Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
File: 44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer (raw, json)
Hash identifier: Kwvu459tL7k85RKkAd3AyKo+ZKmmJauXvKVz2AjVF4U=
Subject key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority key identifier: 1D:63:CF:FC:48:10:3B:92:58:28:E1:7D:F1:BB:27:27:D2:F3:0B:10
Certificate issuer: /CN=2bd0fac6-1a46-40b5-be66-9e0f7b54df77
Certificate serial: 010D0C9F43285848BA4DF13BC6A2C1199FDC47C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 31 Jan 2025 13:44:17 +0000
Certificate not after: Thu 06 May 2027 12:44:17 +0000
Subordinate resources: AS: 11989
AS: 15244
AS: 18650
AS: 19549
AS: 23273
AS: 32241
AS: 36352
AS: 40092
AS: 40561
AS: 394738
IP: 23.94.0.0/15
IP: 23.226.128.0/20
IP: 45.56.216.0/21
IP: 45.114.224.0/22
IP: 64.6.224.0/19
IP: 64.50.160.0/19
IP: 64.188.0.0/19
IP: 66.63.160.0/19
IP: 66.84.0.0/18
IP: 66.102.128.0/20
IP: 66.212.16.0/20
IP: 67.210.96.0/19
IP: 67.215.224.0/19
IP: 68.171.32.0/19
IP: 69.12.64.0/19
IP: 70.34.32.0/20
IP: 72.11.128.0/19
IP: 72.172.128.0/20
IP: 74.50.0.0/19
IP: 75.127.0.0/20
IP: 89.35.92.0/22
IP: 96.8.112.0/20
IP: 96.44.128.0/18
IP: 96.47.224.0/20
IP: 98.143.144.0/22
IP: 98.143.156.0/22
IP: 103.26.140.0/22
IP: 104.129.0.0/18
IP: 104.168.0.0/17
IP: 104.223.0.0 -- 104.223.123.255
IP: 104.223.125.0 -- 104.223.127.255
IP: 107.150.0.0/21
IP: 107.150.16.0/20
IP: 107.161.80.0/20
IP: 107.172.0.0/14
IP: 108.174.48.0/20
IP: 155.94.128.0 -- 155.94.233.255
IP: 155.94.235.0 -- 155.94.255.255
IP: 162.213.0.0/22
IP: 162.218.120.0/22
IP: 162.218.208.0/22
IP: 162.222.192.0/21
IP: 167.160.160.0/19
IP: 172.96.176.0/21
IP: 172.245.0.0/16
IP: 173.44.32.0/19
IP: 173.254.192.0/18
IP: 190.92.160.0/21
IP: 190.180.144.0/22
IP: 192.3.0.0/16
IP: 192.161.48.0/20
IP: 192.161.160.0/19
IP: 192.210.128.0/17
IP: 192.227.128.0/17
IP: 192.228.112.0/20
IP: 198.12.64.0/18
IP: 198.23.128.0/17
IP: 198.46.128.0/17
IP: 198.55.96.0/19
IP: 198.55.240.0/20
IP: 198.144.176.0/20
IP: 199.21.112.0/22
IP: 199.188.100.0/22
IP: 199.204.248.0/21
IP: 199.241.152.0/21
IP: 200.69.0.0/21
IP: 200.69.16.0/22
IP: 200.69.28.0/22
IP: 204.44.64.0/18
IP: 204.44.192.0/20
IP: 204.152.192.0/19
IP: 206.217.128.0/20
IP: 207.55.240.0/20
IP: 208.68.104.0/22
IP: 208.73.32.0/21
IP: 208.76.40.0/22
IP: 208.79.200.0/21
IP: 208.79.216.0/22
IP: 208.86.184.0/21
IP: 208.88.72.0/21
IP: 209.54.96.0 -- 209.54.107.255
IP: 209.200.224.0/19
IP: 216.7.88.0/21
IP: 216.45.48.0/20
IP: 216.97.224.0/20
IP: 216.144.224.0/20
IP: 216.201.96.0/20
IP: 216.222.192.0/20
IP: 216.227.208.0/20
IP: 2604:9780::/32
IP: 2605:6f00::/32
IP: 2606:bd00::/32
IP: 2606:c580::/32
IP: 2606:c680::/32
IP: 2607:9d00::/32
IP: 2620:b:e000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:4d:f1:3b:c6:a2:c1:19:9f:dc:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd0fac6-1a46-40b5-be66-9e0f7b54df77
Validity
Not Before: Jan 31 13:44:17 2025 GMT
Not After : May 6 12:44:17 2027 GMT
Subject: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:4a:91:d2:30:8c:80:7e:1a:d7:b0:ba:df:
5f:d0:a2:07:df:4d:36:25:e2:12:54:49:3e:6c:6a:
ec:c5:e1:f1:64:46:6e:17:f8:8c:0c:c0:29:58:7b:
f8:cd:97:fd:93:5e:f0:88:ee:d8:00:6f:5a:98:39:
3d:e6:6b:e5:5a:12:4e:e8:65:98:9a:7c:83:9d:30:
01:5e:08:4a:4e:77:86:a1:2c:91:5e:54:0e:3f:3a:
43:e2:78:5d:94:a2:78:c8:c6:63:17:e2:68:bb:e4:
c6:05:5d:7d:3c:68:8d:c1:0e:ce:b1:c1:e8:83:6e:
aa:14:61:5f:9b:50:06:1a:03:f0:e2:65:80:d7:d3:
ec:81:de:f2:fe:15:5c:ae:8a:55:3b:7c:da:d1:4c:
13:f7:96:87:03:fe:fb:b8:5f:86:bb:a6:f8:cd:95:
da:76:47:d6:56:27:1e:2d:9a:3c:68:e6:92:f3:31:
13:28:2f:71:21:ce:0a:b4:b5:e4:4d:03:f0:7f:43:
ed:d1:ec:c3:71:2e:b8:1b:b4:d5:2b:48:3b:01:4e:
e0:1a:82:a7:1e:91:01:83:a0:a7:e4:5c:fc:2a:82:
8f:04:f4:9e:9e:67:18:1e:61:90:0e:2d:df:da:26:
81:73:c5:55:d4:c4:cd:33:c1:08:c1:7c:cd:89:a8:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
X509v3 Authority Key Identifier:
keyid:1D:63:CF:FC:48:10:3B:92:58:28:E1:7D:F1:BB:27:27:D2:F3:0B:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
sbgp-ipAddrBlock: critical
IPv4:
23.94.0.0/15
23.226.128.0/20
45.56.216.0/21
45.114.224.0/22
64.6.224.0/19
64.50.160.0/19
64.188.0.0/19
66.63.160.0/19
66.84.0.0/18
66.102.128.0/20
66.212.16.0/20
67.210.96.0/19
67.215.224.0/19
68.171.32.0/19
69.12.64.0/19
70.34.32.0/20
72.11.128.0/19
72.172.128.0/20
74.50.0.0/19
75.127.0.0/20
89.35.92.0/22
96.8.112.0/20
96.44.128.0/18
96.47.224.0/20
98.143.144.0/22
98.143.156.0/22
103.26.140.0/22
104.129.0.0/18
104.168.0.0/17
104.223.0.0-104.223.123.255
104.223.125.0-104.223.127.255
107.150.0.0/21
107.150.16.0/20
107.161.80.0/20
107.172.0.0/14
108.174.48.0/20
155.94.128.0-155.94.233.255
155.94.235.0-155.94.255.255
162.213.0.0/22
162.218.120.0/22
162.218.208.0/22
162.222.192.0/21
167.160.160.0/19
172.96.176.0/21
172.245.0.0/16
173.44.32.0/19
173.254.192.0/18
190.92.160.0/21
190.180.144.0/22
192.3.0.0/16
192.161.48.0/20
192.161.160.0/19
192.210.128.0/17
192.227.128.0/17
192.228.112.0/20
198.12.64.0/18
198.23.128.0/17
198.46.128.0/17
198.55.96.0/19
198.55.240.0/20
198.144.176.0/20
199.21.112.0/22
199.188.100.0/22
199.204.248.0/21
199.241.152.0/21
200.69.0.0/21
200.69.16.0/22
200.69.28.0/22
204.44.64.0/18
204.44.192.0/20
204.152.192.0/19
206.217.128.0/20
207.55.240.0/20
208.68.104.0/22
208.73.32.0/21
208.76.40.0/22
208.79.200.0/21
208.79.216.0/22
208.86.184.0/21
208.88.72.0/21
209.54.96.0-209.54.107.255
209.200.224.0/19
216.7.88.0/21
216.45.48.0/20
216.97.224.0/20
216.144.224.0/20
216.201.96.0/20
216.222.192.0/20
216.227.208.0/20
IPv6:
2604:9780::/32
2605:6f00::/32
2606:bd00::/32
2606:c580::/32
2606:c680::/32
2607:9d00::/32
2620:b:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11989
15244
18650
19549
23273
32241
36352
40092
40561
394738
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:60:21:45:70:ba:71:80:d5:ad:68:62:a8:c6:1e:17:e5:41:
48:2f:f4:9d:2c:cc:6b:66:af:83:88:9c:e1:db:93:bc:02:c5:
93:4d:5b:fa:52:81:b9:3f:c6:f4:14:1a:dc:36:7e:dc:1a:59:
d2:bc:8c:7c:f2:5e:d0:cb:bd:72:55:17:b3:22:5a:19:1e:4a:
7f:dc:2c:2b:2a:7f:79:42:01:06:4a:26:19:7b:ad:e4:88:c8:
17:69:67:6b:5e:d7:fd:79:f3:bd:35:ed:a7:9e:ff:7a:37:04:
11:b4:7f:b3:de:04:2c:56:57:59:0e:2f:eb:68:45:21:9a:06:
35:8e:25:42:37:bd:de:7e:c9:a6:bc:96:45:b4:31:d2:56:4d:
e0:92:0c:84:a5:cf:3c:65:8c:39:29:4f:25:d8:1f:7f:5c:76:
a7:e8:16:26:da:01:a0:42:84:19:90:49:b5:5e:71:a1:7b:d8:
e5:47:b8:36:ea:2f:75:bd:04:de:d7:03:d4:e3:10:55:d8:12:
eb:52:52:20:42:59:9a:e0:79:ba:86:e7:21:b6:1c:51:02:c5:
72:1d:aa:b1:ad:18:39:d3:26:a3:03:fc:e1:90:52:9e:58:71:
b7:15:12:37:71:db:0c:30:95:40:fe:de:c8:34:b0:61:81:2c:
9d:3e:39:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:27 2025 by rpki-client