Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
File: 95a66ba6-9469-47f7-8328-e12b21a9be23.cer (raw, json)
Hash identifier: QHFd4hH5r71YNM7Sz++nK0V2gOIBQWLSz8pHo4oXDso=
Subject key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F43285842E60503DE28F366E38C2FBF70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 16 Aug 2023 00:51:17 +0000
Certificate not after: Tue 07 Oct 2025 10:25:18 +0000
Subordinate resources: AS: 3573
IP: 144.36.0.0 -- 144.36.69.255
IP: 144.36.74.0 -- 144.36.103.255
IP: 144.36.105.0 -- 144.36.127.255
IP: 144.36.130.0 -- 144.36.133.255
IP: 144.36.136.0/22
IP: 144.36.142.0/23
IP: 144.36.146.0/23
IP: 144.36.150.0 -- 144.36.175.255
IP: 144.36.177.0/24
IP: 144.36.179.0 -- 144.36.181.255
IP: 144.36.186.0/23
IP: 144.36.190.0 -- 144.36.205.255
IP: 144.36.208.0/23
IP: 144.36.212.0/23
IP: 144.36.218.0/23
IP: 144.36.237.0 -- 144.36.243.255
IP: 144.36.246.0/23
IP: 144.36.252.0/23
IP: 149.122.0.0/16
IP: 170.248.2.0 -- 170.248.11.255
IP: 170.248.14.0 -- 170.248.41.255
IP: 170.248.44.0/23
IP: 170.248.48.0 -- 170.248.137.255
IP: 170.248.140.0 -- 170.248.159.255
IP: 170.248.172.0 -- 170.248.189.255
IP: 170.248.192.0/18
IP: 170.251.0.0 -- 170.251.9.255
IP: 170.251.12.0 -- 170.251.19.255
IP: 170.251.22.0 -- 170.251.39.255
IP: 170.251.48.0 -- 170.251.59.255
IP: 170.251.62.0 -- 170.251.89.255
IP: 170.251.92.0 -- 170.251.109.255
IP: 170.251.112.0 -- 170.251.141.255
IP: 170.251.144.0 -- 170.251.148.255
IP: 170.251.152.0/23
IP: 170.251.158.0 -- 170.251.169.255
IP: 170.251.172.0/23
IP: 170.251.176.0 -- 170.252.255.255
IP: 199.89.236.0 -- 199.89.242.255
IP: 199.120.146.0/23
IP: 199.164.229.0/24
IP: 204.62.186.0 -- 204.62.188.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 May 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e6:05:03:de:28:f3:66:e3:8c:2f:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Aug 16 00:51:17 2023 GMT
Not After : Oct 7 10:25:18 2025 GMT
Subject: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:b3:d2:ae:8b:c6:ac:cd:7c:a4:d8:42:41:
80:cd:cd:29:10:48:67:2b:98:75:88:50:fa:af:53:
fa:c6:81:0c:46:7b:cb:5a:52:9a:26:32:35:3f:ae:
36:a8:be:22:39:7f:41:07:66:7d:6d:99:ab:ef:68:
ad:cb:0a:50:4f:e4:91:7d:70:08:35:2f:53:08:90:
ee:23:49:de:6c:9b:c9:1c:7c:3a:80:58:e5:c3:ea:
0f:73:ed:33:6c:d6:16:77:4a:51:b1:1f:af:d5:65:
08:de:c4:c1:8f:19:ad:f0:cc:41:58:23:3e:e7:08:
90:d5:ce:66:fb:d1:1e:9f:79:da:74:aa:1c:32:bc:
c8:56:00:80:16:98:95:cf:e5:7d:c5:65:79:4a:f9:
39:e0:7f:84:12:9c:d5:1c:4e:20:44:a4:d4:f3:40:
f6:06:31:60:8f:58:ec:eb:75:39:d4:17:11:77:2c:
56:65:27:9b:4a:dd:78:e2:91:55:e9:c1:fa:0f:7e:
59:43:f6:57:1b:b6:01:c8:86:94:6b:cf:e2:ac:24:
7b:11:db:b7:23:c3:b1:67:7e:7b:49:cf:e1:1a:ca:
35:91:3f:65:b0:d8:53:63:49:3f:1f:95:f2:5c:35:
c0:8e:9d:ae:f8:7d:04:cf:ab:26:15:cc:4c:47:65:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.0.0-144.36.69.255
144.36.74.0-144.36.103.255
144.36.105.0-144.36.127.255
144.36.130.0-144.36.133.255
144.36.136.0/22
144.36.142.0/23
144.36.146.0/23
144.36.150.0-144.36.175.255
144.36.177.0/24
144.36.179.0-144.36.181.255
144.36.186.0/23
144.36.190.0-144.36.205.255
144.36.208.0/23
144.36.212.0/23
144.36.218.0/23
144.36.237.0-144.36.243.255
144.36.246.0/23
144.36.252.0/23
149.122.0.0/16
170.248.2.0-170.248.11.255
170.248.14.0-170.248.41.255
170.248.44.0/23
170.248.48.0-170.248.137.255
170.248.140.0-170.248.159.255
170.248.172.0-170.248.189.255
170.248.192.0/18
170.251.0.0-170.251.9.255
170.251.12.0-170.251.19.255
170.251.22.0-170.251.39.255
170.251.48.0-170.251.59.255
170.251.62.0-170.251.89.255
170.251.92.0-170.251.109.255
170.251.112.0-170.251.141.255
170.251.144.0-170.251.148.255
170.251.152.0/23
170.251.158.0-170.251.169.255
170.251.172.0/23
170.251.176.0-170.252.255.255
199.89.236.0-199.89.242.255
199.120.146.0/23
199.164.229.0/24
204.62.186.0-204.62.188.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3573
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ad:fa:2e:6b:2a:bc:9f:f2:f6:f7:ba:dc:09:f3:9b:33:53:
ae:ed:1d:72:8a:0b:22:0a:1d:a4:46:93:f6:37:b1:0d:f9:2a:
c4:a3:90:e1:3e:6f:07:95:09:4b:71:98:75:cc:fe:8a:db:f3:
5a:ac:c0:d5:57:59:2b:19:3f:39:8b:81:9a:65:79:43:5d:b2:
ba:be:da:ee:af:e8:1e:ad:ce:1d:9b:af:1c:ad:b2:45:b9:94:
94:87:0d:ef:10:b7:a9:4c:ab:c8:6d:d3:91:0a:20:54:3f:d4:
b8:c9:3d:df:bf:87:fc:54:bf:e9:63:4a:87:13:71:9b:09:a4:
7f:d2:40:5d:00:56:43:88:16:3e:f6:ac:39:e3:a4:33:9c:aa:
a4:ec:24:e5:64:c3:0a:fc:62:e3:46:64:d3:ff:99:76:19:ff:
91:12:58:d7:58:5a:28:fd:d2:30:1b:8d:54:d9:31:cb:c9:8b:
b3:0c:65:0e:af:5c:92:ca:7c:5d:2e:db:48:4d:79:94:d7:66:
21:69:52:00:5f:eb:4f:92:e3:6e:e2:54:84:cc:6f:e2:55:34:
53:ef:52:1b:fe:e1:57:60:b4:1c:c4:8d:95:9a:71:d8:47:90:
6d:aa:5e:b9:e3:b6:25:6c:81:a7:14:aa:bf:7c:ea:b8:ed:83:
f2:c5:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:20 2024 by rpki-client on console-fra.rpki-client.org