Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
File: 1f1cee84-663d-43bc-bc24-3b0050eff749.cer (raw, json)
Hash identifier: 5t9zBCcJVV/g62xeesL4NhbCzyoSd7Tw0nLp4I5lTRs=
Subject key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F43285848FDCBFC53C2579FBBF9C42B68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 24 Feb 2025 17:57:24 +0000
Certificate not after: Tue 02 Mar 2027 01:45:33 +0000
Subordinate resources: AS: 13672 -- 13675
AS: 13977
AS: 14154
AS: 17093
AS: 22647
AS: 32645
IP: 64.222.64.0 -- 64.222.255.255
IP: 64.223.64.0 -- 64.223.255.255
IP: 66.243.192.0 -- 66.243.211.255
IP: 66.243.216.0 -- 66.243.222.255
IP: 66.243.224.0/24
IP: 66.243.227.0 -- 66.243.231.255
IP: 67.158.128.0/18
IP: 68.237.128.0/20
IP: 68.238.48.0/20
IP: 69.50.32.0/19
IP: 69.53.0.0/17
IP: 70.16.64.0/20
IP: 70.16.96.0/20
IP: 70.16.192.0/19
IP: 70.20.32.0/19
IP: 70.105.224.0/19
IP: 70.109.128.0/18
IP: 71.161.64.0 -- 71.161.75.255
IP: 71.161.80.0 -- 71.161.127.255
IP: 71.161.192.0/19
IP: 71.168.64.0/18
IP: 71.169.128.0/18
IP: 71.173.64.0/19
IP: 71.181.0.0/17
IP: 71.241.128.0/20
IP: 71.241.192.0/19
IP: 71.254.0.0/20
IP: 71.254.96.0/20
IP: 71.255.112.0 -- 71.255.159.255
IP: 72.64.0.0/20
IP: 72.65.96.0/19
IP: 72.71.192.0/18
IP: 72.73.64.0/18
IP: 72.87.48.0/20
IP: 72.92.128.0/19
IP: 72.95.80.0 -- 72.95.127.255
IP: 74.209.0.0/21
IP: 74.209.12.0 -- 74.209.51.255
IP: 74.209.56.0/21
IP: 163.252.0.0/16
IP: 209.105.128.0 -- 209.105.179.255
IP: 209.105.188.0/22
IP: 216.212.0.0/17
IP: 216.227.0.0 -- 216.227.5.255
IP: 216.227.8.0 -- 216.227.39.255
IP: 216.227.56.0 -- 216.227.99.255
IP: 216.227.118.0 -- 216.227.127.255
IP: 2604:6e00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 07 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:cb:fc:53:c2:57:9f:bb:f9:c4:2b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 24 17:57:24 2025 GMT
Not After : Mar 2 01:45:33 2027 GMT
Subject: CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:10:b6:40:15:3b:4b:81:5e:4d:94:73:2d:
95:a9:ed:05:bf:92:34:28:bf:23:85:51:ec:f6:a0:
c9:ae:fd:38:9a:6e:de:79:f2:a7:41:b2:be:58:0f:
cc:b5:f1:de:58:80:f7:3c:f4:c0:ed:21:f0:49:72:
41:26:cf:6e:fb:43:05:8d:ec:3b:a0:63:df:bd:52:
04:3b:a5:41:25:bc:04:37:ee:2c:c9:1f:59:4f:e9:
8e:5b:2a:69:ca:62:7e:1d:1f:2f:1e:d0:7d:0d:23:
d9:db:b5:03:21:8b:79:55:bf:6d:21:d3:03:13:b4:
d7:78:57:77:18:c0:bb:0d:26:41:c6:68:a5:09:37:
aa:1a:b2:f9:e0:2a:e3:82:c4:09:88:53:3a:3b:00:
96:90:ec:52:86:6c:95:ac:dd:ff:22:92:19:bb:ae:
16:89:23:77:d2:45:e9:02:7a:7b:7c:4e:05:10:28:
d0:99:60:19:60:70:86:50:67:d4:66:fb:ec:11:07:
a7:34:f8:74:e0:66:71:57:2a:16:8d:f2:a6:f8:c6:
6c:5f:3c:c1:82:eb:07:5a:c2:3c:88:fe:4d:bf:43:
17:40:0f:51:cf:68:e0:1e:66:d4:02:41:4f:9e:25:
1e:2f:29:3f:29:a5:20:e3:cc:fa:cf:aa:0e:6e:c2:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.222.64.0-64.222.255.255
64.223.64.0-64.223.255.255
66.243.192.0-66.243.211.255
66.243.216.0-66.243.222.255
66.243.224.0/24
66.243.227.0-66.243.231.255
67.158.128.0/18
68.237.128.0/20
68.238.48.0/20
69.50.32.0/19
69.53.0.0/17
70.16.64.0/20
70.16.96.0/20
70.16.192.0/19
70.20.32.0/19
70.105.224.0/19
70.109.128.0/18
71.161.64.0-71.161.75.255
71.161.80.0-71.161.127.255
71.161.192.0/19
71.168.64.0/18
71.169.128.0/18
71.173.64.0/19
71.181.0.0/17
71.241.128.0/20
71.241.192.0/19
71.254.0.0/20
71.254.96.0/20
71.255.112.0-71.255.159.255
72.64.0.0/20
72.65.96.0/19
72.71.192.0/18
72.73.64.0/18
72.87.48.0/20
72.92.128.0/19
72.95.80.0-72.95.127.255
74.209.0.0/21
74.209.12.0-74.209.51.255
74.209.56.0/21
163.252.0.0/16
209.105.128.0-209.105.179.255
209.105.188.0/22
216.212.0.0/17
216.227.0.0-216.227.5.255
216.227.8.0-216.227.39.255
216.227.56.0-216.227.99.255
216.227.118.0-216.227.127.255
IPv6:
2604:6e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13672-13675
13977
14154
17093
22647
32645
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7c:d5:1a:94:81:2b:d6:a9:05:55:f8:79:3c:b6:c2:d4:71:
99:7d:ee:38:65:9b:9c:a0:1c:c8:be:81:f7:ec:a3:0f:4c:1d:
d8:ea:6c:74:ca:17:7a:3f:d1:c0:5a:50:ec:29:11:ea:e4:a0:
60:a1:82:39:c6:2e:7e:0c:52:d0:6b:c7:ed:52:22:20:a2:c2:
5c:fb:7c:ce:9b:cd:9b:c7:b9:a9:d0:cf:ad:97:de:c2:d4:36:
60:50:cc:ee:6c:96:53:95:91:6b:03:af:73:96:aa:7e:bc:97:
d5:e0:6d:8c:f6:5f:2b:c4:92:69:eb:20:16:cf:de:43:a1:fe:
69:de:97:ae:b4:d4:66:da:22:88:86:36:4d:5f:95:bb:59:bf:
db:75:1e:6d:a4:36:cd:22:d7:f0:02:a3:cf:54:1b:e8:4d:9b:
6c:fc:4e:cd:84:2f:e9:e2:fb:bf:23:7c:0f:f9:ad:06:c3:db:
71:52:ad:76:fb:fa:58:c0:4a:42:9c:fb:14:5c:1a:6f:27:91:
31:f0:d7:c4:6e:ee:13:e5:e2:a6:79:d5:2c:43:db:49:e4:ad:
ee:90:35:5f:c0:d9:b2:27:f5:2b:cf:a7:e4:16:1c:35:40:62:
3b:9b:55:83:20:20:08:43:a8:fe:d0:f9:72:53:78:ee:4a:8a:
6c:14:30:ce
-----BEGIN CERTIFICATE-----
MIIIwzCCB6ugAwIBAgIUAQ0Mn0MoWEj9y/xTwlefu/nEK2gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI1MDIyNDE3NTcyNFoXDTI3MDMwMjAxNDUzM1owLzEtMCsGA1UEAxMk
MWYxY2VlODQtNjYzZC00M2JjLWJjMjQtM2IwMDUwZWZmNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn20QtkAVO0uBXk2Ucy2Vqe0Fv5I0KL8jhVHs
9qDJrv04mm7eefKnQbK+WA/MtfHeWID3PPTA7SHwSXJBJs9u+0MFjew7oGPfvVIE
O6VBJbwEN+4syR9ZT+mOWyppymJ+HR8vHtB9DSPZ27UDIYt5Vb9tIdMDE7TXeFd3
GMC7DSZBxmilCTeqGrL54CrjgsQJiFM6OwCWkOxShmyVrN3/IpIZu64WiSN30kXp
Anp7fE4FECjQmWAZYHCGUGfUZvvsEQenNPh04GZxVyoWjfKm+MZsXzzBgusHWsI8
iP5Nv0MXQA9Rz2jgHmbUAkFPniUeLyk/KaUg48z6z6oObsIvqwIDAQABo4IF1TCC
BdEwHQYDVR0OBBYEFNj44D0VOaRUde7rEjcQ63sZusbaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
ZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBlZmY3NDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmMWNlZTg0LTY2M2QtNDNiYy1i
YzI0LTNiMDA1MGVmZjc0OS8xZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBl
ZmY3NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwggG+BggrBgEF
BQcBBwEB/wSCAa0wggGpMIIBlgQCAAEwggGOMAsDBAZA3kADAwBA3jALAwQGQN9A
AwMFQMAwDAMEBkLzwAMEAkLz0DAMAwQDQvPYAwQAQvPeAwQAQvPgMAwDBABC8+MD
BANC8+ADBAZDnoADBARE7YADBARE7jADBAVFMiADBAdFNQADBARGEEADBARGEGAD
BAVGEMADBAVGFCADBAVGaeADBAZGbYAwDAMEBkehQAMEAkehSDAMAwQER6FQAwQH
R6EAAwQFR6HAAwQGR6hAAwQGR6mAAwQFR61AAwQHR7UAAwQER/GAAwQFR/HAAwQE
R/4AAwQER/5gMAwDBARH/3ADBAVH/4ADBARIQAADBAVIQWADBAZIR8ADBAZISUAD
BARIVzADBAVIXIAwDAMEBEhfUAMEB0hfAAMEA0rRADAMAwQCStEMAwQCStEwAwQD
StE4AwMAo/wwDAMEB9FpgAMEAtFpsAMEAtFpvAMEB9jUADALAwMA2OMDBAHY4wQw
DAMEA9jjCAMEA9jjIDAMAwQD2OM4AwQC2ONgMAwDBAHY43YDBAfY4wAwDQQCAAIw
BwMFACYEbgAwMwYIKwYBBQUHAQgBAf8EJDAioCAwHjAIAgI1aAICNWsCAjaZAgI3
SgICQsUCAlh3AgJ/hTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIfNUalIEr1qkFVfh5PLbC1HGZfe44ZZuc
oBzIvoH37KMPTB3Y6mx0yhd6P9HAWlDsKRHq5KBgoYI5xi5+DFLQa8ftUiIgosJc
+3zOm82bx7mp0M+tl97C1DZgUMzubJZTlZFrA69zlqp+vJfV4G2M9l8rxJJp6yAW
z95Dof5p3peutNRm2iKIhjZNX5W7Wb/bdR5tpDbNItfwAqPPVBvoTZts/E7NhC/p
4vu/I3wP+a0Gw9txUq12+/pYwEpCnPsUXBpvJ5Ex8NfEbu4T5eKmedUsQ9tJ5K3u
kDVfwNmyJ/Urz6fkFhw1QGI7m1WDICAIQ6j+0PlyU3juSopsFDDO
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:02 2025 by rpki-client