Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
File: 28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer (raw, json)
Hash identifier: KO+N4FUB+3/71EVZj0CwUzWUdrqvYJS8P1Yap6c9qRA=
Subject key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F43285847B9B78F89452368D044D3DE00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 31 Oct 2024 15:54:21 +0000
Certificate not after: Tue 21 Jul 2026 00:45:19 +0000
Subordinate resources: AS: 4925
AS: 5797
AS: 6318
AS: 10390
AS: 11121
AS: 11273
AS: 12172
AS: 13542
AS: 13808
AS: 17405
AS: 18509
AS: 19363
AS: 21530
AS: 22142
AS: 22983
AS: 26144
AS: 26789
AS: 27160
AS: 29712
AS: 32813
AS: 39992
AS: 40466
AS: 46219
AS: 55085
AS: 398144
IP: 66.55.96.0/20
IP: 69.51.32.0/19
IP: 166.73.0.0/16
IP: 167.16.0.0/16
IP: 170.186.0.0/16
IP: 192.131.45.0 -- 192.131.55.255
IP: 192.131.64.0 -- 192.131.76.255
IP: 192.150.245.0/24
IP: 198.62.137.0 -- 198.62.138.255
IP: 198.137.32.0/19
IP: 198.167.0.0/24
IP: 198.184.0.0/21
IP: 198.185.237.0/24
IP: 198.202.177.0/24
IP: 198.202.182.0/24
IP: 198.246.154.0/24
IP: 198.246.217.0 -- 198.246.218.255
IP: 199.47.152.0/21
IP: 199.187.0.0/21
IP: 204.68.215.0/24
IP: 204.124.84.0 -- 204.124.86.255
IP: 204.126.72.0/24
IP: 204.128.188.0/24
IP: 204.194.120.0 -- 204.194.143.255
IP: 204.238.181.0/24
IP: 205.167.140.0/23
IP: 206.201.48.0/20
IP: 208.66.20.0/22
IP: 208.67.132.0/22
IP: 208.68.228.0/22
IP: 208.72.248.0/21
IP: 208.74.12.0/24
IP: 208.93.24.0/21
IP: 216.66.208.0/20
IP: 216.151.33.0/24
IP: 2604:5f40::/32
IP: 2620:88::/48
IP: 2620:a6::/48
IP: 2620:10f:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b9:b7:8f:89:45:23:68:d0:44:d3:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Oct 31 15:54:21 2024 GMT
Not After : Jul 21 00:45:19 2026 GMT
Subject: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:13:f6:b3:77:5b:e4:05:a7:90:52:34:28:
d3:f8:e5:07:3b:c6:ca:a1:d1:dc:4a:61:75:4f:a4:
9d:1c:15:10:3e:15:4e:e0:e3:7b:13:d6:78:56:25:
04:bd:8b:85:ad:36:89:fe:fc:1f:1f:12:c7:48:d1:
87:85:30:fd:cb:cd:74:ea:99:bd:4a:aa:f9:ea:6e:
d1:3c:c0:76:6e:8e:8a:0d:1c:c1:ba:ed:a0:20:24:
05:4d:8e:74:39:ee:91:5b:1f:fb:10:6e:22:9f:88:
91:fe:12:fa:46:b9:25:5b:00:0e:a7:20:bc:27:de:
40:97:07:1a:46:07:ea:6a:62:d0:20:71:a4:9e:d8:
25:0a:b9:44:f4:b4:cf:e4:29:92:1d:25:a6:ff:c7:
4f:44:4e:50:67:16:a1:7a:88:82:c2:8e:c3:a5:13:
92:66:0d:76:83:01:12:fc:e3:a2:e1:9c:f9:9e:ab:
a8:cc:b8:bd:90:50:32:5e:57:d3:c7:bb:4d:17:fa:
ba:64:aa:a8:de:d3:01:16:2c:13:bb:d3:3b:c6:e6:
9d:cb:66:e3:5d:63:ee:43:f9:dc:bd:5f:68:e2:ad:
cf:71:c3:51:bf:05:c3:6b:ad:d3:bb:f7:77:a8:d0:
42:3e:17:d8:98:98:28:21:fa:5e:51:28:d1:1b:0a:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.55.96.0/20
69.51.32.0/19
166.73.0.0/16
167.16.0.0/16
170.186.0.0/16
192.131.45.0-192.131.55.255
192.131.64.0-192.131.76.255
192.150.245.0/24
198.62.137.0-198.62.138.255
198.137.32.0/19
198.167.0.0/24
198.184.0.0/21
198.185.237.0/24
198.202.177.0/24
198.202.182.0/24
198.246.154.0/24
198.246.217.0-198.246.218.255
199.47.152.0/21
199.187.0.0/21
204.68.215.0/24
204.124.84.0-204.124.86.255
204.126.72.0/24
204.128.188.0/24
204.194.120.0-204.194.143.255
204.238.181.0/24
205.167.140.0/23
206.201.48.0/20
208.66.20.0/22
208.67.132.0/22
208.68.228.0/22
208.72.248.0/21
208.74.12.0/24
208.93.24.0/21
216.66.208.0/20
216.151.33.0/24
IPv6:
2604:5f40::/32
2620:88::/48
2620:a6::/48
2620:10f:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4925
5797
6318
10390
11121
11273
12172
13542
13808
17405
18509
19363
21530
22142
22983
26144
26789
27160
29712
32813
39992
40466
46219
55085
398144
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:5e:eb:2f:7b:e8:6c:bd:34:30:0f:56:08:be:6e:f5:08:3a:
e0:11:05:b2:a3:df:37:34:cf:a2:4c:67:50:f1:8a:bf:3a:65:
3e:65:32:bf:9f:60:0a:7c:0d:23:e0:f1:f7:c7:68:92:d3:2d:
6c:e9:dd:ca:ad:75:c0:52:16:dc:7b:6d:36:f3:8a:7a:bf:3e:
47:c7:98:3d:ee:fb:d3:55:b8:2e:f0:4a:dc:79:9d:66:d7:b9:
26:c9:c9:f8:4f:10:72:c6:1a:ca:71:5d:d2:28:c6:79:90:25:
6d:2b:a0:7a:f1:14:c1:6c:8f:6d:3d:42:d7:b5:8f:ba:f0:c9:
34:33:ac:ea:72:46:de:7a:23:af:e0:70:9a:8c:9b:69:c0:0d:
80:1c:7c:3b:b3:b8:7e:af:4b:8e:84:1e:5d:21:b1:6b:15:0b:
7d:dc:89:56:55:f1:78:37:89:a2:41:a2:56:12:95:a2:96:31:
f2:1b:5f:b0:44:97:2e:54:2a:b5:ca:0d:03:d3:2f:49:cd:60:
79:ee:c8:ef:04:a8:5b:0d:53:4e:a7:19:26:8d:37:d7:b5:88:
d3:67:52:bd:c9:90:e3:ca:60:94:3b:48:13:a9:46:18:6a:16:
27:53:e0:60:6f:29:25:fc:31:dd:d9:c1:24:a8:60:88:58:28:
5e:53:1f:91
-----BEGIN CERTIFICATE-----
MIIImjCCB4KgAwIBAgIUAQ0Mn0MoWEe5t4+JRSNo0ETT3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MTAzMTE1NTQyMVoXDTI2MDcyMTAwNDUxOVowLzEtMCsGA1UEAxMk
MjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0ZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRwT9rN3W+QFp5BSNCjT+OUHO8bKodHcSmF1
T6SdHBUQPhVO4ON7E9Z4ViUEvYuFrTaJ/vwfHxLHSNGHhTD9y8106pm9Sqr56m7R
PMB2bo6KDRzBuu2gICQFTY50Oe6RWx/7EG4in4iR/hL6RrklWwAOpyC8J95Alwca
RgfqamLQIHGkntglCrlE9LTP5CmSHSWm/8dPRE5QZxaheoiCwo7DpROSZg12gwES
/OOi4Zz5nquozLi9kFAyXlfTx7tNF/q6ZKqo3tMBFiwTu9M7xuady2bjXWPuQ/nc
vV9o4q3PccNRvwXDa63Tu/d3qNBCPhfYmJgoIfpeUSjRGwq8MwIDAQABo4IFrDCC
BagwHQYDVR0OBBYEFAZYO+pX1tR3Ol/xDXTvbZrsdkH1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y
OGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzI4YWVlZTcyLWJjOWMtNGEwMS1h
OWY1LTM4YTgwYWM4NGQ1Mi8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFj
ODRkNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwggFJBggrBgEF
BQcBBwEB/wSCATgwggE0MIIBBgQCAAEwgf8DBARCN2ADBAVFMyADAwCmSQMDAKcQ
AwMAqrowDAMEAMCDLQMEA8CDMDAMAwQGwINAAwQAwINMAwQAwJb1MAwDBADGPokD
BADGPooDBAXGiSADBADGpwADBAPGuAADBADGue0DBADGyrEDBADGyrYDBADG9pow
DAMEAMb22QMEAMb22gMEA8cvmAMEA8e7AAMEAMxE1zAMAwQCzHxUAwQAzHxWAwQA
zH5IAwQAzIC8MAwDBAPMwngDBATMwoADBADM7rUDBAHNp4wDBATOyTADBALQQhQD
BALQQ4QDBALQROQDBAPQSPgDBADQSgwDBAPQXRgDBATYQtADBADYlyEwKAQCAAIw
IgMFACYEX0ADBwAmIACIAAADBwAmIACmAAADBwQmIAEPQAAwfwYIKwYBBQUHAQgB
Af8EcDBuoGwwagICEz0CAhalAgIYrgICKJYCAitxAgIsCQICL4wCAjTmAgI18AIC
Q/0CAkhNAgJLowICVBoCAlZ+AgJZxwICZiACAmilAgJqGAICdBACAwCALQIDAJw4
AgMAnhICAwC0iwIDANctAgMGE0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXl7rL3vobL00MA9WCL5u9Qg6
4BEFsqPfNzTPokxnUPGKvzplPmUyv59gCnwNI+Dx98doktMtbOndyq11wFIW3Htt
NvOKer8+R8eYPe7701W4LvBK3HmdZte5JsnJ+E8QcsYaynFd0ijGeZAlbSugevEU
wWyPbT1C17WPuvDJNDOs6nJG3nojr+BwmoybacANgBx8O7O4fq9LjoQeXSGxaxUL
fdyJVlXxeDeJokGiVhKVopYx8htfsESXLlQqtcoNA9MvSc1gee7I7wSoWw1TTqcZ
Jo0317WI02dSvcmQ48pglDtIE6lGGGoWJ1PgYG8pJfwx3dnBJKhgiFgoXlMfkQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:36:26 2024 by rpki-client on console-fra.rpki-client.org