Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
File: 2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer (raw, json)
Hash identifier: tshGnn4voTKZ0S2MeolFJ/Jl9DkU2JW8QmSCERC8NDA=
Subject key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F43285849A27C6581A86953BB8781A960
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 24 Apr 2025 17:45:25 +0000
Certificate not after: Fri 08 May 2026 00:45:21 +0000
Subordinate resources: AS: 14061
AS: 46652
AS: 62567
AS: 393406
AS: 394362
IP: 24.144.64.0/18
IP: 24.199.64.0/18
IP: 45.55.0.0/16
IP: 64.23.128.0/17
IP: 64.225.0.0/17
IP: 64.226.64.0/18
IP: 64.227.0.0 -- 64.227.191.255
IP: 67.205.128.0/18
IP: 67.207.64.0/19
IP: 68.183.0.0/16
IP: 69.55.48.0/20
IP: 104.131.0.0/16
IP: 104.236.0.0/16
IP: 104.248.0.0/16
IP: 107.170.0.0/16
IP: 129.212.128.0/17
IP: 134.122.0.0/17
IP: 134.199.128.0/17
IP: 134.209.0.0/16
IP: 137.184.0.0/16
IP: 138.68.0.0/16
IP: 138.197.0.0/16
IP: 142.93.0.0/16
IP: 143.110.128.0/17
IP: 143.198.0.0/16
IP: 143.244.128.0/17
IP: 144.126.192.0/18
IP: 146.190.0.0/16
IP: 147.182.128.0/17
IP: 152.42.128.0/17
IP: 157.230.0.0/16
IP: 157.245.0.0/16
IP: 159.65.0.0/16
IP: 159.89.0.0/16
IP: 159.203.0.0/16
IP: 159.223.0.0/16
IP: 161.35.0.0/16
IP: 162.243.0.0/16
IP: 164.90.128.0/17
IP: 164.92.64.0 -- 164.92.255.255
IP: 165.22.0.0/16
IP: 165.227.0.0/16
IP: 165.232.32.0 -- 165.232.191.255
IP: 165.245.128.0/17
IP: 167.71.0.0/16
IP: 167.99.0.0/16
IP: 168.144.0.0/16
IP: 170.64.128.0/17
IP: 174.138.0.0/17
IP: 192.34.56.0/21
IP: 192.81.208.0/20
IP: 192.241.128.0/17
IP: 198.199.64.0/18
IP: 198.211.96.0/19
IP: 198.232.147.0/24
IP: 199.4.223.0/24
IP: 204.48.16.0/20
IP: 206.81.0.0/19
IP: 206.189.0.0/16
IP: 207.154.192.0/18
IP: 208.68.36.0/22
IP: 209.38.0.0/16
IP: 209.97.128.0/18
IP: 2604:a880::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a2:7c:65:81:a8:69:53:bb:87:81:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Apr 24 17:45:25 2025 GMT
Not After : May 8 00:45:21 2026 GMT
Subject: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:b2:53:c6:53:a5:a0:17:19:00:69:67:bd:
7a:85:25:4b:8a:34:b6:19:47:0c:26:a8:11:bb:26:
49:f7:b3:5f:60:c7:64:44:b1:e6:f2:49:fb:b9:37:
ca:9b:6b:20:a4:ee:ee:10:4f:bd:bf:de:db:9b:30:
e6:8e:fd:c6:b7:9b:45:fa:5d:89:c2:82:1d:2c:8a:
5a:04:da:bc:f1:38:e5:e6:2c:b7:6f:60:d9:ea:b7:
cb:8f:3a:de:46:b6:23:c1:1e:82:8d:2e:36:b1:38:
aa:3f:ef:b5:f1:ed:7f:80:dd:a0:63:2b:89:36:b6:
5d:ca:2b:7f:1c:25:41:c4:f9:3c:dc:95:30:f5:57:
6a:d5:f8:e7:cc:d9:82:28:8e:6a:48:83:a2:98:40:
14:46:ed:56:c7:89:ca:f4:c0:f8:13:cd:ef:b1:de:
24:27:37:75:b0:1d:62:3f:af:66:12:c5:0f:0a:6a:
68:26:11:43:5e:ae:a1:41:c5:03:87:33:8e:20:9c:
af:4f:e6:e0:11:9a:a2:38:1b:61:50:8a:a6:e1:3f:
66:24:6e:f7:51:e4:46:e8:eb:87:56:d7:ff:8c:fe:
4c:d9:2c:bf:73:b0:86:94:96:7e:5f:94:3d:fc:75:
48:4c:5e:3c:bf:13:df:6d:fe:0a:46:f4:1e:33:7a:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.64.0/18
24.199.64.0/18
45.55.0.0/16
64.23.128.0/17
64.225.0.0/17
64.226.64.0/18
64.227.0.0-64.227.191.255
67.205.128.0/18
67.207.64.0/19
68.183.0.0/16
69.55.48.0/20
104.131.0.0/16
104.236.0.0/16
104.248.0.0/16
107.170.0.0/16
129.212.128.0/17
134.122.0.0/17
134.199.128.0/17
134.209.0.0/16
137.184.0.0/16
138.68.0.0/16
138.197.0.0/16
142.93.0.0/16
143.110.128.0/17
143.198.0.0/16
143.244.128.0/17
144.126.192.0/18
146.190.0.0/16
147.182.128.0/17
152.42.128.0/17
157.230.0.0/16
157.245.0.0/16
159.65.0.0/16
159.89.0.0/16
159.203.0.0/16
159.223.0.0/16
161.35.0.0/16
162.243.0.0/16
164.90.128.0/17
164.92.64.0-164.92.255.255
165.22.0.0/16
165.227.0.0/16
165.232.32.0-165.232.191.255
165.245.128.0/17
167.71.0.0/16
167.99.0.0/16
168.144.0.0/16
170.64.128.0/17
174.138.0.0/17
192.34.56.0/21
192.81.208.0/20
192.241.128.0/17
198.199.64.0/18
198.211.96.0/19
198.232.147.0/24
199.4.223.0/24
204.48.16.0/20
206.81.0.0/19
206.189.0.0/16
207.154.192.0/18
208.68.36.0/22
209.38.0.0/16
209.97.128.0/18
IPv6:
2604:a880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14061
46652
62567
393406
394362
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ce:cd:37:33:31:1d:a1:f3:b5:90:df:b4:00:48:54:33:59:
4b:d0:a9:00:77:40:37:62:ac:c8:2e:8d:d8:b7:90:fa:49:d0:
52:2d:9b:f9:c7:58:20:13:60:88:dd:a3:8d:ac:c3:93:0d:86:
71:c5:f0:31:0b:af:fc:b4:a7:d6:32:c5:aa:91:f0:9b:09:42:
75:30:1a:16:21:6a:ea:11:85:e8:20:56:cd:10:27:5b:94:9b:
e7:76:7a:77:19:d6:c3:ca:eb:91:7a:37:dd:0b:64:8a:c6:d6:
eb:72:d0:6d:85:6b:f4:d9:de:6a:89:53:90:20:cb:66:c6:dd:
1a:cb:5c:bc:12:dd:4c:19:f3:e2:de:cb:ee:46:84:2b:48:67:
57:b5:b0:35:8c:c1:bd:73:a9:88:aa:08:46:29:d6:a8:0f:e4:
86:40:77:23:1c:54:4a:6e:a0:46:da:25:f0:0f:08:c5:e2:f4:
b4:aa:4d:6a:b6:e2:15:81:9b:c0:13:71:5c:de:36:5a:35:6e:
1c:e5:6e:d5:ae:66:12:d5:c3:6b:89:4f:54:da:83:3b:c5:a4:
0d:58:57:be:8f:c5:7b:b0:d7:00:be:b1:13:4f:2c:56:d1:cf:
56:ed:7a:57:0b:56:37:55:9e:6f:da:ed:50:e2:17:6b:cb:e3:
9c:e5:84:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:24 2025 by rpki-client