Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
File: b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer (raw, json)
Hash identifier: kyZUPJwFZ+5ZgzetdHPFWlA0srKJwJVk7w9398KzCK8=
Subject key identifier: 31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F432858470C641C9345212FF047E47A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 30 Aug 2024 13:51:22 +0000
Certificate not after: Mon 15 Jun 2026 00:45:20 +0000
Subordinate resources: AS: 10532
AS: 12200
AS: 19994
AS: 22720
AS: 27357
AS: 33070
AS: 33439
AS: 36248
AS: 54636
AS: 397485
IP: 23.253.0.0/16
IP: 50.56.0.0 -- 50.56.147.255
IP: 50.56.152.0 -- 50.57.239.255
IP: 64.39.0.0/19
IP: 64.49.192.0/18
IP: 65.61.128.0/18
IP: 66.216.64.0/18
IP: 67.23.0.0 -- 67.23.47.255
IP: 67.192.0.0/16
IP: 67.207.128.0/19
IP: 69.20.0.0/17
IP: 72.3.128.0/17
IP: 72.4.112.0/20
IP: 72.32.0.0/16
IP: 74.205.0.0/17
IP: 98.129.0.0 -- 98.129.228.255
IP: 98.129.230.0 -- 98.129.255.255
IP: 104.130.0.0/16
IP: 104.239.128.0/17
IP: 108.166.0.0/17
IP: 108.171.160.0/19
IP: 146.20.0.0/16
IP: 148.62.0.0/16
IP: 155.183.0.0/16
IP: 159.135.64.0/18
IP: 159.135.160.0 -- 159.135.223.255
IP: 159.135.240.0/20
IP: 161.47.0.0/16
IP: 162.209.0.0/17
IP: 162.242.128.0/17
IP: 166.78.0.0/16
IP: 166.86.0.0/16
IP: 172.99.64.0/18
IP: 173.45.224.0/19
IP: 173.203.0.0/16
IP: 174.143.0.0/16
IP: 184.106.0.0 -- 184.106.54.255
IP: 184.106.56.0 -- 184.106.255.255
IP: 192.237.128.0/17
IP: 198.61.128.0/17
IP: 198.101.128.0/17
IP: 199.182.60.0/22
IP: 204.232.128.0/17
IP: 207.97.192.0/18
IP: 208.78.96.0/21
IP: 209.20.64.0/19
IP: 209.61.128.0/18
IP: 209.114.32.0/19
IP: 2001:4800::/29
IP: 2620:13f::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:0c:64:1c:93:45:21:2f:f0:47:e4:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Aug 30 13:51:22 2024 GMT
Not After : Jun 15 00:45:20 2026 GMT
Subject: CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:47:73:f4:9b:dc:7a:ec:85:79:52:b2:b0:
be:bb:b1:fd:75:ae:7b:e7:69:72:aa:2f:c4:18:e6:
2c:6c:a4:58:52:d1:09:0e:72:1e:64:27:15:7f:79:
0a:95:ff:ac:67:fd:2a:c3:61:dc:95:92:ed:73:bd:
10:93:fe:cb:d2:36:a2:34:e1:63:ee:ac:fe:56:9d:
72:f7:fd:e3:28:cf:6d:f6:e7:c5:03:2c:f6:9e:7c:
47:2e:33:d1:40:1e:3e:96:7f:c3:28:90:17:0e:34:
70:7a:dd:a9:de:92:71:c1:b9:57:c9:e6:a1:95:06:
d4:70:29:e5:91:71:74:5c:d1:4f:27:1a:a9:13:58:
0b:9d:a3:07:15:01:70:90:45:9f:c9:b9:01:a7:fa:
8d:80:a0:d3:0c:df:04:d9:2b:dc:c4:ba:a2:0a:da:
e5:fc:fe:cc:4f:fc:ca:26:ac:c1:01:d7:c5:d5:28:
0f:26:fb:96:87:3e:87:fe:6d:2f:7b:ad:f3:47:8c:
56:62:37:75:8a:29:3a:5a:3c:9f:b7:c8:cf:5e:c6:
81:d7:85:a9:6b:67:5c:5b:cf:13:00:cc:7b:13:f8:
af:26:57:12:d3:94:34:63:2b:68:14:f8:13:cb:c0:
c2:c1:c9:2b:9c:16:79:05:ec:21:3b:4f:4d:15:f2:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.253.0.0/16
50.56.0.0-50.56.147.255
50.56.152.0-50.57.239.255
64.39.0.0/19
64.49.192.0/18
65.61.128.0/18
66.216.64.0/18
67.23.0.0-67.23.47.255
67.192.0.0/16
67.207.128.0/19
69.20.0.0/17
72.3.128.0/17
72.4.112.0/20
72.32.0.0/16
74.205.0.0/17
98.129.0.0-98.129.228.255
98.129.230.0-98.129.255.255
104.130.0.0/16
104.239.128.0/17
108.166.0.0/17
108.171.160.0/19
146.20.0.0/16
148.62.0.0/16
155.183.0.0/16
159.135.64.0/18
159.135.160.0-159.135.223.255
159.135.240.0/20
161.47.0.0/16
162.209.0.0/17
162.242.128.0/17
166.78.0.0/16
166.86.0.0/16
172.99.64.0/18
173.45.224.0/19
173.203.0.0/16
174.143.0.0/16
184.106.0.0-184.106.54.255
184.106.56.0-184.106.255.255
192.237.128.0/17
198.61.128.0/17
198.101.128.0/17
199.182.60.0/22
204.232.128.0/17
207.97.192.0/18
208.78.96.0/21
209.20.64.0/19
209.61.128.0/18
209.114.32.0/19
IPv6:
2001:4800::/29
2620:13f::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10532
12200
19994
22720
27357
33070
33439
36248
54636
397485
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:81:d7:ae:83:85:d1:95:91:dc:83:3b:d1:18:da:7b:5e:88:
1a:d7:38:43:1b:a8:6f:59:5d:b4:b4:7a:47:b0:7f:c7:49:7b:
a7:36:47:45:a5:d4:f9:00:f2:30:84:98:ad:4a:74:02:6c:ae:
47:d3:b7:7a:03:ca:a8:7c:e0:62:81:b8:84:53:b0:8f:75:b2:
07:0d:5b:a1:d9:e5:18:2e:b3:56:bf:0d:90:e5:4e:ee:35:35:
c7:eb:dd:68:87:8e:24:9d:f9:90:a0:2c:ff:32:af:7a:32:3f:
6b:5b:df:a0:05:0d:90:b0:57:27:8f:9c:5b:62:44:cc:e3:46:
30:ba:99:78:b0:f4:78:4d:7c:5c:a7:22:da:2a:a3:30:23:b1:
c7:07:dd:d4:ee:8c:e7:02:ae:b4:94:b2:fe:fa:e1:51:98:c5:
17:58:5e:ea:7f:34:dd:92:07:46:d3:d4:0c:65:36:94:01:05:
00:18:c8:51:01:98:37:69:93:da:6c:4e:a2:df:e6:c5:eb:e4:
6a:ab:91:8e:35:fa:12:6c:4b:88:47:8b:90:4a:78:8c:11:4d:
6a:7f:65:b7:a6:c1:56:f7:47:3d:8c:a9:ee:2e:19:51:19:ec:
a9:c2:b7:6f:26:43:fb:85:76:b9:b6:d6:48:34:b1:23:8e:36:
b4:69:9d:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:37:58 2024 by rpki-client on console-fra.rpki-client.org