Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer
File: 7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer (raw, json)
Hash identifier: z4yNJ+DLkAF+mJVD60rMVJl6RWU4WgBf2m2kB1xNM3Y=
Subject key identifier: 5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F43285849C989658726EB72A4B1E45EC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 08 May 2025 17:28:08 +0000
Certificate not after: Wed 11 Aug 2027 17:28:08 +0000
Subordinate resources: AS: 58
AS: 74
AS: 566
AS: 820
AS: 837
AS: 3765 -- 3766
IP: 128.43.0.0/16
IP: 131.132.0.0 -- 131.141.255.255
IP: 132.246.0.0/16
IP: 138.214.0.0/16
IP: 142.2.0.0/16
IP: 142.53.0.0/16
IP: 142.64.0.0/16
IP: 142.72.0.0/16
IP: 142.74.0.0/16
IP: 142.92.0.0/16
IP: 142.130.0.0/16
IP: 142.191.0.0/16
IP: 142.206.0.0/16
IP: 142.208.0.0 -- 142.212.255.255
IP: 142.235.0.0 -- 142.236.255.255
IP: 159.177.0.0/16
IP: 161.187.0.0/16
IP: 167.11.0.0/16
IP: 167.33.0.0/16
IP: 167.227.0.0/16
IP: 192.5.144.0/24
IP: 192.12.62.0/24
IP: 192.12.98.0/24
IP: 192.12.215.0/24
IP: 192.16.205.0 -- 192.16.255.255
IP: 192.35.144.0/24
IP: 192.42.68.0/24
IP: 192.55.224.0/24
IP: 192.70.172.0/24
IP: 192.75.10.0/24
IP: 192.75.14.0/23
IP: 192.75.65.0/24
IP: 192.75.68.0/24
IP: 192.75.72.0/24
IP: 192.83.247.0/24
IP: 192.139.21.0/24
IP: 192.139.115.0 -- 192.139.117.255
IP: 192.139.141.0/24
IP: 192.139.198.0/24
IP: 192.197.52.0/23
IP: 192.197.71.0/24
IP: 192.197.73.0 -- 192.197.75.255
IP: 192.197.150.0/24
IP: 192.197.178.0 -- 192.197.187.255
IP: 192.197.243.0 -- 192.197.244.255
IP: 198.73.83.0 -- 198.73.87.255
IP: 198.73.135.0 -- 198.73.136.255
IP: 198.96.62.0/24
IP: 198.161.23.0/24
IP: 199.60.64.0/19
IP: 199.175.8.0/21
IP: 199.175.96.0/23
IP: 199.212.148.0/22
IP: 199.212.192.0 -- 199.212.216.255
IP: 204.174.103.0/24
IP: 204.187.48.0/23
IP: 204.225.144.0/24
IP: 205.189.5.0 -- 205.189.7.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 May 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c9:89:65:87:26:eb:72:a4:b1:e4:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: May 8 17:28:08 2025 GMT
Not After : Aug 11 17:28:08 2027 GMT
Subject: CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:6b:06:cd:32:73:b9:6a:be:12:a4:c0:70:
8c:e5:ac:98:d6:2a:61:1c:ef:56:24:37:10:cd:99:
75:cf:ae:e8:de:ae:23:fe:32:fe:ba:12:96:39:c0:
df:a5:e1:56:fc:76:25:02:1f:39:c4:c3:f0:58:a4:
59:f5:c2:5c:d5:78:16:d7:af:99:6f:f7:64:5b:7e:
59:8d:6c:b0:28:cd:67:35:44:a6:ca:e3:f0:0a:71:
eb:3f:95:79:8a:28:81:82:61:89:1c:66:70:f4:6e:
27:0d:bb:2a:b8:84:e6:06:b4:a7:1e:19:51:c8:12:
c5:c5:63:37:cc:e0:38:9a:dc:36:46:e3:6a:57:7d:
63:b7:48:74:28:5b:f8:b1:7b:71:65:6a:cb:3f:d7:
3f:dc:12:c8:99:a8:ba:ef:da:fd:aa:8d:e3:d4:a5:
96:e8:08:f9:31:0e:d2:b6:a3:4c:a1:9c:44:d1:95:
d8:f3:e9:30:05:f8:a6:55:48:fb:b8:62:a0:3f:8a:
25:f5:03:3f:3a:ff:a6:f6:80:4f:cb:b9:27:0c:01:
ea:7f:eb:bc:87:e2:b8:1b:d1:11:10:0a:b4:85:c4:
59:c3:23:47:68:97:bf:94:ba:d0:72:6d:dc:4b:d2:
4a:30:e9:50:38:f9:99:a3:ca:87:a9:33:86:b0:e7:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
128.43.0.0/16
131.132.0.0-131.141.255.255
132.246.0.0/16
138.214.0.0/16
142.2.0.0/16
142.53.0.0/16
142.64.0.0/16
142.72.0.0/16
142.74.0.0/16
142.92.0.0/16
142.130.0.0/16
142.191.0.0/16
142.206.0.0/16
142.208.0.0-142.212.255.255
142.235.0.0-142.236.255.255
159.177.0.0/16
161.187.0.0/16
167.11.0.0/16
167.33.0.0/16
167.227.0.0/16
192.5.144.0/24
192.12.62.0/24
192.12.98.0/24
192.12.215.0/24
192.16.205.0-192.16.255.255
192.35.144.0/24
192.42.68.0/24
192.55.224.0/24
192.70.172.0/24
192.75.10.0/24
192.75.14.0/23
192.75.65.0/24
192.75.68.0/24
192.75.72.0/24
192.83.247.0/24
192.139.21.0/24
192.139.115.0-192.139.117.255
192.139.141.0/24
192.139.198.0/24
192.197.52.0/23
192.197.71.0/24
192.197.73.0-192.197.75.255
192.197.150.0/24
192.197.178.0-192.197.187.255
192.197.243.0-192.197.244.255
198.73.83.0-198.73.87.255
198.73.135.0-198.73.136.255
198.96.62.0/24
198.161.23.0/24
199.60.64.0/19
199.175.8.0/21
199.175.96.0/23
199.212.148.0/22
199.212.192.0-199.212.216.255
204.174.103.0/24
204.187.48.0/23
204.225.144.0/24
205.189.5.0-205.189.7.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58
74
566
820
837
3765-3766
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:67:50:82:cf:8f:48:4f:ed:53:23:a8:d8:df:1b:50:13:b4:
5d:3d:37:af:35:93:10:02:5d:5c:ae:72:c8:cd:7e:bf:36:00:
ac:bc:c5:26:16:cb:bc:8b:f0:17:97:f3:73:f3:bb:0a:14:d4:
e5:e7:3c:42:f9:d4:a3:d0:16:75:f2:e4:9d:ea:af:dd:89:3f:
20:a8:dc:10:60:7f:a2:e0:d4:54:d3:1f:87:14:3d:74:7a:e4:
5a:e2:08:b9:d5:12:18:5d:13:9a:f2:ad:06:6e:11:13:c7:c2:
00:9d:77:af:db:a6:e5:94:b6:ff:80:4f:c3:cc:ce:3e:e6:65:
21:1f:ba:ed:f8:ac:51:b0:68:8f:ce:14:8f:43:36:39:8c:d1:
10:42:cc:5d:1a:55:d3:f9:6d:47:77:d8:af:e7:1a:8a:29:1f:
84:a7:9c:6a:52:79:d1:60:7e:c7:5d:5f:93:60:3e:ac:8d:ee:
fd:89:81:69:d2:f8:6a:73:db:f5:9a:62:67:a7:09:c2:b7:ba:
65:d9:fa:90:5e:1a:61:37:58:e7:56:35:4c:a6:92:c1:99:68:
9d:fe:c2:d9:0f:7a:88:b1:33:00:a7:12:10:bd:e1:27:a7:f6:
34:bf:f7:31:1b:f7:7d:aa:2b:e7:eb:9a:49:22:45:02:41:50:
f5:4d:c4:19
-----BEGIN CERTIFICATE-----
MIIIyDCCB7CgAwIBAgIUAQ0Mn0MoWEnJiWWHJutypLHkXsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDUwODE3MjgwOFoXDTI3MDgxMTE3MjgwOFowLzEtMCsGA1UEAxMk
N2VkNGI3ZGEtYWZhYy00YTVkLWI5ODctOTgzNWRiYzBjMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2ZrBs0yc7lqvhKkwHCM5ayY1iphHO9WJDcQ
zZl1z67o3q4j/jL+uhKWOcDfpeFW/HYlAh85xMPwWKRZ9cJc1XgW16+Zb/dkW35Z
jWywKM1nNUSmyuPwCnHrP5V5iiiBgmGJHGZw9G4nDbsquITmBrSnHhlRyBLFxWM3
zOA4mtw2RuNqV31jt0h0KFv4sXtxZWrLP9c/3BLImai679r9qo3j1KWW6Aj5MQ7S
tqNMoZxE0ZXY8+kwBfimVUj7uGKgP4ol9QM/Ov+m9oBPy7knDAHqf+u8h+K4G9ER
EAq0hcRZwyNHaJe/lLrQcm3cS9JKMOlQOPmZo8qHqTOGsOd5jQIDAQABo4IF2jCC
BdYwHQYDVR0OBBYEFF+cJdBhkH8aykup0nx3tOaZ9IoiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83
ZWQ0YjdkYS1hZmFjLTRhNWQtYjk4Ny05ODM1ZGJjMGMwYTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzdlZDRiN2RhLWFmYWMtNGE1ZC1i
OTg3LTk4MzVkYmMwYzBhNS83ZWQ0YjdkYS1hZmFjLTRhNWQtYjk4Ny05ODM1ZGJj
MGMwYTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwggHFBggrBgEF
BQcBBwEB/wSCAbQwggGwMIIBrAQCAAEwggGkAwMAgCswCgMDAoOEAwMBg4wDAwCE
9gMDAIrWAwMAjgIDAwCONQMDAI5AAwMAjkgDAwCOSgMDAI5cAwMAjoIDAwCOvwMD
AI7OMAoDAwSO0AMDAI7UMAoDAwCO6wMDAI7sAwMAn7EDAwChuwMDAKcLAwMApyED
AwCn4wMEAMAFkAMEAMAMPgMEAMAMYgMEAMAM1zALAwQAwBDNAwMAwBADBADAI5AD
BADAKkQDBADAN+ADBADARqwDBADASwoDBAHASw4DBADAS0EDBADAS0QDBADAS0gD
BADAU/cDBADAixUwDAMEAMCLcwMEAcCLdAMEAMCLjQMEAMCLxgMEAcDFNAMEAMDF
RzAMAwQAwMVJAwQCwMVIAwQAwMWWMAwDBAHAxbIDBALAxbgwDAMEAMDF8wMEAMDF
9DAMAwQAxklTAwQDxklQMAwDBADGSYcDBADGSYgDBADGYD4DBADGoRcDBAXHPEAD
BAPHrwgDBAHHr2ADBALH1JQwDAMEBsfUwAMEAMfU2AMEAMyuZwMEAcy7MAMEAMzh
kDAMAwQAzb0FAwQDzb0AMDEGCCsGAQUFBwEIAQH/BCIwIKAeMBwCAToCAUoCAgI2
AgIDNAICA0UwCAICDrUCAg62MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAZnUILPj0hP7VMjqNjfG1ATtF09
N681kxACXVyucsjNfr82AKy8xSYWy7yL8BeX83PzuwoU1OXnPEL51KPQFnXy5J3q
r92JPyCo3BBgf6Lg1FTTH4cUPXR65FriCLnVEhhdE5ryrQZuERPHwgCdd6/bpuWU
tv+AT8PMzj7mZSEfuu34rFGwaI/OFI9DNjmM0RBCzF0aVdP5bUd32K/nGoopH4Sn
nGpSedFgfsddX5NgPqyN7v2JgWnS+Gpz2/WaYmenCcK3umXZ+pBeGmE3WOdWNUym
ksGZaJ3+wtkPeoixMwCnEhC94Sen9jS/9zEb932qK+frmkkiRQJBUPVNxBk=
-----END CERTIFICATE-----
Generated at Mon May 12 21:02:40 2025 by rpki-client