Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
File: b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer (raw, json)
Hash identifier: KbkO3O8NDuCSylgWLuoIT4my3Uj4t8KTIWaQOGXPVOI=
Subject key identifier: 31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F432858452D7B072E6B79820886EA5460
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 12 Mar 2024 00:45:20 +0000
Certificate not after: Mon 15 Jun 2026 00:45:20 +0000
Subordinate resources: AS: 10532
AS: 12200
AS: 19994
AS: 22720
AS: 27357
AS: 33070
AS: 33439
AS: 36248
AS: 54636
AS: 397485
IP: 23.253.0.0/16
IP: 50.56.0.0 -- 50.56.147.255
IP: 50.56.152.0 -- 50.57.239.255
IP: 64.39.0.0/19
IP: 64.49.192.0/18
IP: 65.61.128.0/18
IP: 66.216.64.0/18
IP: 67.23.0.0 -- 67.23.47.255
IP: 67.192.0.0/16
IP: 67.207.128.0/19
IP: 69.20.0.0/17
IP: 72.3.128.0/17
IP: 72.4.112.0/20
IP: 72.32.0.0/16
IP: 74.205.0.0/17
IP: 98.129.0.0 -- 98.129.228.255
IP: 98.129.230.0 -- 98.129.255.255
IP: 104.130.0.0/16
IP: 104.239.128.0/17
IP: 108.166.0.0/17
IP: 108.171.160.0/19
IP: 146.20.0.0/16
IP: 148.62.0.0/16
IP: 148.65.0.0/16
IP: 149.116.0.0/16
IP: 159.135.64.0/18
IP: 159.135.160.0 -- 159.135.223.255
IP: 159.135.240.0/20
IP: 161.47.0.0/16
IP: 162.209.0.0/17
IP: 162.242.128.0/17
IP: 166.78.0.0/16
IP: 166.86.0.0/16
IP: 172.99.64.0/18
IP: 173.45.224.0/19
IP: 173.203.0.0/16
IP: 174.143.0.0/16
IP: 184.106.0.0 -- 184.106.54.255
IP: 184.106.56.0 -- 184.106.255.255
IP: 192.237.128.0/17
IP: 198.61.128.0/17
IP: 198.101.128.0/17
IP: 199.182.60.0/22
IP: 204.232.128.0/17
IP: 207.97.192.0/18
IP: 208.78.96.0/21
IP: 209.20.64.0/19
IP: 209.61.128.0/18
IP: 209.114.32.0/19
IP: 2001:4800::/29
IP: 2620:13f::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Apr 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:2d:7b:07:2e:6b:79:82:08:86:ea:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Mar 12 00:45:20 2024 GMT
Not After : Jun 15 00:45:20 2026 GMT
Subject: CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:47:73:f4:9b:dc:7a:ec:85:79:52:b2:b0:
be:bb:b1:fd:75:ae:7b:e7:69:72:aa:2f:c4:18:e6:
2c:6c:a4:58:52:d1:09:0e:72:1e:64:27:15:7f:79:
0a:95:ff:ac:67:fd:2a:c3:61:dc:95:92:ed:73:bd:
10:93:fe:cb:d2:36:a2:34:e1:63:ee:ac:fe:56:9d:
72:f7:fd:e3:28:cf:6d:f6:e7:c5:03:2c:f6:9e:7c:
47:2e:33:d1:40:1e:3e:96:7f:c3:28:90:17:0e:34:
70:7a:dd:a9:de:92:71:c1:b9:57:c9:e6:a1:95:06:
d4:70:29:e5:91:71:74:5c:d1:4f:27:1a:a9:13:58:
0b:9d:a3:07:15:01:70:90:45:9f:c9:b9:01:a7:fa:
8d:80:a0:d3:0c:df:04:d9:2b:dc:c4:ba:a2:0a:da:
e5:fc:fe:cc:4f:fc:ca:26:ac:c1:01:d7:c5:d5:28:
0f:26:fb:96:87:3e:87:fe:6d:2f:7b:ad:f3:47:8c:
56:62:37:75:8a:29:3a:5a:3c:9f:b7:c8:cf:5e:c6:
81:d7:85:a9:6b:67:5c:5b:cf:13:00:cc:7b:13:f8:
af:26:57:12:d3:94:34:63:2b:68:14:f8:13:cb:c0:
c2:c1:c9:2b:9c:16:79:05:ec:21:3b:4f:4d:15:f2:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.253.0.0/16
50.56.0.0-50.56.147.255
50.56.152.0-50.57.239.255
64.39.0.0/19
64.49.192.0/18
65.61.128.0/18
66.216.64.0/18
67.23.0.0-67.23.47.255
67.192.0.0/16
67.207.128.0/19
69.20.0.0/17
72.3.128.0/17
72.4.112.0/20
72.32.0.0/16
74.205.0.0/17
98.129.0.0-98.129.228.255
98.129.230.0-98.129.255.255
104.130.0.0/16
104.239.128.0/17
108.166.0.0/17
108.171.160.0/19
146.20.0.0/16
148.62.0.0/16
148.65.0.0/16
149.116.0.0/16
159.135.64.0/18
159.135.160.0-159.135.223.255
159.135.240.0/20
161.47.0.0/16
162.209.0.0/17
162.242.128.0/17
166.78.0.0/16
166.86.0.0/16
172.99.64.0/18
173.45.224.0/19
173.203.0.0/16
174.143.0.0/16
184.106.0.0-184.106.54.255
184.106.56.0-184.106.255.255
192.237.128.0/17
198.61.128.0/17
198.101.128.0/17
199.182.60.0/22
204.232.128.0/17
207.97.192.0/18
208.78.96.0/21
209.20.64.0/19
209.61.128.0/18
209.114.32.0/19
IPv6:
2001:4800::/29
2620:13f::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10532
12200
19994
22720
27357
33070
33439
36248
54636
397485
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:e6:da:bd:2e:02:42:87:aa:fb:da:4c:66:bf:0c:90:da:af:
0c:d6:d7:dd:96:f6:e2:37:d5:6a:63:54:87:2d:74:50:f7:5d:
5e:6b:e4:1e:11:ef:c4:2c:f4:79:2e:8a:c7:e5:aa:63:71:9f:
d4:bd:ff:04:0f:80:68:e3:2d:53:58:c8:f1:48:34:76:d8:60:
11:13:a2:a3:10:c0:82:ea:01:ca:44:56:7f:29:4c:df:43:c2:
3a:23:53:36:84:63:e4:75:7b:8c:15:bd:8e:1c:2b:e6:71:c9:
b4:5c:2d:5e:62:85:64:16:38:04:04:39:8a:4c:b2:38:98:4b:
cc:b5:ea:a8:6a:64:38:cf:e9:b5:80:d8:e4:2f:92:94:ee:a2:
96:1c:6b:92:60:69:97:24:58:25:ec:2f:7b:3b:c7:b8:19:ed:
e4:b2:ba:68:64:85:8e:b1:8d:77:24:06:b4:bc:26:43:97:a1:
96:90:57:41:64:05:96:49:af:d1:c7:9d:f9:9c:32:e4:bb:40:
22:d6:fe:b6:a8:40:b1:31:e1:34:d3:3f:01:3e:1e:e9:ef:2e:
75:02:6d:c5:45:71:51:b3:f1:0a:3d:1d:bf:6a:69:21:af:30:
11:5a:1d:32:83:8d:6c:1c:14:8c:00:b6:a5:27:b4:31:7e:1b:
56:c6:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:34:21 2024 by rpki-client on console-ams.rpki-client.org