Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
File: b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer (raw, json)
Hash identifier: JwWRqSlisNN1Jxry+ZHHKA7hKd5ADVn0JvFcFn+FHHE=
Subject key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584750A9282322331649A4951F70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Sep 2024 00:45:27 +0000
Certificate not after: Mon 28 Dec 2026 01:45:27 +0000
Subordinate resources: AS: 7265
AS: 11693
AS: 12015
AS: 12026
AS: 12083
AS: 16727
AS: 29737
AS: 29780
AS: 29859
AS: 29895
IP: 23.28.96.0 -- 23.28.255.255
IP: 24.35.0.0 -- 24.35.30.255
IP: 24.35.32.0/19
IP: 24.42.128.0 -- 24.42.227.255
IP: 24.96.0.0/16
IP: 24.192.0.0/16
IP: 24.214.0.0 -- 24.214.72.255
IP: 24.214.74.0 -- 24.214.127.255
IP: 24.214.144.0/22
IP: 24.214.200.0 -- 24.214.228.255
IP: 24.214.241.0 -- 24.214.255.255
IP: 24.236.64.0/18
IP: 50.4.0.0/16
IP: 64.233.192.0/18
IP: 66.216.192.0/19
IP: 67.149.0.0/16
IP: 68.179.128.0/18
IP: 69.1.0.0/18
IP: 69.14.0.0/16
IP: 69.73.0.0/17
IP: 69.171.206.0/24
IP: 72.15.64.0/18
IP: 74.199.0.0/17
IP: 75.76.0.0 -- 75.76.39.255
IP: 75.76.69.0/24
IP: 75.76.84.0/24
IP: 75.76.107.0/24
IP: 75.76.126.0/24
IP: 75.76.138.0 -- 75.76.160.255
IP: 75.76.163.0/24
IP: 76.73.128.0 -- 76.73.193.255
IP: 76.73.214.0/24
IP: 76.73.239.0/24
IP: 96.27.0.0/16
IP: 143.59.0.0/16
IP: 207.98.128.0 -- 207.98.248.255
IP: 207.98.250.0 -- 207.98.255.255
IP: 208.74.232.0/22
IP: 216.47.192.0/19
IP: 216.130.128.0/19
IP: 216.186.128.0/19
IP: 216.186.164.0/24
IP: 216.186.180.0/24
IP: 2606:1100::/32
IP: 2607:3d00::/28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:50:a9:28:23:22:33:16:49:a4:95:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Sep 24 00:45:27 2024 GMT
Not After : Dec 28 01:45:27 2026 GMT
Subject: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:f1:62:d9:4b:b5:93:46:4d:3a:10:88:2a:
7a:1c:a1:1e:6e:65:c2:29:cb:79:66:34:e4:31:4f:
81:e2:cf:a9:33:07:5c:06:93:b2:81:68:4e:04:5c:
1d:16:1d:bd:6c:fd:97:cf:66:6e:6d:da:55:30:ea:
9a:da:93:d6:20:73:19:89:13:6c:79:d3:7f:b0:48:
f2:87:35:8b:b1:d9:6b:35:b9:e1:89:e1:2c:de:6c:
4a:ab:ed:d0:98:0f:0c:6b:91:b5:9e:63:8d:3a:16:
90:1e:38:99:04:f7:30:69:2a:fd:5d:af:52:7a:3b:
45:42:e3:3d:57:d8:7a:7f:7f:86:b6:9b:3e:51:a7:
cb:71:c7:f9:f9:a0:89:89:ca:93:f8:22:07:ac:76:
a2:7d:0a:2e:59:b7:53:1c:43:21:cb:50:5b:f4:0d:
b7:bf:8e:70:1e:ae:46:e5:a4:9e:d2:5e:a5:ef:05:
3c:4b:5f:79:04:91:a3:7c:06:3e:5e:b5:7b:97:26:
18:46:f6:42:78:21:cc:de:05:8a:10:75:bc:48:d3:
0c:60:18:5d:a9:65:3a:1f:9a:ce:7c:ff:fd:26:f6:
99:19:48:22:61:99:b7:85:c3:55:3d:f6:70:27:fe:
a9:5f:d4:2b:3c:f5:d8:07:85:f1:d1:90:b8:d3:93:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.28.96.0-23.28.255.255
24.35.0.0-24.35.30.255
24.35.32.0/19
24.42.128.0-24.42.227.255
24.96.0.0/16
24.192.0.0/16
24.214.0.0-24.214.72.255
24.214.74.0-24.214.127.255
24.214.144.0/22
24.214.200.0-24.214.228.255
24.214.241.0-24.214.255.255
24.236.64.0/18
50.4.0.0/16
64.233.192.0/18
66.216.192.0/19
67.149.0.0/16
68.179.128.0/18
69.1.0.0/18
69.14.0.0/16
69.73.0.0/17
69.171.206.0/24
72.15.64.0/18
74.199.0.0/17
75.76.0.0-75.76.39.255
75.76.69.0/24
75.76.84.0/24
75.76.107.0/24
75.76.126.0/24
75.76.138.0-75.76.160.255
75.76.163.0/24
76.73.128.0-76.73.193.255
76.73.214.0/24
76.73.239.0/24
96.27.0.0/16
143.59.0.0/16
207.98.128.0-207.98.248.255
207.98.250.0-207.98.255.255
208.74.232.0/22
216.47.192.0/19
216.130.128.0/19
216.186.128.0/19
216.186.164.0/24
216.186.180.0/24
IPv6:
2606:1100::/32
2607:3d00::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7265
11693
12015
12026
12083
16727
29737
29780
29859
29895
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:34:43:6d:66:73:2d:0d:66:f6:8d:67:da:e1:18:f3:65:cf:
46:1a:d8:7d:21:ca:a1:cc:05:3d:d2:17:4f:bc:97:96:6e:03:
d0:a6:7d:a1:b8:d6:8b:68:4e:b2:e3:b2:8c:bd:0c:51:d2:4b:
cb:9b:ec:f2:dd:11:02:cc:7b:f8:47:fc:0f:cb:7c:ec:0c:95:
ba:41:4b:fa:e9:5c:1f:15:77:22:dd:ab:39:96:85:63:3a:d4:
f1:03:cf:68:48:c0:bd:f4:73:6b:b7:5c:f0:91:e2:cf:58:2a:
eb:13:40:da:b4:dd:67:29:2c:ed:df:81:d3:a1:cb:06:dc:3c:
49:69:8f:db:d1:0f:f2:44:bd:95:c3:5b:f3:14:f1:cc:9f:16:
2a:66:d5:8b:96:9e:ec:52:81:b4:77:ab:98:d4:74:58:4e:89:
dd:85:4d:dc:fe:85:86:23:29:f1:08:ff:d0:4c:ff:aa:e1:ed:
0a:69:8e:4c:0a:96:3e:30:a7:3e:f4:a9:26:37:30:e4:4f:51:
62:7e:a6:60:d9:e0:44:5c:0c:87:62:29:f1:20:7c:b1:a5:a9:
e3:e5:f3:8b:63:a7:62:76:aa:7d:ad:46:e1:40:0e:7f:2d:4f:
1b:ea:2b:3f:8a:33:3f:a0:e2:89:56:10:ea:83:62:2a:41:49:
a7:99:65:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:08 2024 by rpki-client on console-ams.rpki-client.org