Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer
File: 51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer (raw, json)
Hash identifier: eut/NPJ5LJHK2AcR8jkUvGK2/5Tjq+rue8c1I439YOo=
Subject key identifier: 17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285848748378457F691BD146DA7DC8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 06 Jan 2025 13:45:33 +0000
Certificate not after: Sun 11 Apr 2027 12:45:33 +0000
Subordinate resources: AS: 11381
AS: 17310
AS: 19310
AS: 19872
AS: 25943
AS: 26479
AS: 30177
AS: 33346
AS: 40174
AS: 62798
AS: 396198
AS: 396351
AS: 397310
AS: 397872
AS: 398337
AS: 398383
AS: 398497
IP: 23.132.128.0/24
IP: 23.141.16.0/24
IP: 23.163.48.0/24
IP: 64.32.32.0/22
IP: 65.111.192.0/19
IP: 66.54.96.0/22
IP: 66.85.6.0/24
IP: 66.171.80.0/20
IP: 67.20.32.0/20
IP: 68.68.64.0/20
IP: 69.27.64.0/19
IP: 69.36.48.0/20
IP: 69.41.80.0/20
IP: 72.34.176.0/20
IP: 74.81.183.0/24
IP: 74.113.40.0/21
IP: 74.119.248.0/21
IP: 76.77.160.0/20
IP: 104.36.140.0/22
IP: 130.51.212.0/22
IP: 134.195.116.0/22
IP: 137.83.38.0/23
IP: 142.202.216.0/22
IP: 161.38.218.0/23
IP: 162.142.80.0/21
IP: 162.142.104.0 -- 162.142.113.255
IP: 162.208.4.0/22
IP: 162.218.252.0/22
IP: 162.221.128.0/22
IP: 162.223.104.0/22
IP: 162.248.60.0/22
IP: 162.252.64.0/22
IP: 162.255.64.0/22
IP: 163.123.164.0/22
IP: 167.248.144.0/20
IP: 173.225.192.0/20
IP: 192.169.72.0/21
IP: 192.209.17.0/24
IP: 199.102.184.0/22
IP: 204.238.54.0/24
IP: 208.94.88.0/21
IP: 216.184.64.0/19
IP: 2600:8c00::/28
IP: 2602:fd4d::/36
IP: 2602:ff88::/36
IP: 2604:68c0::/32
IP: 2604:9300::/32
IP: 2605:6040::/32
IP: 2605:9dc0::/32
IP: 2605:b7c0::/32
IP: 2606:7400::/32
IP: 2606:7900::/32
IP: 2607:da80::/32
IP: 2607:fbd0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:83:78:45:7f:69:1b:d1:46:da:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jan 6 13:45:33 2025 GMT
Not After : Apr 11 12:45:33 2027 GMT
Subject: CN=51729fc5-9ab6-4957-8614-8fb01d4fb6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:cd:01:e7:98:82:de:17:21:e5:f5:ab:42:
cf:6f:fd:f3:0a:94:99:14:54:f4:10:0d:d2:7c:ca:
6d:39:e0:21:61:0a:8b:17:3f:ee:21:d1:a9:7d:e9:
ea:72:3d:b0:17:66:00:67:52:39:8d:ce:00:cd:6f:
f5:0e:2c:8c:c9:20:6c:f5:de:58:2e:0c:bf:c3:ac:
94:ce:fc:eb:b9:53:d1:93:0b:a1:73:ae:5d:dd:4c:
63:4e:d6:31:54:55:7c:98:cc:b3:e1:8a:62:c4:c6:
37:76:20:98:5c:f0:f9:a3:41:11:25:a6:14:44:2e:
ac:88:38:16:64:6b:67:9d:18:a6:19:8a:45:31:da:
ee:1a:e0:4d:ca:86:10:9e:3d:57:7d:9d:c4:bb:db:
8a:ed:e6:77:b6:f8:b8:2a:d4:26:4a:dd:d8:f7:35:
b0:1c:93:c1:7a:5e:87:d4:7d:e8:a0:45:30:d0:1d:
55:74:6e:11:a6:cf:36:a5:2d:d3:c9:ab:6f:24:2a:
6b:4e:dc:17:39:a5:ee:e4:4d:0a:d5:33:e8:72:a7:
9d:72:07:0d:3f:c8:da:15:33:d2:57:28:64:a8:64:
2d:49:34:b9:6e:b3:eb:98:47:23:4a:33:23:56:24:
b0:88:61:c7:4c:b1:e1:96:38:eb:14:40:b5:8a:58:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.128.0/24
23.141.16.0/24
23.163.48.0/24
64.32.32.0/22
65.111.192.0/19
66.54.96.0/22
66.85.6.0/24
66.171.80.0/20
67.20.32.0/20
68.68.64.0/20
69.27.64.0/19
69.36.48.0/20
69.41.80.0/20
72.34.176.0/20
74.81.183.0/24
74.113.40.0/21
74.119.248.0/21
76.77.160.0/20
104.36.140.0/22
130.51.212.0/22
134.195.116.0/22
137.83.38.0/23
142.202.216.0/22
161.38.218.0/23
162.142.80.0/21
162.142.104.0-162.142.113.255
162.208.4.0/22
162.218.252.0/22
162.221.128.0/22
162.223.104.0/22
162.248.60.0/22
162.252.64.0/22
162.255.64.0/22
163.123.164.0/22
167.248.144.0/20
173.225.192.0/20
192.169.72.0/21
192.209.17.0/24
199.102.184.0/22
204.238.54.0/24
208.94.88.0/21
216.184.64.0/19
IPv6:
2600:8c00::/28
2602:fd4d::/36
2602:ff88::/36
2604:68c0::/32
2604:9300::/32
2605:6040::/32
2605:9dc0::/32
2605:b7c0::/32
2606:7400::/32
2606:7900::/32
2607:da80::/32
2607:fbd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11381
17310
19310
19872
25943
26479
30177
33346
40174
62798
396198
396351
397310
397872
398337
398383
398497
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:df:66:a1:09:09:2f:5e:6d:b3:9e:98:28:10:eb:93:02:a3:
87:7a:00:ac:a5:d7:ea:18:6a:4a:ab:13:4c:77:93:5a:ec:c1:
82:e9:a8:4b:79:61:27:63:88:23:b0:97:1a:42:13:40:08:98:
4d:17:e3:8c:0d:38:25:06:b6:a7:45:06:82:31:29:c7:f8:6e:
c7:f4:f2:68:3e:94:00:39:93:06:eb:af:24:79:82:65:76:e3:
9b:84:42:1a:70:67:c5:31:fe:58:34:73:7b:b1:da:94:41:0a:
89:0a:f8:72:65:3e:8c:de:b3:c3:69:63:fb:b5:05:f3:ce:b2:
83:37:89:4c:14:71:fb:91:d0:1b:68:44:3b:86:c1:da:e6:2e:
73:b1:2c:13:61:1b:0c:63:bf:96:b0:32:02:05:e0:dc:43:63:
ab:b3:6c:cd:a6:5d:2a:fc:dd:d9:70:18:bf:21:ae:5c:e0:14:
ea:9f:a3:d8:23:9c:93:1f:20:00:d7:c5:0f:63:3b:e2:9e:63:
21:b8:f3:3b:76:39:1f:12:a9:20:4b:07:db:88:a1:d8:bd:b3:
e4:79:48:9a:46:74:bc:28:09:39:03:3c:e1:63:36:b5:ff:5a:
08:24:99:c8:da:22:f6:a5:3f:04:18:f8:20:3e:ee:b0:fb:31:
c2:53:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:01 2025 by rpki-client