Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
File: d70d8b7e-aada-4cdc-920d-dda617bdd989.cer (raw, json)
Hash identifier: PXw79VXx6O/NbAyQXFIUEwSiJYgjfb7H0YFqN9IwnTk=
Subject key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F4328584790DEE414F6A6D37686985380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 17 Oct 2024 00:45:26 +0000
Certificate not after: Wed 20 Jan 2027 01:45:26 +0000
Subordinate resources: AS: 11404
AS: 11837
AS: 14589
AS: 16540
AS: 19975
AS: 21817
AS: 22759
AS: 23292
AS: 26706
AS: 27194
AS: 27568
AS: 29870
AS: 29962
AS: 32028
AS: 32107
AS: 32265
AS: 54858
IP: 23.252.48.0/20
IP: 24.35.64.0/19
IP: 24.56.192.0/18
IP: 24.113.0.0/16
IP: 24.143.64.0/18
IP: 57.132.0.0/17
IP: 63.142.144.0/20
IP: 64.85.224.0/19
IP: 64.187.160.0/20
IP: 65.50.192.0/19
IP: 65.183.192.0/19
IP: 66.109.96.0/20
IP: 66.234.192.0/19
IP: 66.235.0.0/18
IP: 67.218.96.0/19
IP: 68.66.144.0/20
IP: 68.67.80.0/20
IP: 69.36.224.0/19
IP: 69.42.0.0/19
IP: 72.29.160.0/19
IP: 74.82.128.0/20
IP: 74.85.32.0 -- 74.85.95.255
IP: 76.14.0.0/16
IP: 76.191.64.0/18
IP: 98.158.0.0/20
IP: 104.152.100.0 -- 104.152.107.255
IP: 104.156.96.0/20
IP: 104.202.0.0/17
IP: 104.220.0.0/16
IP: 104.232.112.0/20
IP: 104.244.220.0/22
IP: 107.190.208.0/20
IP: 152.44.128.0/17
IP: 162.208.40.0/22
IP: 162.211.216.0/22
IP: 162.222.168.0/22
IP: 162.244.136.0/22
IP: 162.246.92.0/22
IP: 162.248.200.0/21
IP: 172.81.152.0/22
IP: 172.92.0.0/16
IP: 174.127.128.0/17
IP: 192.92.0.0/21
IP: 192.175.24.0/21
IP: 198.161.144.0/22
IP: 198.180.225.0/24
IP: 198.244.96.0/20
IP: 199.7.192.0/21
IP: 199.27.104.0/21
IP: 199.27.176.0/22
IP: 199.36.176.0/21
IP: 199.48.56.0/22
IP: 199.59.104.0/22
IP: 199.127.104.0/22
IP: 199.187.148.0/22
IP: 199.189.96.0/21
IP: 199.200.112.0/22
IP: 204.13.80.0/21
IP: 204.14.48.0/21
IP: 204.195.0.0/17
IP: 206.55.172.0/22
IP: 208.52.0.0/17
IP: 208.53.96.0/19
IP: 208.76.152.0/22
IP: 208.76.184.0/22
IP: 209.34.128.0/19
IP: 216.129.96.0/19
IP: 216.243.0.0/18
IP: 2001:1868::/32
IP: 2001:48c0::/32
IP: 2600:2100::/28
IP: 2604:4080::/32
IP: 2605:1f80::/32
IP: 2605:2980::/32
IP: 2605:9080::/32
IP: 2606:8100::/32
IP: 2607:6200::/32
IP: 2607:8100::/32
IP: 2607:f060::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 22 Nov 2024 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:90:de:e4:14:f6:a6:d3:76:86:98:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Oct 17 00:45:26 2024 GMT
Not After : Jan 20 01:45:26 2027 GMT
Subject: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:4f:51:be:7b:76:bb:2b:23:8c:c5:0b:4c:
66:c4:fd:4b:9d:c9:99:6c:11:21:5a:6f:7a:c2:91:
71:43:1a:4e:30:2a:57:d5:02:46:6a:7d:8f:34:f7:
9d:ab:b5:73:b1:6e:03:8b:0b:9b:3d:40:7b:d8:99:
07:1b:bb:68:d6:7a:33:7c:0a:93:74:ba:97:22:c8:
08:40:66:05:87:d6:7d:f1:3f:6b:90:3a:82:7a:d9:
b3:e8:69:02:b5:dd:e0:04:79:e0:29:d0:3d:f3:52:
c2:22:94:56:24:73:00:80:d9:b1:c6:40:7d:6f:a2:
1a:6b:06:3c:d4:a6:6b:36:ee:8e:e1:f8:e3:6e:29:
6a:ea:99:bb:84:92:06:71:e0:f5:57:e7:b4:e1:7f:
f7:95:ce:38:34:4d:a4:d6:7b:21:74:56:54:8e:e3:
e7:fa:d3:79:16:9a:4f:23:8f:35:a9:00:43:0d:98:
99:b5:5b:53:b2:c3:14:cf:11:09:ea:7f:03:64:78:
2d:e8:63:a2:2a:9e:3f:ea:25:60:c1:13:a8:2a:44:
67:05:36:23:b4:47:03:43:56:dc:ba:f0:ba:05:d6:
8a:b3:e9:cb:41:a5:1c:fd:ba:d4:78:6e:06:43:ca:
e8:a7:2b:f3:9d:14:25:37:8b:6c:1e:ff:71:1d:8a:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.48.0/20
24.35.64.0/19
24.56.192.0/18
24.113.0.0/16
24.143.64.0/18
57.132.0.0/17
63.142.144.0/20
64.85.224.0/19
64.187.160.0/20
65.50.192.0/19
65.183.192.0/19
66.109.96.0/20
66.234.192.0/19
66.235.0.0/18
67.218.96.0/19
68.66.144.0/20
68.67.80.0/20
69.36.224.0/19
69.42.0.0/19
72.29.160.0/19
74.82.128.0/20
74.85.32.0-74.85.95.255
76.14.0.0/16
76.191.64.0/18
98.158.0.0/20
104.152.100.0-104.152.107.255
104.156.96.0/20
104.202.0.0/17
104.220.0.0/16
104.232.112.0/20
104.244.220.0/22
107.190.208.0/20
152.44.128.0/17
162.208.40.0/22
162.211.216.0/22
162.222.168.0/22
162.244.136.0/22
162.246.92.0/22
162.248.200.0/21
172.81.152.0/22
172.92.0.0/16
174.127.128.0/17
192.92.0.0/21
192.175.24.0/21
198.161.144.0/22
198.180.225.0/24
198.244.96.0/20
199.7.192.0/21
199.27.104.0/21
199.27.176.0/22
199.36.176.0/21
199.48.56.0/22
199.59.104.0/22
199.127.104.0/22
199.187.148.0/22
199.189.96.0/21
199.200.112.0/22
204.13.80.0/21
204.14.48.0/21
204.195.0.0/17
206.55.172.0/22
208.52.0.0/17
208.53.96.0/19
208.76.152.0/22
208.76.184.0/22
209.34.128.0/19
216.129.96.0/19
216.243.0.0/18
IPv6:
2001:1868::/32
2001:48c0::/32
2600:2100::/28
2604:4080::/32
2605:1f80::/32
2605:2980::/32
2605:9080::/32
2606:8100::/32
2607:6200::/32
2607:8100::/32
2607:f060::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11404
11837
14589
16540
19975
21817
22759
23292
26706
27194
27568
29870
29962
32028
32107
32265
54858
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:53:2a:93:95:d3:1d:7b:13:ee:86:36:1f:ee:7b:72:37:0d:
3e:15:f3:2e:0d:f9:5b:c8:ab:d4:17:0c:71:2a:22:39:eb:60:
a4:25:79:a2:b7:16:6d:d2:a3:b7:63:a8:67:33:e9:44:93:84:
96:49:39:ac:32:cb:da:38:57:77:88:2c:36:5b:01:ad:92:5b:
39:57:01:3d:9b:97:eb:b7:9f:69:98:16:9a:85:af:cb:1b:19:
ac:e7:cd:e1:6f:b7:4f:6a:c7:9a:b2:93:f8:63:a2:76:bb:6a:
6a:84:7a:01:e9:6f:79:fe:d8:e0:bf:f5:ec:da:64:5b:d5:00:
76:1f:e9:ac:89:33:02:e2:71:8b:7e:be:90:ab:5e:fe:16:72:
24:f8:1a:01:f5:f6:12:1d:77:52:7c:b0:6f:dc:c5:66:06:bd:
85:54:8e:e4:bf:7e:c6:6c:e9:96:40:d3:68:78:18:99:ba:af:
fe:74:d6:7e:45:e6:a7:f6:b3:a8:2e:25:28:f7:de:b5:48:7a:
ce:9f:7d:6a:cc:75:d0:da:33:07:ae:36:35:1b:7b:52:84:32:
6f:7e:d5:84:53:db:17:57:be:eb:1f:5c:42:4e:87:1f:1d:0c:
dd:5b:e9:3c:4a:7e:62:98:cd:20:07:e6:f2:bc:72:1b:27:42:
2c:0c:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:31 2024 by rpki-client on console-fra.rpki-client.org