.92.128.0/19
72.95.80.0-72.95.127.255
74.209.0.0/21
74.209.12.0-74.209.51.255
74.209.56.0/21
209.105.128.0-209.105.179.255
209.105.188.0/22
216.212.0.0/17
216.227.0.0-216.227.5.255
216.227.8.0-216.227.39.255
216.227.56.0-216.227.99.255
216.227.118.0-216.227.127.255
IPv6:
2604:6e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13672-13675
13977
14154
17093
22647
32645
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:15:23:1d:72:33:40:e9:90:0e:93:e3:48:51:3d:6f:6c:41:
ca:6e:ab:7e:9f:cd:a9:ff:96:8c:e6:72:72:88:8c:20:de:0a:
28:0e:e9:2a:68:91:d0:9c:da:b3:2d:0f:d9:01:fb:74:c6:c9:
7e:ce:7f:ca:77:ae:8f:18:f6:ba:ca:d2:db:51:a4:e3:8d:bb:
ac:7b:ea:58:f9:56:59:9b:53:b6:59:e7:e3:bd:14:2d:54:8c:
15:66:3f:50:c8:15:9d:df:92:a5:e5:30:cc:62:6b:00:42:c4:
8b:8b:dd:c9:eb:db:20:a0:21:e8:55:24:dd:d8:58:87:dd:10:
a7:9b:3b:d1:d0:c7:a4:1a:88:3a:6d:bc:b7:68:ea:c6:99:9c:
de:2e:4a:90:2f:45:86:81:00:8f:73:0a:15:91:34:46:ec:21:
ab:53:8f:9b:18:99:8d:a0:60:b1:96:6d:65:a9:ca:1d:e9:87:
0f:ff:4d:72:0b:e0:fc:ee:18:e4:33:da:0c:ba:14:04:84:94:
41:29:52:fd:c2:cf:fc:c4:ba:7d:b4:3a:29:c7:c3:0a:2e:d7:
53:57:32:8b:b5:57:11:ad:bb:8b:bf:17:d2:80:67:c5:e4:99:
9c:84:f0:5c:8f:c3:86:30:c4:ed:76:59:8e:67:eb:a9:c7:aa:
42:28:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:14 2024 by rpki-client on console-fra.rpki-client.org