Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
File: 28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer (raw, json)
Hash identifier: nejuPu1//UWZ5Nz8TMe6xMo9nL+tMMeDd4TN5Q4BtEs=
Subject key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F43285849252020F4F5BFA889BB35B580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 10 Mar 2025 20:03:28 +0000
Certificate not after: Tue 21 Jul 2026 00:45:19 +0000
Subordinate resources: AS: 4925
AS: 5797
AS: 6318
AS: 10390
AS: 11121
AS: 11273
AS: 12172
AS: 13542
AS: 13808
AS: 17405
AS: 18509
AS: 19363
AS: 21530
AS: 22142
AS: 22983
AS: 26144
AS: 26789
AS: 27160
AS: 29712
AS: 30037
AS: 32813
AS: 39992
AS: 40466
AS: 46219
AS: 55035
AS: 55085
AS: 398144
IP: 66.55.96.0/20
IP: 69.51.32.0/19
IP: 166.73.0.0/16
IP: 167.16.0.0/16
IP: 170.186.0.0/16
IP: 192.131.45.0 -- 192.131.55.255
IP: 192.131.64.0 -- 192.131.76.255
IP: 192.150.245.0/24
IP: 198.62.137.0 -- 198.62.138.255
IP: 198.137.32.0/19
IP: 198.167.0.0/24
IP: 198.184.0.0/21
IP: 198.185.237.0/24
IP: 198.202.177.0/24
IP: 198.202.182.0/24
IP: 198.246.154.0/24
IP: 198.246.217.0 -- 198.246.218.255
IP: 199.47.152.0/21
IP: 199.187.0.0/21
IP: 204.68.215.0/24
IP: 204.124.84.0 -- 204.124.86.255
IP: 204.126.72.0/24
IP: 204.128.188.0/24
IP: 204.194.120.0 -- 204.194.143.255
IP: 204.238.181.0/24
IP: 205.167.140.0/23
IP: 206.201.48.0/20
IP: 208.66.20.0/22
IP: 208.67.132.0/22
IP: 208.68.228.0/22
IP: 208.72.248.0/21
IP: 208.74.12.0/24
IP: 208.93.24.0/21
IP: 216.66.208.0/20
IP: 216.151.33.0/24
IP: 2604:5f40::/32
IP: 2620:1d:4000::/48
IP: 2620:88::/48
IP: 2620:a6::/48
IP: 2620:10f:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:20:20:f4:f5:bf:a8:89:bb:35:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Mar 10 20:03:28 2025 GMT
Not After : Jul 21 00:45:19 2026 GMT
Subject: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:13:f6:b3:77:5b:e4:05:a7:90:52:34:28:
d3:f8:e5:07:3b:c6:ca:a1:d1:dc:4a:61:75:4f:a4:
9d:1c:15:10:3e:15:4e:e0:e3:7b:13:d6:78:56:25:
04:bd:8b:85:ad:36:89:fe:fc:1f:1f:12:c7:48:d1:
87:85:30:fd:cb:cd:74:ea:99:bd:4a:aa:f9:ea:6e:
d1:3c:c0:76:6e:8e:8a:0d:1c:c1:ba:ed:a0:20:24:
05:4d:8e:74:39:ee:91:5b:1f:fb:10:6e:22:9f:88:
91:fe:12:fa:46:b9:25:5b:00:0e:a7:20:bc:27:de:
40:97:07:1a:46:07:ea:6a:62:d0:20:71:a4:9e:d8:
25:0a:b9:44:f4:b4:cf:e4:29:92:1d:25:a6:ff:c7:
4f:44:4e:50:67:16:a1:7a:88:82:c2:8e:c3:a5:13:
92:66:0d:76:83:01:12:fc:e3:a2:e1:9c:f9:9e:ab:
a8:cc:b8:bd:90:50:32:5e:57:d3:c7:bb:4d:17:fa:
ba:64:aa:a8:de:d3:01:16:2c:13:bb:d3:3b:c6:e6:
9d:cb:66:e3:5d:63:ee:43:f9:dc:bd:5f:68:e2:ad:
cf:71:c3:51:bf:05:c3:6b:ad:d3:bb:f7:77:a8:d0:
42:3e:17:d8:98:98:28:21:fa:5e:51:28:d1:1b:0a:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.55.96.0/20
69.51.32.0/19
166.73.0.0/16
167.16.0.0/16
170.186.0.0/16
192.131.45.0-192.131.55.255
192.131.64.0-192.131.76.255
192.150.245.0/24
198.62.137.0-198.62.138.255
198.137.32.0/19
198.167.0.0/24
198.184.0.0/21
198.185.237.0/24
198.202.177.0/24
198.202.182.0/24
198.246.154.0/24
198.246.217.0-198.246.218.255
199.47.152.0/21
199.187.0.0/21
204.68.215.0/24
204.124.84.0-204.124.86.255
204.126.72.0/24
204.128.188.0/24
204.194.120.0-204.194.143.255
204.238.181.0/24
205.167.140.0/23
206.201.48.0/20
208.66.20.0/22
208.67.132.0/22
208.68.228.0/22
208.72.248.0/21
208.74.12.0/24
208.93.24.0/21
216.66.208.0/20
216.151.33.0/24
IPv6:
2604:5f40::/32
2620:1d:4000::/48
2620:88::/48
2620:a6::/48
2620:10f:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4925
5797
6318
10390
11121
11273
12172
13542
13808
17405
18509
19363
21530
22142
22983
26144
26789
27160
29712
30037
32813
39992
40466
46219
55035
55085
398144
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:8e:40:80:ae:05:96:56:9a:83:30:d1:05:48:54:a3:71:7c:
6b:2a:32:a6:dc:99:65:1d:43:10:d4:b2:b1:88:89:e9:21:65:
a1:f5:8b:af:3f:83:4d:bf:1e:73:58:00:57:61:cd:f2:b0:3f:
7d:23:3b:a5:86:3f:a5:90:5b:e9:7f:06:06:f6:c0:df:38:38:
2b:87:81:b9:76:41:b1:9a:18:7b:05:73:38:d3:c9:ec:d1:64:
17:cd:4c:4c:c8:6c:72:f6:7c:c8:37:bc:e0:9e:73:5e:33:45:
1e:17:93:3d:4b:19:17:c0:c2:15:e0:7d:03:f8:1b:2a:b0:d3:
77:b6:7d:f2:d4:47:79:20:9c:b0:9c:36:14:ce:8f:d7:18:08:
21:17:99:d3:e0:cd:f7:f3:c5:f1:0b:91:24:a4:f3:a1:43:01:
33:d7:0c:43:a3:ad:fd:23:9f:da:98:cd:8d:3d:18:5a:27:f0:
4f:16:fa:55:2d:83:1f:bd:f8:d6:9a:bd:11:84:69:62:53:c8:
00:81:79:94:0e:26:85:50:10:56:e5:5f:7a:88:ad:98:78:38:
52:4b:ab:42:ec:72:88:76:e5:a3:d3:3b:a3:1c:11:d4:9c:9d:
b7:68:17:aa:88:bc:d3:18:59:82:1b:55:10:ed:2f:3c:4d:dc:
d7:85:94:6d
-----BEGIN CERTIFICATE-----
MIIIrTCCB5WgAwIBAgIUAQ0Mn0MoWEklICD09b+oibs1tYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MDMxMDIwMDMyOFoXDTI2MDcyMTAwNDUxOVowLzEtMCsGA1UEAxMk
MjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0ZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRwT9rN3W+QFp5BSNCjT+OUHO8bKodHcSmF1
T6SdHBUQPhVO4ON7E9Z4ViUEvYuFrTaJ/vwfHxLHSNGHhTD9y8106pm9Sqr56m7R
PMB2bo6KDRzBuu2gICQFTY50Oe6RWx/7EG4in4iR/hL6RrklWwAOpyC8J95Alwca
RgfqamLQIHGkntglCrlE9LTP5CmSHSWm/8dPRE5QZxaheoiCwo7DpROSZg12gwES
/OOi4Zz5nquozLi9kFAyXlfTx7tNF/q6ZKqo3tMBFiwTu9M7xuady2bjXWPuQ/nc
vV9o4q3PccNRvwXDa63Tu/d3qNBCPhfYmJgoIfpeUSjRGwq8MwIDAQABo4IFvzCC
BbswHQYDVR0OBBYEFAZYO+pX1tR3Ol/xDXTvbZrsdkH1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y
OGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzI4YWVlZTcyLWJjOWMtNGEwMS1h
OWY1LTM4YTgwYWM4NGQ1Mi8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFj
ODRkNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwggFSBggrBgEF
BQcBBwEB/wSCAUEwggE9MIIBBgQCAAEwgf8DBARCN2ADBAVFMyADAwCmSQMDAKcQ
AwMAqrowDAMEAMCDLQMEA8CDMDAMAwQGwINAAwQAwINMAwQAwJb1MAwDBADGPokD
BADGPooDBAXGiSADBADGpwADBAPGuAADBADGue0DBADGyrEDBADGyrYDBADG9pow
DAMEAMb22QMEAMb22gMEA8cvmAMEA8e7AAMEAMxE1zAMAwQCzHxUAwQAzHxWAwQA
zH5IAwQAzIC8MAwDBAPMwngDBATMwoADBADM7rUDBAHNp4wDBATOyTADBALQQhQD
BALQQ4QDBALQROQDBAPQSPgDBADQSgwDBAPQXRgDBATYQtADBADYlyEwMQQCAAIw
KwMFACYEX0ADBwAmIAAdQAADBwAmIACIAAADBwAmIACmAAADBwQmIAEPQAAwgYgG
CCsGAQUFBwEIAQH/BHkwd6B1MHMCAhM9AgIWpQICGK4CAiiWAgIrcQICLAkCAi+M
AgI05gICNfACAkP9AgJITQICS6MCAlQaAgJWfgICWccCAmYgAgJopQICahgCAnQQ
AgJ1VQIDAIAtAgMAnDgCAwCeEgIDALSLAgMA1vsCAwDXLQIDBhNAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AIiOQICuBZZWmoMw0QVIVKNxfGsqMqbcmWUdQxDUsrGIiekhZaH1i68/g02/HnNY
AFdhzfKwP30jO6WGP6WQW+l/Bgb2wN84OCuHgbl2QbGaGHsFczjTyezRZBfNTEzI
bHL2fMg3vOCec14zRR4Xkz1LGRfAwhXgfQP4Gyqw03e2ffLUR3kgnLCcNhTOj9cY
CCEXmdPgzffzxfELkSSk86FDATPXDEOjrf0jn9qYzY09GFon8E8W+lUtgx+9+Naa
vRGEaWJTyACBeZQOJoVQEFblX3qIrZh4OFJLq0Lscoh25aPTO6McEdScnbdoF6qI
vNMYWYIbVRDtLzxN3NeFlG0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:46 2025 by rpki-client