Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
File: 95a66ba6-9469-47f7-8328-e12b21a9be23.cer (raw, json)
Hash identifier: 6yKRCBwMimakRVk6NVPqbIBSOGtcBygKtzWlrJmPRN0=
Subject key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F432858477659642CED0A98DBD6546C40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 07 Oct 2024 12:45:27 +0000
Certificate not after: Sun 10 Jan 2027 13:45:27 +0000
Subordinate resources: AS: 3573
IP: 144.36.0.0 -- 144.36.69.255
IP: 144.36.74.0 -- 144.36.103.255
IP: 144.36.105.0 -- 144.36.127.255
IP: 144.36.130.0 -- 144.36.133.255
IP: 144.36.136.0/22
IP: 144.36.142.0/23
IP: 144.36.146.0/23
IP: 144.36.150.0 -- 144.36.175.255
IP: 144.36.177.0/24
IP: 144.36.179.0 -- 144.36.181.255
IP: 144.36.186.0/23
IP: 144.36.190.0 -- 144.36.205.255
IP: 144.36.208.0/23
IP: 144.36.212.0/23
IP: 144.36.218.0/23
IP: 144.36.237.0 -- 144.36.243.255
IP: 144.36.246.0/23
IP: 144.36.252.0/23
IP: 149.122.0.0/16
IP: 170.248.2.0 -- 170.248.11.255
IP: 170.248.14.0 -- 170.248.41.255
IP: 170.248.44.0/23
IP: 170.248.48.0 -- 170.248.137.255
IP: 170.248.140.0 -- 170.248.159.255
IP: 170.248.172.0 -- 170.248.189.255
IP: 170.248.192.0/18
IP: 170.251.0.0 -- 170.251.9.255
IP: 170.251.12.0 -- 170.251.19.255
IP: 170.251.22.0 -- 170.251.39.255
IP: 170.251.48.0 -- 170.251.59.255
IP: 170.251.62.0 -- 170.251.89.255
IP: 170.251.92.0 -- 170.251.109.255
IP: 170.251.112.0 -- 170.251.141.255
IP: 170.251.144.0 -- 170.251.148.255
IP: 170.251.152.0/23
IP: 170.251.158.0 -- 170.251.169.255
IP: 170.251.172.0/23
IP: 170.251.176.0 -- 170.252.255.255
IP: 199.89.236.0 -- 199.89.242.255
IP: 199.120.146.0/23
IP: 199.164.229.0/24
IP: 204.62.186.0 -- 204.62.188.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:76:59:64:2c:ed:0a:98:db:d6:54:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Oct 7 12:45:27 2024 GMT
Not After : Jan 10 13:45:27 2027 GMT
Subject: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:b3:d2:ae:8b:c6:ac:cd:7c:a4:d8:42:41:
80:cd:cd:29:10:48:67:2b:98:75:88:50:fa:af:53:
fa:c6:81:0c:46:7b:cb:5a:52:9a:26:32:35:3f:ae:
36:a8:be:22:39:7f:41:07:66:7d:6d:99:ab:ef:68:
ad:cb:0a:50:4f:e4:91:7d:70:08:35:2f:53:08:90:
ee:23:49:de:6c:9b:c9:1c:7c:3a:80:58:e5:c3:ea:
0f:73:ed:33:6c:d6:16:77:4a:51:b1:1f:af:d5:65:
08:de:c4:c1:8f:19:ad:f0:cc:41:58:23:3e:e7:08:
90:d5:ce:66:fb:d1:1e:9f:79:da:74:aa:1c:32:bc:
c8:56:00:80:16:98:95:cf:e5:7d:c5:65:79:4a:f9:
39:e0:7f:84:12:9c:d5:1c:4e:20:44:a4:d4:f3:40:
f6:06:31:60:8f:58:ec:eb:75:39:d4:17:11:77:2c:
56:65:27:9b:4a:dd:78:e2:91:55:e9:c1:fa:0f:7e:
59:43:f6:57:1b:b6:01:c8:86:94:6b:cf:e2:ac:24:
7b:11:db:b7:23:c3:b1:67:7e:7b:49:cf:e1:1a:ca:
35:91:3f:65:b0:d8:53:63:49:3f:1f:95:f2:5c:35:
c0:8e:9d:ae:f8:7d:04:cf:ab:26:15:cc:4c:47:65:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.0.0-144.36.69.255
144.36.74.0-144.36.103.255
144.36.105.0-144.36.127.255
144.36.130.0-144.36.133.255
144.36.136.0/22
144.36.142.0/23
144.36.146.0/23
144.36.150.0-144.36.175.255
144.36.177.0/24
144.36.179.0-144.36.181.255
144.36.186.0/23
144.36.190.0-144.36.205.255
144.36.208.0/23
144.36.212.0/23
144.36.218.0/23
144.36.237.0-144.36.243.255
144.36.246.0/23
144.36.252.0/23
149.122.0.0/16
170.248.2.0-170.248.11.255
170.248.14.0-170.248.41.255
170.248.44.0/23
170.248.48.0-170.248.137.255
170.248.140.0-170.248.159.255
170.248.172.0-170.248.189.255
170.248.192.0/18
170.251.0.0-170.251.9.255
170.251.12.0-170.251.19.255
170.251.22.0-170.251.39.255
170.251.48.0-170.251.59.255
170.251.62.0-170.251.89.255
170.251.92.0-170.251.109.255
170.251.112.0-170.251.141.255
170.251.144.0-170.251.148.255
170.251.152.0/23
170.251.158.0-170.251.169.255
170.251.172.0/23
170.251.176.0-170.252.255.255
199.89.236.0-199.89.242.255
199.120.146.0/23
199.164.229.0/24
204.62.186.0-204.62.188.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3573
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ca:33:d0:0c:26:51:ec:b1:98:b7:5a:b2:6f:8d:4f:ec:4c:
1c:0e:e4:d9:b1:d2:3f:d6:47:05:16:39:4e:15:0a:5e:86:94:
ff:18:47:d5:9c:05:f0:79:ce:5e:27:6d:c0:8a:87:ce:ed:6c:
df:ee:29:d3:e0:9f:0d:a4:14:0b:3f:4c:a1:0e:4d:ba:04:89:
55:e1:5e:c4:1f:49:6a:7b:25:0d:18:f5:05:97:06:3e:03:7d:
ae:85:a7:1d:48:43:f2:e0:35:77:e9:53:90:ef:92:58:46:6d:
0c:11:ce:1c:f1:96:23:07:51:ff:a2:ff:77:d0:9c:e6:ba:7a:
94:43:8a:6c:01:0d:0c:50:14:cd:25:81:e7:e1:b6:fd:aa:c9:
03:75:fc:57:96:92:1d:7c:ea:c5:73:4b:1f:2f:6e:9f:b2:30:
5f:72:4a:4f:d6:b8:74:d0:e8:4c:38:af:f9:5e:02:05:81:8e:
a7:d8:5b:5f:20:c8:f5:ce:c1:2b:09:a2:36:47:f8:d8:59:75:
c5:3f:34:bc:22:04:e1:d9:51:1c:5f:bd:ce:31:5c:d3:40:e7:
f2:78:d8:9b:7e:20:2f:36:71:f4:1a:fe:13:b8:e3:57:b9:44:
f5:44:27:f9:04:ef:da:17:9d:ab:b5:cc:f2:d0:ee:42:fe:9c:
06:a8:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org