Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
File: 40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer (raw, json)
Hash identifier: kRWOAVwa52oIvd0I3VEpa4D+8EsZ5TISddfK/k6nH98=
Subject key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F43285843015E8BB7FA2F7038D47AE180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 25 Aug 2023 19:58:30 +0000
Certificate not after: Thu 27 Nov 2025 20:58:30 +0000
Subordinate resources: AS: 11290
AS: 22520
AS: 30466
AS: 46618
AS: 398721
IP: 24.49.224.0/19
IP: 24.50.64.0/18
IP: 24.54.0.0/18
IP: 24.75.176.0/20
IP: 24.122.0.0/16
IP: 24.138.80.0/20
IP: 24.142.80.0/20
IP: 24.153.96.0/20
IP: 24.204.144.0/20
IP: 24.226.128.0/17
IP: 24.230.192.0 -- 24.231.15.255
IP: 45.42.36.0/22
IP: 57.134.0.0/17
IP: 66.171.48.0/20
IP: 72.11.160.0/19
IP: 74.210.128.0/17
IP: 104.37.200.0/21
IP: 104.192.116.0/22
IP: 104.200.80.0/20
IP: 104.218.124.0/22
IP: 104.244.68.0/22
IP: 104.245.152.0/21
IP: 108.171.64.0/19
IP: 140.106.0.0/19
IP: 144.168.52.0/22
IP: 157.208.0.0/18
IP: 158.222.104.0/21
IP: 161.199.164.0/22
IP: 162.142.114.0/23
IP: 162.212.8.0/22
IP: 162.217.4.0/22
IP: 162.223.0.0/22
IP: 162.244.44.0/22
IP: 162.247.92.0/22
IP: 162.252.216.0/21
IP: 167.248.160.0/19
IP: 170.249.32.0/19
IP: 170.249.80.0/21
IP: 172.97.52.0/22
IP: 173.0.192.0/20
IP: 184.75.128.0/20
IP: 199.36.124.0/22
IP: 199.102.200.0/21
IP: 199.193.168.0/21
IP: 204.144.60.0/22
IP: 205.151.61.0 -- 205.151.69.255
IP: 205.237.35.0 -- 205.237.71.255
IP: 208.77.10.0/23
IP: 208.96.192.0/18
IP: 208.118.208.0/20
IP: 209.15.64.0/19
IP: 209.15.160.0/19
IP: 209.54.64.0/20
IP: 209.169.128.0/18
IP: 209.172.20.0/22
IP: 216.71.80.0/20
IP: 216.228.208.0/20
IP: 217.28.24.0/21
IP: 2001:18c0::/32
IP: 2602:210::/32
IP: 2604:4d80::/32
IP: 2606:6300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 May 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:01:5e:8b:b7:fa:2f:70:38:d4:7a:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Aug 25 19:58:30 2023 GMT
Not After : Nov 27 20:58:30 2025 GMT
Subject: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:b7:b4:e6:eb:75:1a:5b:05:4d:7a:d3:03:
43:24:eb:ac:3e:f4:27:8c:b7:bf:71:8f:7a:bb:ec:
e7:ff:7f:01:8a:0e:f5:1a:b0:84:b4:53:b2:6f:2f:
5e:7c:bd:92:15:55:12:97:5e:c8:e5:9a:64:99:95:
29:57:16:7c:fe:33:35:85:cf:b3:8d:01:4e:56:fc:
18:73:bc:a6:69:23:e1:4a:8b:32:cc:51:09:7d:0b:
f0:1c:42:e4:17:fe:75:26:d0:bd:1f:eb:81:42:39:
60:b7:4e:2d:12:17:12:af:69:b7:33:6a:32:d8:d2:
5d:e9:dc:ee:42:34:80:ec:0f:0d:e8:e7:62:c4:b8:
d3:ed:1a:8c:b9:e0:3f:d1:7b:f2:0f:f0:5e:90:15:
32:cd:e9:d2:ec:ce:20:86:cb:fa:60:1c:42:25:a9:
16:e0:05:ce:2b:65:27:c9:1c:ba:a8:6b:55:6f:4f:
9a:a5:2d:47:b8:98:e6:c6:a9:e2:57:d1:3c:37:09:
9e:95:5d:97:90:d2:a2:21:54:28:5a:c7:86:4d:8a:
b3:0f:80:5a:8e:9b:d2:ab:83:cb:73:ca:24:47:0a:
55:c8:55:e9:6a:ac:40:36:80:44:fe:92:28:5a:17:
6d:11:b4:f7:cc:89:ff:18:18:b4:82:f1:6f:08:5b:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.224.0/19
24.50.64.0/18
24.54.0.0/18
24.75.176.0/20
24.122.0.0/16
24.138.80.0/20
24.142.80.0/20
24.153.96.0/20
24.204.144.0/20
24.226.128.0/17
24.230.192.0-24.231.15.255
45.42.36.0/22
57.134.0.0/17
66.171.48.0/20
72.11.160.0/19
74.210.128.0/17
104.37.200.0/21
104.192.116.0/22
104.200.80.0/20
104.218.124.0/22
104.244.68.0/22
104.245.152.0/21
108.171.64.0/19
140.106.0.0/19
144.168.52.0/22
157.208.0.0/18
158.222.104.0/21
161.199.164.0/22
162.142.114.0/23
162.212.8.0/22
162.217.4.0/22
162.223.0.0/22
162.244.44.0/22
162.247.92.0/22
162.252.216.0/21
167.248.160.0/19
170.249.32.0/19
170.249.80.0/21
172.97.52.0/22
173.0.192.0/20
184.75.128.0/20
199.36.124.0/22
199.102.200.0/21
199.193.168.0/21
204.144.60.0/22
205.151.61.0-205.151.69.255
205.237.35.0-205.237.71.255
208.77.10.0/23
208.96.192.0/18
208.118.208.0/20
209.15.64.0/19
209.15.160.0/19
209.54.64.0/20
209.169.128.0/18
209.172.20.0/22
216.71.80.0/20
216.228.208.0/20
217.28.24.0/21
IPv6:
2001:18c0::/32
2602:210::/32
2604:4d80::/32
2606:6300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11290
22520
30466
46618
398721
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:57:fb:fd:8d:0b:70:d6:55:90:b0:73:7f:0d:c3:9d:44:96:
60:0d:7d:33:12:7b:0a:fc:b2:83:c3:64:e7:f4:80:89:0c:d2:
e6:7b:a9:2d:3b:68:cb:9f:16:5f:43:cc:22:be:dd:df:65:41:
2d:57:3c:b4:7f:ca:88:6f:a9:f8:1d:a7:f6:10:bc:6f:80:5c:
b5:62:0a:28:02:c2:b6:65:c6:b7:09:f7:7c:fb:1b:70:c6:e3:
8e:a4:37:c9:01:8a:5c:83:a3:92:8f:f3:24:fa:1d:05:f0:5f:
3f:27:bd:0c:bc:8e:9d:8a:1a:7e:1c:dd:09:26:31:7e:72:46:
a0:f6:60:51:1d:ea:14:c0:1a:1e:7d:9c:28:b5:61:7e:9a:f1:
2c:04:14:74:b9:af:1c:72:a9:62:8e:58:99:6a:18:1c:03:10:
5d:a3:99:24:26:38:49:b7:f7:32:23:d2:60:be:48:2c:70:13:
13:2a:3a:b0:44:27:42:49:f0:0e:30:c7:7b:9a:cd:56:57:77:
51:5e:88:90:6d:50:b2:1b:6f:07:a0:1a:4c:90:05:33:a6:56:
d3:61:78:91:5d:3a:d6:4e:2d:b6:42:7a:54:c3:ec:61:6d:71:
c1:c8:06:c3:97:63:78:77:01:79:b0:7c:2d:ef:66:3f:26:04:
28:80:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:34:15 2024 by rpki-client on console-ams.rpki-client.org