
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
File: 28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer (raw, json)
Hash identifier: SF3ntY1noEUAbciJlhZtBDlHGBKd1/k6ByUDHRhR4K8=
Subject key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F43285848CEDC5E6AEBE2A4E206FCC800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 07 Feb 2025 22:27:25 +0000
Certificate not after: Tue 21 Jul 2026 00:45:19 +0000
Subordinate resources: AS: 4925
AS: 5797
AS: 6318
AS: 10390
AS: 11121
AS: 11273
AS: 12172
AS: 13542
AS: 13808
AS: 17405
AS: 18509
AS: 19363
AS: 21530
AS: 22142
AS: 22983
AS: 26144
AS: 26789
AS: 27160
AS: 29712
AS: 32813
AS: 39992
AS: 40466
AS: 46219
AS: 55035
AS: 55085
AS: 398144
IP: 66.55.96.0/20
IP: 69.51.32.0/19
IP: 166.73.0.0/16
IP: 167.16.0.0/16
IP: 170.186.0.0/16
IP: 192.131.45.0 -- 192.131.55.255
IP: 192.131.64.0 -- 192.131.76.255
IP: 192.150.245.0/24
IP: 198.62.137.0 -- 198.62.138.255
IP: 198.137.32.0/19
IP: 198.167.0.0/24
IP: 198.184.0.0/21
IP: 198.185.237.0/24
IP: 198.202.177.0/24
IP: 198.202.182.0/24
IP: 198.246.154.0/24
IP: 198.246.217.0 -- 198.246.218.255
IP: 199.47.152.0/21
IP: 199.187.0.0/21
IP: 204.68.215.0/24
IP: 204.124.84.0 -- 204.124.86.255
IP: 204.126.72.0/24
IP: 204.128.188.0/24
IP: 204.194.120.0 -- 204.194.143.255
IP: 204.238.181.0/24
IP: 205.167.140.0/23
IP: 206.201.48.0/20
IP: 208.66.20.0/22
IP: 208.67.132.0/22
IP: 208.68.228.0/22
IP: 208.72.248.0/21
IP: 208.74.12.0/24
IP: 208.93.24.0/21
IP: 216.66.208.0/20
IP: 216.151.33.0/24
IP: 2604:5f40::/32
IP: 2620:1d:4000::/48
IP: 2620:88::/48
IP: 2620:a6::/48
IP: 2620:10f:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Feb 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ce:dc:5e:6a:eb:e2:a4:e2:06:fc:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Feb 7 22:27:25 2025 GMT
Not After : Jul 21 00:45:19 2026 GMT
Subject: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:13:f6:b3:77:5b:e4:05:a7:90:52:34:28:
d3:f8:e5:07:3b:c6:ca:a1:d1:dc:4a:61:75:4f:a4:
9d:1c:15:10:3e:15:4e:e0:e3:7b:13:d6:78:56:25:
04:bd:8b:85:ad:36:89:fe:fc:1f:1f:12:c7:48:d1:
87:85:30:fd:cb:cd:74:ea:99:bd:4a:aa:f9:ea:6e:
d1:3c:c0:76:6e:8e:8a:0d:1c:c1:ba:ed:a0:20:24:
05:4d:8e:74:39:ee:91:5b:1f:fb:10:6e:22:9f:88:
91:fe:12:fa:46:b9:25:5b:00:0e:a7:20:bc:27:de:
40:97:07:1a:46:07:ea:6a:62:d0:20:71:a4:9e:d8:
25:0a:b9:44:f4:b4:cf:e4:29:92:1d:25:a6:ff:c7:
4f:44:4e:50:67:16:a1:7a:88:82:c2:8e:c3:a5:13:
92:66:0d:76:83:01:12:fc:e3:a2:e1:9c:f9:9e:ab:
a8:cc:b8:bd:90:50:32:5e:57:d3:c7:bb:4d:17:fa:
ba:64:aa:a8:de:d3:01:16:2c:13:bb:d3:3b:c6:e6:
9d:cb:66:e3:5d:63:ee:43:f9:dc:bd:5f:68:e2:ad:
cf:71:c3:51:bf:05:c3:6b:ad:d3:bb:f7:77:a8:d0:
42:3e:17:d8:98:98:28:21:fa:5e:51:28:d1:1b:0a:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.55.96.0/20
69.51.32.0/19
166.73.0.0/16
167.16.0.0/16
170.186.0.0/16
192.131.45.0-192.131.55.255
192.131.64.0-192.131.76.255
192.150.245.0/24
198.62.137.0-198.62.138.255
198.137.32.0/19
198.167.0.0/24
198.184.0.0/21
198.185.237.0/24
198.202.177.0/24
198.202.182.0/24
198.246.154.0/24
198.246.217.0-198.246.218.255
199.47.152.0/21
199.187.0.0/21
204.68.215.0/24
204.124.84.0-204.124.86.255
204.126.72.0/24
204.128.188.0/24
204.194.120.0-204.194.143.255
204.238.181.0/24
205.167.140.0/23
206.201.48.0/20
208.66.20.0/22
208.67.132.0/22
208.68.228.0/22
208.72.248.0/21
208.74.12.0/24
208.93.24.0/21
216.66.208.0/20
216.151.33.0/24
IPv6:
2604:5f40::/32
2620:1d:4000::/48
2620:88::/48
2620:a6::/48
2620:10f:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4925
5797
6318
10390
11121
11273
12172
13542
13808
17405
18509
19363
21530
22142
22983
26144
26789
27160
29712
32813
39992
40466
46219
55035
55085
398144
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:00:c6:cb:30:46:ad:65:78:2e:a1:7c:ec:86:3c:81:c4:c6:
ca:59:28:5c:f2:1f:56:84:0d:15:a6:50:f6:48:2c:33:61:47:
48:53:93:c6:c6:cd:c6:5b:e2:2c:99:9d:b3:c8:14:c5:66:d2:
08:36:3a:6d:dd:03:7e:68:06:95:2b:d2:b8:7c:4d:56:08:49:
50:4e:d0:fe:34:df:fa:60:27:36:82:47:4e:d3:6d:67:ac:83:
c3:d1:dc:8a:b6:6a:7f:ab:19:a3:90:d5:5a:40:6b:e1:1b:1b:
3f:10:1a:93:aa:08:3e:b4:1f:52:2f:fa:71:a2:f7:b1:5e:7f:
1d:3b:e7:21:1b:7b:60:b2:f5:af:5b:84:47:1b:6f:08:e8:02:
de:2d:10:a8:be:dc:ac:1d:ca:ea:0d:d6:b7:c0:8e:a3:e1:3a:
49:89:e7:0c:f2:b7:16:09:da:e5:9e:41:bb:a2:e7:32:98:9a:
53:57:36:d7:fd:35:8a:81:7c:0a:ef:ef:11:0e:17:d3:aa:f3:
12:dc:c1:23:9f:5b:75:2f:f4:ec:a0:46:c6:fc:ac:dc:7e:23:
74:8a:62:ac:16:14:5c:af:af:36:c1:9e:b9:6d:73:93:38:26:
00:63:bb:4a:40:f7:53:af:fb:51:ba:6f:19:d2:ed:2a:55:6d:
31:22:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 00:57:19 2025 by rpki-client