Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
File: 4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer (raw, json)
Hash identifier: JLdD6x/89eb7sJGIoXdAe14JiS0hzZT06gKU5TlxG2g=
Subject key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858439D50044FD64AC8A7ED750C80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 20 Oct 2023 16:35:20 +0000
Certificate not after: Thu 22 Jan 2026 17:35:20 +0000
Subordinate resources: AS: 174
AS: 2149
AS: 4550
AS: 6259
AS: 6299
AS: 6494
AS: 6496
AS: 7061
AS: 7458
AS: 10768
AS: 11024
AS: 11220
AS: 11526
AS: 12207
AS: 16631
AS: 19164
AS: 22099
IP: 64.4.192.0/19
IP: 64.17.48.0/20
IP: 64.202.0.0/19
IP: 64.254.192.0/19
IP: 66.28.0.0/16
IP: 66.71.224.0/20
IP: 66.102.96.0/19
IP: 66.132.0.0/17
IP: 66.250.0.0/16
IP: 206.183.224.0/19
IP: 207.152.0.0/18
IP: 207.230.0.0/19
IP: 207.234.0.0/17
IP: 207.254.144.0/20
IP: 209.17.96.0/20
IP: 209.41.192.0/18
IP: 209.115.0.0/17
IP: 209.146.0.0/17
IP: 216.28.0.0/15
IP: 216.55.80.0/20
IP: 216.168.64.0/20
IP: 216.177.96.0/19
IP: 216.229.128.0/20
IP: 2001:500:2::/48
IP: 2001:506:9::/48
IP: 2001:550::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 May 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9d:50:04:4f:d6:4a:c8:a7:ed:75:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Oct 20 16:35:20 2023 GMT
Not After : Jan 22 17:35:20 2026 GMT
Subject: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:18:59:64:9a:da:8d:56:99:db:72:56:74:
61:fd:f5:78:eb:4c:04:bf:16:e8:0c:ca:f8:3c:f8:
bf:a5:07:5e:cb:cd:c3:60:87:2e:1b:ec:65:1f:a8:
20:cb:88:b1:8b:ff:24:47:3b:45:aa:9c:80:69:e1:
cc:46:76:83:cf:6f:40:26:dc:fb:35:76:e8:c3:1a:
27:95:5e:85:f4:13:68:ec:1f:46:78:d0:1f:e1:2f:
43:de:10:4b:82:96:1e:51:be:c3:a0:96:ca:38:39:
df:89:f7:8a:ac:4c:df:d0:99:c8:25:40:fe:4d:c1:
00:17:f0:6b:a8:a7:7b:f3:98:53:14:df:83:ae:4a:
2e:8b:b2:52:0e:df:e3:63:ad:4c:95:c2:5e:73:b8:
99:8a:66:f7:0b:b3:43:37:f3:53:05:73:78:ff:22:
a1:d3:fb:bd:a4:f5:b2:08:fa:c9:2b:90:c9:b2:05:
6c:9f:4e:ea:41:7e:0d:47:99:fa:1e:26:ef:d6:90:
d9:ff:d7:6d:82:9b:80:f8:e1:ac:2d:08:79:fc:52:
b2:0e:99:49:3e:da:3e:cd:32:00:f6:60:c3:63:48:
be:f6:75:9c:1f:0c:f2:54:34:19:7e:5b:14:cf:9c:
9d:d8:a5:af:9c:16:6c:bb:ec:85:cf:20:d3:30:a0:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.192.0/19
64.17.48.0/20
64.202.0.0/19
64.254.192.0/19
66.28.0.0/16
66.71.224.0/20
66.102.96.0/19
66.132.0.0/17
66.250.0.0/16
206.183.224.0/19
207.152.0.0/18
207.230.0.0/19
207.234.0.0/17
207.254.144.0/20
209.17.96.0/20
209.41.192.0/18
209.115.0.0/17
209.146.0.0/17
216.28.0.0/15
216.55.80.0/20
216.168.64.0/20
216.177.96.0/19
216.229.128.0/20
IPv6:
2001:500:2::/48
2001:506:9::/48
2001:550::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
174
2149
4550
6259
6299
6494
6496
7061
7458
10768
11024
11220
11526
12207
16631
19164
22099
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:43:df:4c:a2:3a:97:60:c7:8a:c4:aa:68:8b:97:1d:06:f6:
82:8d:56:bf:1c:f9:7e:f1:ec:54:82:a2:a1:6b:8b:41:f8:0b:
97:6f:bd:7a:ea:29:3e:c5:9b:09:d8:6a:2f:9b:e8:f0:3a:56:
96:87:66:52:37:2a:d7:f8:2d:21:1f:4f:a3:4c:9d:a3:73:f7:
7b:af:d1:e6:f7:fb:00:d2:a1:bd:3c:66:cd:3b:e1:5a:7f:97:
70:af:b8:54:ee:0c:bb:68:a7:c3:66:58:30:25:13:83:aa:1e:
7c:f2:93:90:75:0e:55:2d:3b:a8:b7:26:bf:60:a0:26:d3:17:
a5:72:4b:eb:a1:91:18:bf:9d:08:e3:b4:b2:4c:96:aa:e7:b4:
a7:69:57:9c:ef:ba:b0:2b:c1:d5:d9:f4:a1:9d:c5:fb:79:b7:
fb:4e:66:48:e7:f5:02:b0:22:95:1c:4d:50:0a:18:bb:3a:fd:
b8:ec:4f:48:07:7f:ee:5b:91:3d:15:c2:a2:17:bf:80:f9:80:
13:1a:c7:c6:ac:0e:fd:31:bd:3e:1f:bb:dd:7e:a7:13:1f:60:
1c:b7:02:85:17:bd:1b:7c:f8:9a:78:d3:40:dc:73:aa:dd:ef:
3d:0f:ec:11:2a:ea:a2:5e:fb:12:8d:19:da:1f:db:38:18:f3:
a3:15:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:32:34 2024 by rpki-client on console-ams.rpki-client.org