Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
File: 40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer (raw, json)
Hash identifier: 42VBae13unCAuu5aK/TWR0hDcx4hCPJuLjfcvePCDCI=
Subject key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F432858461FD975CD97B3D7C3EE333300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 06 Jun 2024 20:21:14 +0000
Certificate not after: Thu 27 Nov 2025 20:58:30 +0000
Subordinate resources: AS: 11290
AS: 22520
AS: 30466
AS: 46618
IP: 24.49.224.0/19
IP: 24.50.64.0/18
IP: 24.54.0.0/18
IP: 24.75.176.0/20
IP: 24.122.0.0/16
IP: 24.138.80.0/20
IP: 24.142.80.0/20
IP: 24.153.96.0/20
IP: 24.204.144.0/20
IP: 24.226.128.0/17
IP: 24.230.192.0 -- 24.231.15.255
IP: 45.42.36.0/22
IP: 57.134.0.0/17
IP: 66.171.48.0/20
IP: 72.11.160.0/19
IP: 74.210.128.0/17
IP: 104.37.200.0/21
IP: 104.192.116.0/22
IP: 104.200.80.0/20
IP: 104.218.124.0/22
IP: 104.244.68.0/22
IP: 104.245.152.0/21
IP: 108.171.64.0/19
IP: 140.106.0.0/19
IP: 144.168.52.0/22
IP: 157.208.0.0/18
IP: 158.222.104.0/21
IP: 161.199.164.0/22
IP: 162.142.114.0/23
IP: 162.212.8.0/22
IP: 162.217.4.0/22
IP: 162.223.0.0/22
IP: 162.244.44.0/22
IP: 162.247.92.0/22
IP: 162.252.216.0/21
IP: 167.248.160.0/19
IP: 170.249.32.0/19
IP: 170.249.80.0/21
IP: 172.97.52.0/22
IP: 173.0.192.0/20
IP: 184.75.128.0/20
IP: 199.36.124.0/22
IP: 199.102.200.0/21
IP: 199.193.168.0/21
IP: 204.144.60.0/22
IP: 205.151.61.0 -- 205.151.69.255
IP: 205.237.35.0 -- 205.237.71.255
IP: 208.77.10.0/23
IP: 208.96.192.0/18
IP: 208.118.208.0/20
IP: 209.15.64.0/19
IP: 209.15.160.0/19
IP: 209.54.64.0/20
IP: 209.169.128.0/18
IP: 209.172.20.0/22
IP: 216.71.80.0/20
IP: 216.228.208.0/20
IP: 217.28.24.0/21
IP: 2001:18c0::/32
IP: 2602:210::/32
IP: 2604:4d80::/32
IP: 2606:6300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 25 Nov 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1f:d9:75:cd:97:b3:d7:c3:ee:33:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jun 6 20:21:14 2024 GMT
Not After : Nov 27 20:58:30 2025 GMT
Subject: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:b7:b4:e6:eb:75:1a:5b:05:4d:7a:d3:03:
43:24:eb:ac:3e:f4:27:8c:b7:bf:71:8f:7a:bb:ec:
e7:ff:7f:01:8a:0e:f5:1a:b0:84:b4:53:b2:6f:2f:
5e:7c:bd:92:15:55:12:97:5e:c8:e5:9a:64:99:95:
29:57:16:7c:fe:33:35:85:cf:b3:8d:01:4e:56:fc:
18:73:bc:a6:69:23:e1:4a:8b:32:cc:51:09:7d:0b:
f0:1c:42:e4:17:fe:75:26:d0:bd:1f:eb:81:42:39:
60:b7:4e:2d:12:17:12:af:69:b7:33:6a:32:d8:d2:
5d:e9:dc:ee:42:34:80:ec:0f:0d:e8:e7:62:c4:b8:
d3:ed:1a:8c:b9:e0:3f:d1:7b:f2:0f:f0:5e:90:15:
32:cd:e9:d2:ec:ce:20:86:cb:fa:60:1c:42:25:a9:
16:e0:05:ce:2b:65:27:c9:1c:ba:a8:6b:55:6f:4f:
9a:a5:2d:47:b8:98:e6:c6:a9:e2:57:d1:3c:37:09:
9e:95:5d:97:90:d2:a2:21:54:28:5a:c7:86:4d:8a:
b3:0f:80:5a:8e:9b:d2:ab:83:cb:73:ca:24:47:0a:
55:c8:55:e9:6a:ac:40:36:80:44:fe:92:28:5a:17:
6d:11:b4:f7:cc:89:ff:18:18:b4:82:f1:6f:08:5b:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.224.0/19
24.50.64.0/18
24.54.0.0/18
24.75.176.0/20
24.122.0.0/16
24.138.80.0/20
24.142.80.0/20
24.153.96.0/20
24.204.144.0/20
24.226.128.0/17
24.230.192.0-24.231.15.255
45.42.36.0/22
57.134.0.0/17
66.171.48.0/20
72.11.160.0/19
74.210.128.0/17
104.37.200.0/21
104.192.116.0/22
104.200.80.0/20
104.218.124.0/22
104.244.68.0/22
104.245.152.0/21
108.171.64.0/19
140.106.0.0/19
144.168.52.0/22
157.208.0.0/18
158.222.104.0/21
161.199.164.0/22
162.142.114.0/23
162.212.8.0/22
162.217.4.0/22
162.223.0.0/22
162.244.44.0/22
162.247.92.0/22
162.252.216.0/21
167.248.160.0/19
170.249.32.0/19
170.249.80.0/21
172.97.52.0/22
173.0.192.0/20
184.75.128.0/20
199.36.124.0/22
199.102.200.0/21
199.193.168.0/21
204.144.60.0/22
205.151.61.0-205.151.69.255
205.237.35.0-205.237.71.255
208.77.10.0/23
208.96.192.0/18
208.118.208.0/20
209.15.64.0/19
209.15.160.0/19
209.54.64.0/20
209.169.128.0/18
209.172.20.0/22
216.71.80.0/20
216.228.208.0/20
217.28.24.0/21
IPv6:
2001:18c0::/32
2602:210::/32
2604:4d80::/32
2606:6300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11290
22520
30466
46618
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f2:44:c7:83:66:c6:a6:b3:d7:b9:67:65:d4:e3:bc:b6:9b:
93:a6:2d:09:42:6c:fb:a7:d5:eb:d0:f1:73:76:a9:07:e7:e6:
9f:06:bc:3c:8e:26:5b:84:84:da:e2:e9:de:c1:03:60:fe:34:
ed:93:8b:7f:82:55:a3:54:4e:cd:a4:fd:f9:21:df:c0:0c:95:
aa:5f:b2:1f:af:cf:02:3c:15:a3:0a:5e:c1:b7:97:7e:e0:51:
1b:f6:5f:67:de:f4:8d:ad:f0:3d:12:4a:4f:9c:96:72:7f:23:
95:af:9f:dc:0e:fa:7e:f4:ab:9d:23:84:97:0a:c4:6f:4f:0f:
6c:fb:43:bf:b3:bf:fa:5a:b7:dd:53:ab:1d:60:d8:74:c8:6c:
da:34:4a:65:50:f0:fb:7a:67:c9:1d:a1:f0:ed:df:21:88:34:
f1:c6:ea:97:c6:14:3c:b8:35:2e:95:9e:c3:14:57:75:e8:49:
5b:5c:c1:46:84:b1:fb:9b:f1:08:1a:77:4c:11:31:1e:f3:89:
87:e4:15:48:54:2e:ca:6e:51:91:a6:1c:f4:a3:2a:2e:eb:be:
8f:03:8b:28:e5:f3:90:4a:20:dc:ed:41:24:a6:e6:35:c8:ca:
c7:53:b2:b4:fb:84:fb:cb:25:af:c9:9c:12:e9:58:e3:94:e5:
04:9c:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:50:37 2024 by rpki-client on console-ams.rpki-client.org