Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
File: 615e35f9-bfe1-4c69-bb32-cd252c125c65.cer (raw, json)
Hash identifier: 3H7rV0V+LtfsRQ+GdB5mr2COLeZ6kwpLf56C2HhZ2jg=
Subject key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285849876214EFA39BBAA7C5DA9D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 15 Apr 2025 00:45:34 +0000
Certificate not after: Mon 19 Jul 2027 00:45:34 +0000
Subordinate resources: AS: 5118
AS: 12233
AS: 13800
AS: 22454
AS: 22486
AS: 22670
AS: 23064
AS: 23320
AS: 26175
AS: 26266
AS: 26301
AS: 35940
AS: 53253
AS: 53698
IP: 23.174.128.0/23
IP: 23.175.16.0/24
IP: 149.112.25.0/24
IP: 149.112.94.0/24
IP: 165.140.128.0/22
IP: 192.33.139.0/24
IP: 206.41.105.0/24
IP: 206.53.207.0/24
IP: 206.71.8.0/23
IP: 206.71.13.0 -- 206.71.14.255
IP: 206.71.138.0/23
IP: 206.71.143.0/24
IP: 209.209.4.0/22
IP: 2001:504:3b::/48
IP: 2001:504:65::/48
IP: 2001:504:67:: -- 2001:504:68:ffff:ffff:ffff:ffff:ffff
IP: 2001:504:70::/47
IP: 2001:504:74::/47
IP: 2001:504:78::/48
IP: 2001:504:115::/48
IP: 2001:504:13b::/48
IP: 2604:6040::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:62:14:ef:a3:9b:ba:a7:c5:da:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Apr 15 00:45:34 2025 GMT
Not After : Jul 19 00:45:34 2027 GMT
Subject: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:2a:0a:0b:d1:f8:d5:29:d1:a9:74:77:af:
e7:d6:68:1c:dd:50:e0:3d:12:a1:80:e2:80:ca:f8:
ef:0f:ab:df:a2:3c:03:b7:07:d9:8e:94:91:b6:5f:
41:18:9f:69:12:6f:8c:f0:6f:4f:32:93:fa:c9:81:
5f:d0:91:03:b3:d4:3a:57:12:7b:65:08:98:df:a0:
ec:2f:c8:6e:89:fc:fd:b7:b4:80:cf:e4:e2:dc:e5:
b2:53:7a:88:f5:fa:86:4f:dd:37:e8:26:99:78:42:
59:c4:0b:73:56:3e:d3:9c:0b:8c:b7:cc:04:bc:58:
c6:96:3a:3a:4f:52:aa:01:c5:f5:54:72:f1:1e:29:
9b:c4:db:e5:fd:bf:57:43:f4:14:01:75:b9:92:15:
a5:a4:d6:3d:10:57:18:b1:1d:4f:8b:6a:3d:59:b5:
9a:d4:d7:7f:f3:6a:1d:11:55:4c:1b:69:07:7e:93:
0f:ec:9b:4e:94:ab:c5:37:78:72:a6:65:18:33:91:
ed:f9:2d:f4:b8:dd:7d:2b:b1:e0:b4:e9:0d:71:d6:
0c:2a:f0:6e:66:82:61:5f:cf:9f:68:74:69:56:9f:
03:70:44:ef:1c:2b:39:85:97:d6:54:6a:1b:29:3a:
fe:35:5e:d1:9c:46:f8:f7:28:7e:ee:23:fd:c4:a9:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.128.0/23
23.175.16.0/24
149.112.25.0/24
149.112.94.0/24
165.140.128.0/22
192.33.139.0/24
206.41.105.0/24
206.53.207.0/24
206.71.8.0/23
206.71.13.0-206.71.14.255
206.71.138.0/23
206.71.143.0/24
209.209.4.0/22
IPv6:
2001:504:3b::/48
2001:504:65::/48
2001:504:67::-2001:504:68:ffff:ffff:ffff:ffff:ffff
2001:504:70::/47
2001:504:74::/47
2001:504:78::/48
2001:504:115::/48
2001:504:13b::/48
2604:6040::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5118
12233
13800
22454
22486
22670
23064
23320
26175
26266
26301
35940
53253
53698
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:03:85:e0:c0:6a:f0:a9:b6:e6:25:d2:34:7b:0b:50:20:43:
62:84:d0:f1:b8:7c:eb:e6:4d:70:05:03:1f:98:8b:23:11:93:
aa:2c:57:8d:6a:37:a0:8a:1d:81:92:c8:99:5f:d4:5d:1e:70:
b7:60:d4:9e:18:b9:72:d8:7e:d2:99:b1:94:a6:ca:48:99:56:
6a:17:4e:47:09:8f:4a:d6:d6:68:38:f4:fa:b1:ac:45:e7:7f:
9f:0a:9d:8d:39:84:76:88:34:ff:05:42:7c:08:61:c4:54:8b:
5e:ad:5c:12:f6:02:16:bf:2b:9e:03:b5:dd:f8:75:af:c9:4d:
11:95:4c:4b:65:16:7b:9e:76:aa:3b:ce:7e:28:3c:49:b9:1e:
f0:af:c9:cb:1a:eb:93:d5:6d:18:e4:19:1e:ef:69:da:4d:4a:
d0:5f:82:c1:9e:5c:83:49:55:82:4d:89:d4:42:ec:a9:57:f2:
c9:f4:ac:82:d7:85:8a:a8:38:21:45:ce:54:e5:a0:3e:3f:0e:
20:db:c9:4b:07:40:f3:ea:20:a7:e5:f6:45:f9:66:14:6a:b8:
7f:4e:3d:d5:c8:9d:21:51:87:a0:8c:43:eb:c5:70:24:2b:03:
23:f4:71:f9:31:5c:8e:fc:b1:41:d8:a6:24:36:e6:77:70:ed:
53:cc:0b:cb
-----BEGIN CERTIFICATE-----
MIIH9TCCBt2gAwIBAgIUAQ0Mn0MoWEmHYhTvo5u6p8XanQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDQxNTAwNDUzNFoXDTI3MDcxOTAwNDUzNFowLzEtMCsGA1UEAxMk
NjE1ZTM1ZjktYmZlMS00YzY5LWJiMzItY2QyNTJjMTI1YzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwIqCgvR+NUp0al0d6/n1mgc3VDgPRKhgOKA
yvjvD6vfojwDtwfZjpSRtl9BGJ9pEm+M8G9PMpP6yYFf0JEDs9Q6VxJ7ZQiY36Ds
L8huifz9t7SAz+Ti3OWyU3qI9fqGT9036CaZeEJZxAtzVj7TnAuMt8wEvFjGljo6
T1KqAcX1VHLxHimbxNvl/b9XQ/QUAXW5khWlpNY9EFcYsR1Pi2o9WbWa1Nd/82od
EVVMG2kHfpMP7JtOlKvFN3hypmUYM5Ht+S30uN19K7HgtOkNcdYMKvBuZoJhX8+f
aHRpVp8DcETvHCs5hZfWVGobKTr+NV7RnEb49yh+7iP9xKkDCwIDAQABo4IFBzCC
BQMwHQYDVR0OBBYEFHzzZ0eyWie1W7/Mg2jcXbK4RNLCMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82
MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMxMjVjNjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYxNWUzNWY5LWJmZTEtNGM2OS1i
YjMyLWNkMjUyYzEyNWM2NS82MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMx
MjVjNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgdQGCCsGAQUF
BwEHAQH/BIHEMIHBMFwEAgABMFYDBAEXroADBAAXrxADBACVcBkDBACVcF4DBAKl
jIADBADAIYsDBADOKWkDBADONc8DBAHORwgwDAMEAM5HDQMEAM5HDgMEAc5HigME
AM5HjwMEAtHRBDBhBAIAAjBbAwcAIAEFBAA7AwcAIAEFBABlMBIDBwAgAQUEAGcD
BwAgAQUEAGgDBwEgAQUEAHADBwEgAQUEAHQDBwAgAQUEAHgDBwAgAQUEARUDBwAg
AQUEATsDBgQmBGBAADBQBggrBgEFBQcBCAEB/wRBMD+gPTA7AgIT/gICL8kCAjXo
AgJXtgICV9YCAliOAgJaGAICWxgCAmY/AgJmmgICZr0CAwCMZAIDANAFAgMA0cIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASQOF4MBq8Km25iXSNHsLUCBDYoTQ8bh86+ZNcAUDH5iLIxGTqixX
jWo3oIodgZLImV/UXR5wt2DUnhi5cth+0pmxlKbKSJlWahdORwmPStbWaDj0+rGs
Red/nwqdjTmEdog0/wVCfAhhxFSLXq1cEvYCFr8rngO13fh1r8lNEZVMS2UWe552
qjvOfig8Sbke8K/Jyxrrk9VtGOQZHu9p2k1K0F+CwZ5cg0lVgk2J1ELsqVfyyfSs
gteFiqg4IUXOVOWgPj8OINvJSwdA8+ogp+X2RflmFGq4f0491cidIVGHoIxD68Vw
JCsDI/Rx+TFcjvyxQdimJDbmd3DtU8wLyw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:50:58 2025 by rpki-client