Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
File: 40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer (raw, json)
Hash identifier: FkjRbFUUyjG4r+0sq2iYzIBoNo1qeAk/xehTIvJnaK0=
Subject key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F43285848063D7436B5D9C6CE6CD136C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 Nov 2024 01:45:33 +0000
Certificate not after: Wed 03 Mar 2027 01:45:33 +0000
Subordinate resources: AS: 11290
AS: 22520
AS: 30466
AS: 46618
IP: 24.49.224.0/19
IP: 24.50.64.0/18
IP: 24.54.0.0/18
IP: 24.75.176.0/20
IP: 24.122.0.0/16
IP: 24.138.80.0/20
IP: 24.142.80.0/20
IP: 24.153.96.0/20
IP: 24.204.144.0/20
IP: 24.226.128.0/17
IP: 24.230.192.0 -- 24.231.15.255
IP: 45.42.36.0/22
IP: 57.134.0.0/17
IP: 66.171.48.0/20
IP: 72.11.160.0/19
IP: 74.210.128.0/17
IP: 104.37.200.0/21
IP: 104.192.116.0/22
IP: 104.200.80.0/20
IP: 104.218.124.0/22
IP: 104.244.68.0/22
IP: 104.245.152.0/21
IP: 108.171.64.0/19
IP: 140.106.0.0/19
IP: 144.168.52.0/22
IP: 157.208.0.0/18
IP: 158.222.104.0/21
IP: 161.199.164.0/22
IP: 162.142.114.0/23
IP: 162.212.8.0/22
IP: 162.217.4.0/22
IP: 162.223.0.0/22
IP: 162.244.44.0/22
IP: 162.247.92.0/22
IP: 162.252.216.0/21
IP: 167.248.160.0/19
IP: 170.249.32.0/19
IP: 170.249.80.0/21
IP: 172.97.52.0/22
IP: 173.0.192.0/20
IP: 184.75.128.0/20
IP: 199.36.124.0/22
IP: 199.102.200.0/21
IP: 199.193.168.0/21
IP: 204.144.60.0/22
IP: 205.151.61.0 -- 205.151.69.255
IP: 205.237.35.0 -- 205.237.71.255
IP: 208.77.10.0/23
IP: 208.96.192.0/18
IP: 208.118.208.0/20
IP: 209.15.64.0/19
IP: 209.15.160.0/19
IP: 209.54.64.0/20
IP: 209.169.128.0/18
IP: 209.172.20.0/22
IP: 216.71.80.0/20
IP: 216.228.208.0/20
IP: 217.28.24.0/21
IP: 2001:18c0::/32
IP: 2602:210::/32
IP: 2604:4d80::/32
IP: 2606:6300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:3d:74:36:b5:d9:c6:ce:6c:d1:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Nov 28 01:45:33 2024 GMT
Not After : Mar 3 01:45:33 2027 GMT
Subject: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:b7:b4:e6:eb:75:1a:5b:05:4d:7a:d3:03:
43:24:eb:ac:3e:f4:27:8c:b7:bf:71:8f:7a:bb:ec:
e7:ff:7f:01:8a:0e:f5:1a:b0:84:b4:53:b2:6f:2f:
5e:7c:bd:92:15:55:12:97:5e:c8:e5:9a:64:99:95:
29:57:16:7c:fe:33:35:85:cf:b3:8d:01:4e:56:fc:
18:73:bc:a6:69:23:e1:4a:8b:32:cc:51:09:7d:0b:
f0:1c:42:e4:17:fe:75:26:d0:bd:1f:eb:81:42:39:
60:b7:4e:2d:12:17:12:af:69:b7:33:6a:32:d8:d2:
5d:e9:dc:ee:42:34:80:ec:0f:0d:e8:e7:62:c4:b8:
d3:ed:1a:8c:b9:e0:3f:d1:7b:f2:0f:f0:5e:90:15:
32:cd:e9:d2:ec:ce:20:86:cb:fa:60:1c:42:25:a9:
16:e0:05:ce:2b:65:27:c9:1c:ba:a8:6b:55:6f:4f:
9a:a5:2d:47:b8:98:e6:c6:a9:e2:57:d1:3c:37:09:
9e:95:5d:97:90:d2:a2:21:54:28:5a:c7:86:4d:8a:
b3:0f:80:5a:8e:9b:d2:ab:83:cb:73:ca:24:47:0a:
55:c8:55:e9:6a:ac:40:36:80:44:fe:92:28:5a:17:
6d:11:b4:f7:cc:89:ff:18:18:b4:82:f1:6f:08:5b:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.224.0/19
24.50.64.0/18
24.54.0.0/18
24.75.176.0/20
24.122.0.0/16
24.138.80.0/20
24.142.80.0/20
24.153.96.0/20
24.204.144.0/20
24.226.128.0/17
24.230.192.0-24.231.15.255
45.42.36.0/22
57.134.0.0/17
66.171.48.0/20
72.11.160.0/19
74.210.128.0/17
104.37.200.0/21
104.192.116.0/22
104.200.80.0/20
104.218.124.0/22
104.244.68.0/22
104.245.152.0/21
108.171.64.0/19
140.106.0.0/19
144.168.52.0/22
157.208.0.0/18
158.222.104.0/21
161.199.164.0/22
162.142.114.0/23
162.212.8.0/22
162.217.4.0/22
162.223.0.0/22
162.244.44.0/22
162.247.92.0/22
162.252.216.0/21
167.248.160.0/19
170.249.32.0/19
170.249.80.0/21
172.97.52.0/22
173.0.192.0/20
184.75.128.0/20
199.36.124.0/22
199.102.200.0/21
199.193.168.0/21
204.144.60.0/22
205.151.61.0-205.151.69.255
205.237.35.0-205.237.71.255
208.77.10.0/23
208.96.192.0/18
208.118.208.0/20
209.15.64.0/19
209.15.160.0/19
209.54.64.0/20
209.169.128.0/18
209.172.20.0/22
216.71.80.0/20
216.228.208.0/20
217.28.24.0/21
IPv6:
2001:18c0::/32
2602:210::/32
2604:4d80::/32
2606:6300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11290
22520
30466
46618
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:eb:8e:84:23:ca:50:41:b5:9d:3b:7c:bf:a2:7b:ed:37:5d:
8c:c3:dc:64:71:9c:75:2f:a6:5d:b4:72:9c:bb:8c:4b:33:ba:
cc:09:f7:03:c1:8c:52:0c:3b:b2:03:ba:37:0f:43:70:96:ee:
15:b1:4d:60:4e:cd:7d:79:55:16:3b:bf:eb:95:6a:04:ef:f4:
9a:ce:37:5b:5f:fc:b5:a6:a3:a2:e8:49:85:7c:52:56:c2:d6:
4a:7d:4a:25:89:ca:2e:f1:65:6e:a0:e7:ab:aa:d5:41:37:6f:
30:35:8b:a8:49:19:65:b6:e2:3c:7d:a6:ed:1d:6e:6c:d4:a9:
33:b5:18:82:26:2a:a5:f6:b5:bc:91:82:d7:6f:bd:b1:48:05:
d5:08:3e:40:b0:f2:c2:a8:71:fb:0a:b8:5d:b1:c8:93:04:fd:
f9:33:ba:a5:f5:cd:e0:b6:f0:04:f8:45:10:7e:3e:ce:5c:a0:
4c:7e:99:b2:ea:a6:39:e0:67:bd:da:0a:e8:2e:4e:58:e6:24:
d1:48:c4:69:45:b3:9c:a1:58:f0:ed:78:c2:af:1d:cd:05:2b:
ea:f9:89:5f:e1:b9:ee:6f:56:74:ed:de:05:7c:15:a5:0a:7b:
c4:c5:85:30:72:43:42:a7:18:ce:4a:71:83:ba:7e:7e:66:88:
47:a9:46:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:00:23 2025 by rpki-client