Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
File: d70d8b7e-aada-4cdc-920d-dda617bdd989.cer (raw, json)
Hash identifier: F4mXrX1geJwNsNTkU034bCItcZWimHuQybWhymOygXE=
Subject key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F432858428CAC24F5B0734D0F1B3D4980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 15 Jul 2023 00:45:16 +0000
Certificate not after: Fri 17 Oct 2025 00:45:16 +0000
Subordinate resources: AS: 11404
AS: 11837
AS: 14589
AS: 16540
AS: 19975
AS: 21817
AS: 22759
AS: 23292
AS: 26706
AS: 27194
AS: 27568
AS: 29870
AS: 29962
AS: 32028
AS: 32107
AS: 32265
AS: 54858
IP: 23.252.48.0/20
IP: 24.35.64.0/19
IP: 24.56.192.0/18
IP: 24.113.0.0/16
IP: 24.143.64.0/18
IP: 57.132.0.0/17
IP: 63.142.144.0/20
IP: 64.85.224.0/19
IP: 64.187.160.0/20
IP: 65.50.192.0/19
IP: 65.183.192.0/19
IP: 66.109.96.0/20
IP: 66.234.192.0/19
IP: 66.235.0.0/18
IP: 67.218.96.0/19
IP: 68.66.144.0/20
IP: 68.67.80.0/20
IP: 69.36.224.0/19
IP: 69.42.0.0/19
IP: 72.29.160.0/19
IP: 74.82.128.0/20
IP: 74.85.32.0 -- 74.85.95.255
IP: 76.14.0.0/16
IP: 76.191.64.0/18
IP: 98.158.0.0/20
IP: 104.152.100.0 -- 104.152.107.255
IP: 104.156.96.0/20
IP: 104.202.0.0/17
IP: 104.220.0.0/16
IP: 104.232.112.0/20
IP: 104.244.220.0/22
IP: 107.190.208.0/20
IP: 152.44.128.0/17
IP: 162.208.40.0/22
IP: 162.211.216.0/22
IP: 162.222.168.0/22
IP: 162.244.136.0/22
IP: 162.246.92.0/22
IP: 162.248.200.0/21
IP: 172.81.152.0/22
IP: 172.92.0.0/16
IP: 174.127.128.0/17
IP: 192.92.0.0/21
IP: 192.175.24.0/21
IP: 198.161.144.0/22
IP: 198.180.225.0/24
IP: 198.244.96.0/20
IP: 199.7.192.0/21
IP: 199.27.104.0/21
IP: 199.27.176.0/22
IP: 199.36.176.0/21
IP: 199.48.56.0/22
IP: 199.59.104.0/22
IP: 199.127.104.0/22
IP: 199.187.148.0/22
IP: 199.189.96.0/21
IP: 199.200.112.0/22
IP: 204.13.80.0/21
IP: 204.14.48.0/21
IP: 204.195.0.0/17
IP: 206.55.172.0/22
IP: 208.52.0.0/17
IP: 208.53.96.0/19
IP: 208.76.152.0/22
IP: 208.76.184.0/22
IP: 209.34.128.0/19
IP: 216.129.96.0/19
IP: 216.243.0.0/18
IP: 2001:1868::/32
IP: 2001:48c0::/32
IP: 2600:2100::/28
IP: 2604:4080::/32
IP: 2605:1f80::/32
IP: 2605:2980::/32
IP: 2605:9080::/32
IP: 2606:8100::/32
IP: 2607:6200::/32
IP: 2607:8100::/32
IP: 2607:f060::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 27 Apr 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:8c:ac:24:f5:b0:73:4d:0f:1b:3d:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Jul 15 00:45:16 2023 GMT
Not After : Oct 17 00:45:16 2025 GMT
Subject: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:4f:51:be:7b:76:bb:2b:23:8c:c5:0b:4c:
66:c4:fd:4b:9d:c9:99:6c:11:21:5a:6f:7a:c2:91:
71:43:1a:4e:30:2a:57:d5:02:46:6a:7d:8f:34:f7:
9d:ab:b5:73:b1:6e:03:8b:0b:9b:3d:40:7b:d8:99:
07:1b:bb:68:d6:7a:33:7c:0a:93:74:ba:97:22:c8:
08:40:66:05:87:d6:7d:f1:3f:6b:90:3a:82:7a:d9:
b3:e8:69:02:b5:dd:e0:04:79:e0:29:d0:3d:f3:52:
c2:22:94:56:24:73:00:80:d9:b1:c6:40:7d:6f:a2:
1a:6b:06:3c:d4:a6:6b:36:ee:8e:e1:f8:e3:6e:29:
6a:ea:99:bb:84:92:06:71:e0:f5:57:e7:b4:e1:7f:
f7:95:ce:38:34:4d:a4:d6:7b:21:74:56:54:8e:e3:
e7:fa:d3:79:16:9a:4f:23:8f:35:a9:00:43:0d:98:
99:b5:5b:53:b2:c3:14:cf:11:09:ea:7f:03:64:78:
2d:e8:63:a2:2a:9e:3f:ea:25:60:c1:13:a8:2a:44:
67:05:36:23:b4:47:03:43:56:dc:ba:f0:ba:05:d6:
8a:b3:e9:cb:41:a5:1c:fd:ba:d4:78:6e:06:43:ca:
e8:a7:2b:f3:9d:14:25:37:8b:6c:1e:ff:71:1d:8a:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.48.0/20
24.35.64.0/19
24.56.192.0/18
24.113.0.0/16
24.143.64.0/18
57.132.0.0/17
63.142.144.0/20
64.85.224.0/19
64.187.160.0/20
65.50.192.0/19
65.183.192.0/19
66.109.96.0/20
66.234.192.0/19
66.235.0.0/18
67.218.96.0/19
68.66.144.0/20
68.67.80.0/20
69.36.224.0/19
69.42.0.0/19
72.29.160.0/19
74.82.128.0/20
74.85.32.0-74.85.95.255
76.14.0.0/16
76.191.64.0/18
98.158.0.0/20
104.152.100.0-104.152.107.255
104.156.96.0/20
104.202.0.0/17
104.220.0.0/16
104.232.112.0/20
104.244.220.0/22
107.190.208.0/20
152.44.128.0/17
162.208.40.0/22
162.211.216.0/22
162.222.168.0/22
162.244.136.0/22
162.246.92.0/22
162.248.200.0/21
172.81.152.0/22
172.92.0.0/16
174.127.128.0/17
192.92.0.0/21
192.175.24.0/21
198.161.144.0/22
198.180.225.0/24
198.244.96.0/20
199.7.192.0/21
199.27.104.0/21
199.27.176.0/22
199.36.176.0/21
199.48.56.0/22
199.59.104.0/22
199.127.104.0/22
199.187.148.0/22
199.189.96.0/21
199.200.112.0/22
204.13.80.0/21
204.14.48.0/21
204.195.0.0/17
206.55.172.0/22
208.52.0.0/17
208.53.96.0/19
208.76.152.0/22
208.76.184.0/22
209.34.128.0/19
216.129.96.0/19
216.243.0.0/18
IPv6:
2001:1868::/32
2001:48c0::/32
2600:2100::/28
2604:4080::/32
2605:1f80::/32
2605:2980::/32
2605:9080::/32
2606:8100::/32
2607:6200::/32
2607:8100::/32
2607:f060::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11404
11837
14589
16540
19975
21817
22759
23292
26706
27194
27568
29870
29962
32028
32107
32265
54858
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:1e:e1:52:48:15:a1:58:fa:72:ea:cf:28:2c:ac:f2:b8:f5:
5d:c4:4b:c5:f0:12:24:e5:cd:f8:e4:ee:50:34:cb:2d:98:fe:
50:32:dd:67:08:1f:2b:83:19:7e:c8:dc:3a:45:24:1f:18:b0:
49:04:ed:b7:05:b5:21:ce:4d:46:b1:f4:d4:62:78:3a:cd:d7:
e0:0e:2a:d1:17:61:3e:b6:13:a4:db:54:eb:af:04:c8:50:f0:
f1:90:a7:ea:21:b4:b1:79:ee:fc:4c:eb:e4:5f:19:4c:59:8c:
ba:2b:75:be:7c:ee:17:5c:1f:ba:ca:7f:ed:0d:4e:b9:25:bc:
6e:1d:de:c8:7e:4b:8e:65:d5:44:3b:0d:78:aa:27:e3:27:73:
10:c6:bc:74:fe:fe:f9:16:8c:af:70:09:8e:6a:fc:b3:92:ec:
f7:b4:1d:1f:dc:bd:c3:cb:06:ee:70:d8:3d:c8:fe:24:70:51:
3f:c3:06:f6:0c:5c:e9:04:ad:98:cb:79:30:e8:d2:07:45:3b:
69:a7:3a:1b:35:7d:ce:74:6f:ed:0d:d9:df:34:00:a7:90:63:
76:4b:96:09:c0:7f:c6:34:66:ab:93:df:3e:1e:bd:ea:e8:1a:
e4:7c:88:3d:a1:c3:6b:2f:54:4d:3c:74:dd:80:34:81:c2:32:
f5:cf:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:21 2024 by rpki-client on console-fra.rpki-client.org