Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File: baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier: +ENxS85PeHmNWvsobtT0gnBEzKYub+RUJEmTIlkB6xc=
Subject key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F43285849AFB637792E04FA7E786CED20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 29 Apr 2025 11:27:26 +0000
Certificate not after: Mon 06 Jul 2026 00:45:22 +0000
Subordinate resources: AS: 11539
AS: 11858
AS: 16751
AS: 18442
AS: 19554
AS: 21563
AS: 22591
AS: 26547
AS: 26704
AS: 27495
AS: 27570
AS: 31917
AS: 32216
AS: 32263
AS: 33459
AS: 35888
AS: 46371
AS: 395509
AS: 395791
AS: 397717
AS: 398848
AS: 399973
IP: 66.159.106.0/23
IP: 67.202.160.0/20
IP: 74.112.144.0/21
IP: 137.236.0.0/16
IP: 142.75.0.0/16
IP: 150.105.0.0/16
IP: 162.252.12.0/22
IP: 173.243.48.0/20
IP: 192.67.53.0/24
IP: 192.80.54.0/24
IP: 192.138.191.0/24
IP: 199.71.120.0/24
IP: 199.85.101.0/24
IP: 199.87.216.0/22
IP: 199.182.176.0/21
IP: 199.231.96.0/22
IP: 204.107.28.0/22
IP: 204.138.115.0/24
IP: 205.141.236.0/22
IP: 205.211.178.0/24
IP: 206.197.31.0/24
IP: 206.253.128.0/21
IP: 207.195.160.0/19
IP: 2604:8b00::/32
IP: 2620:10c:f000::/40
IP: 2620:134:d000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 May 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:b6:37:79:2e:04:fa:7e:78:6c:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Apr 29 11:27:26 2025 GMT
Not After : Jul 6 00:45:22 2026 GMT
Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.159.106.0/23
67.202.160.0/20
74.112.144.0/21
137.236.0.0/16
142.75.0.0/16
150.105.0.0/16
162.252.12.0/22
173.243.48.0/20
192.67.53.0/24
192.80.54.0/24
192.138.191.0/24
199.71.120.0/24
199.85.101.0/24
199.87.216.0/22
199.182.176.0/21
199.231.96.0/22
204.107.28.0/22
204.138.115.0/24
205.141.236.0/22
205.211.178.0/24
206.197.31.0/24
206.253.128.0/21
207.195.160.0/19
IPv6:
2604:8b00::/32
2620:10c:f000::/40
2620:134:d000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11539
11858
16751
18442
19554
21563
22591
26547
26704
27495
27570
31917
32216
32263
33459
35888
46371
395509
395791
397717
398848
399973
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:d5:3a:7d:dd:9f:ff:01:91:65:b9:df:49:4c:2d:6f:99:12:
05:3e:04:12:aa:15:27:00:2b:cc:05:d2:ba:b0:85:8c:b3:ad:
ee:67:d4:75:59:a5:02:3b:db:5e:b8:03:80:de:9d:93:d7:43:
aa:45:65:6c:b0:6e:78:7c:2b:7d:1a:76:cc:94:23:0c:c8:76:
37:a7:0b:7e:65:a5:1a:34:68:ec:2e:3b:2e:f5:c0:ed:ad:38:
83:fb:6a:9b:4b:41:43:d9:a5:68:2e:72:58:63:d1:87:51:0b:
29:5c:4d:30:12:30:36:8d:c6:af:90:ee:5c:06:a9:33:43:6e:
05:05:fb:07:36:d9:26:d5:c0:17:73:73:2a:c6:4d:53:2f:35:
d7:19:57:44:1d:43:63:12:7d:03:c8:26:eb:98:cc:e8:e7:bf:
83:2b:4b:a3:98:60:e0:bd:12:47:6a:f8:f4:8d:47:50:23:8c:
43:0c:76:45:74:c1:75:d7:70:85:d9:7f:00:cc:46:ba:3d:3d:
fb:15:7a:56:a3:d6:d4:b0:10:3c:d7:2d:2d:d8:32:65:7e:5b:
c5:59:fd:82:85:22:6f:5e:3d:7a:2e:00:db:8f:4a:b7:e8:36:
6c:21:7a:b1:53:82:d5:74:07:88:4e:63:d9:ad:9e:36:9f:7e:
cd:0e:1a:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 4 19:51:15 2025 by rpki-client