Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
File: 4d4940f4-61c2-4251-acdb-36be83cdc744.cer (raw, json)
Hash identifier: pLb2MHjIKS2Feukig9vOtM0XRvgYuYeB7LpfcuW33DY=
Subject key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285847ECAD936330C3F4AB2C9D8FC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 18 Nov 2024 22:00:27 +0000
Certificate not after: Fri 20 Feb 2026 01:45:15 +0000
Subordinate resources: AS: 3672
AS: 5688
AS: 6407
AS: 7036
AS: 7443
IP: 50.93.160.0/20
IP: 67.230.128.0/19
IP: 108.63.0.0 -- 108.63.13.255
IP: 108.63.18.0 -- 108.63.21.255
IP: 108.63.30.0 -- 108.63.255.255
IP: 173.206.0.0/16
IP: 204.48.0.0/21
IP: 205.207.88.0 -- 205.207.90.255
IP: 205.210.104.0/24
IP: 207.112.0.0/22
IP: 207.112.8.0/24
IP: 207.112.16.0 -- 207.112.45.255
IP: 207.112.47.0 -- 207.112.69.255
IP: 207.112.71.0 -- 207.112.127.255
IP: 209.90.128.0/21
IP: 209.90.141.0 -- 209.90.157.255
IP: 209.90.159.0 -- 209.90.170.255
IP: 209.90.172.0/23
IP: 209.90.177.0 -- 209.90.187.255
IP: 209.90.190.0/23
IP: 209.183.0.0 -- 209.183.11.255
IP: 209.183.13.0 -- 209.183.19.255
IP: 209.183.21.0 -- 209.183.31.255
IP: 209.216.128.0 -- 209.216.136.255
IP: 209.216.138.0 -- 209.216.159.255
IP: 209.225.128.0/18
IP: 209.227.128.0/18
IP: 216.181.0.0/24
IP: 216.181.3.0/24
IP: 216.181.5.0 -- 216.181.18.255
IP: 216.181.21.0 -- 216.181.97.255
IP: 216.181.109.0 -- 216.181.119.255
IP: 216.181.121.0/24
IP: 216.181.124.0/24
IP: 216.181.126.0 -- 216.181.129.255
IP: 216.181.131.0 -- 216.181.157.255
IP: 216.181.166.0 -- 216.181.229.255
IP: 216.181.232.0 -- 216.181.247.255
IP: 216.181.250.0 -- 216.181.255.255
IP: 216.254.128.0 -- 216.254.157.255
IP: 216.254.160.0 -- 216.254.168.255
IP: 216.254.170.0 -- 216.254.196.255
IP: 216.254.198.0/23
IP: 216.254.204.0 -- 216.254.208.255
IP: 216.254.210.0 -- 216.254.222.255
IP: 2604:7f00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 25 Nov 2024 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ec:ad:93:63:30:c3:f4:ab:2c:9d:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Nov 18 22:00:27 2024 GMT
Not After : Feb 20 01:45:15 2026 GMT
Subject: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:23:91:79:3c:9a:50:65:cf:aa:fb:93:58:
b1:02:d6:34:3b:f0:34:ee:5f:12:76:a3:65:ad:bc:
79:37:1b:8a:aa:18:23:47:be:61:d1:b1:14:1c:51:
f8:b2:85:a5:b5:dd:e2:9c:e2:71:d8:a7:63:5b:67:
ba:d3:d8:62:4d:2a:01:51:f3:c9:0f:07:b1:bb:a0:
59:5d:74:11:7a:4c:75:6e:4a:75:69:7e:4a:c0:8f:
e0:dd:ff:99:8a:7d:c4:60:09:fd:f5:e0:f0:ca:95:
9e:fd:a0:87:3e:56:87:52:ce:31:8c:54:27:e0:1d:
09:5a:f0:12:74:6c:95:01:95:a1:d8:fc:04:7c:3a:
75:11:3b:6d:64:61:bc:fd:46:25:5d:87:2c:e0:d3:
05:7f:e0:9e:f0:24:e5:6c:c8:95:bb:bf:15:90:81:
f7:31:4a:45:9b:ca:a4:07:9e:45:cb:12:02:e8:a8:
df:6c:90:6d:6e:01:85:5f:c1:e2:78:57:b2:9c:3c:
d7:ea:35:e0:0a:19:46:5a:de:48:17:50:01:28:5e:
5f:34:fa:00:d2:40:c8:b5:6c:41:cc:6a:47:d3:17:
fb:55:bc:b7:22:bb:fd:e1:28:67:f0:5e:c6:f0:94:
9a:e6:41:09:7c:2e:19:f1:97:ba:19:4e:fa:e3:ff:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
50.93.160.0/20
67.230.128.0/19
108.63.0.0-108.63.13.255
108.63.18.0-108.63.21.255
108.63.30.0-108.63.255.255
173.206.0.0/16
204.48.0.0/21
205.207.88.0-205.207.90.255
205.210.104.0/24
207.112.0.0/22
207.112.8.0/24
207.112.16.0-207.112.45.255
207.112.47.0-207.112.69.255
207.112.71.0-207.112.127.255
209.90.128.0/21
209.90.141.0-209.90.157.255
209.90.159.0-209.90.170.255
209.90.172.0/23
209.90.177.0-209.90.187.255
209.90.190.0/23
209.183.0.0-209.183.11.255
209.183.13.0-209.183.19.255
209.183.21.0-209.183.31.255
209.216.128.0-209.216.136.255
209.216.138.0-209.216.159.255
209.225.128.0/18
209.227.128.0/18
216.181.0.0/24
216.181.3.0/24
216.181.5.0-216.181.18.255
216.181.21.0-216.181.97.255
216.181.109.0-216.181.119.255
216.181.121.0/24
216.181.124.0/24
216.181.126.0-216.181.129.255
216.181.131.0-216.181.157.255
216.181.166.0-216.181.229.255
216.181.232.0-216.181.247.255
216.181.250.0-216.181.255.255
216.254.128.0-216.254.157.255
216.254.160.0-216.254.168.255
216.254.170.0-216.254.196.255
216.254.198.0/23
216.254.204.0-216.254.208.255
216.254.210.0-216.254.222.255
IPv6:
2604:7f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3672
5688
6407
7036
7443
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:96:9d:44:e7:11:a0:e6:9e:6e:7b:e9:ad:47:75:d2:11:bf:
cb:f7:5e:e1:ec:01:c1:85:6b:0b:58:a6:34:44:d9:a6:82:f4:
be:a1:32:44:2b:79:08:af:83:16:e4:e4:db:5c:fe:94:d6:cf:
25:20:16:30:7f:24:fe:a8:7d:b0:7a:4c:3f:5f:dc:e1:4a:f6:
94:8e:04:07:8f:9e:d2:0a:27:27:21:77:52:31:42:cd:20:12:
10:85:53:64:14:be:77:2f:00:a1:af:4b:d4:29:18:29:f2:07:
d7:cb:b8:82:80:ba:f7:d4:e3:ed:1f:60:64:67:8b:fb:88:d6:
df:2f:b0:89:6a:02:cf:a0:ad:b6:e5:50:b0:45:f2:c7:7f:cf:
30:f9:4b:76:af:7f:b0:ff:8c:cd:03:b0:57:2b:b7:38:c2:93:
0b:e1:61:5e:26:53:67:22:38:98:67:33:bd:07:82:4f:07:d3:
cc:f1:64:7b:c4:9d:aa:be:f6:08:8a:4e:ed:43:15:99:57:cb:
26:cd:36:77:97:82:f8:47:1a:da:70:39:cd:9f:92:ee:05:19:
01:a7:4c:af:dd:2f:88:c5:66:f7:3d:1d:19:46:a6:52:1b:d5:
5e:85:c2:39:4d:0f:d7:92:b7:53:39:7c:48:da:54:42:d7:34:
6c:64:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:12 2024 by rpki-client on console-fra.rpki-client.org