Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
File: 4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer (raw, json)
Hash identifier: crRaQrKTM0/PactdL+Hp8Vz+mUP/LzmGtZvW2A7SYrs=
Subject key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285848A8291EF6021D2500617A5438
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 25 Jan 2025 01:45:33 +0000
Certificate not after: Fri 30 Apr 2027 00:45:33 +0000
Subordinate resources: AS: 163
AS: 547
AS: 1747
AS: 1786
AS: 1956
AS: 1997
AS: 2538
AS: 3082
AS: 3383
IP: 9.0.0.0 -- 9.9.8.255
IP: 9.9.10.0 -- 9.128.255.255
IP: 9.134.0.0/16
IP: 9.137.0.0 -- 9.140.255.255
IP: 9.142.0.0 -- 9.144.255.255
IP: 9.147.0.0 -- 9.148.255.255
IP: 9.150.0.0 -- 9.159.255.255
IP: 9.161.0.0 -- 9.162.255.255
IP: 9.165.0.0/16
IP: 9.168.0.0/16
IP: 9.170.0.0 -- 9.176.255.255
IP: 9.178.0.0 -- 9.184.255.255
IP: 9.186.0.0 -- 9.204.255.255
IP: 9.206.0.0 -- 9.219.255.255
IP: 9.221.0.0 -- 9.222.255.255
IP: 9.224.0.0/14
IP: 9.230.0.0/16
IP: 9.232.0.0/15
IP: 9.236.0.0 -- 9.247.255.255
IP: 9.249.0.0 -- 9.255.255.255
IP: 129.33.241.0 -- 129.33.242.255
IP: 129.34.0.0/16
IP: 129.41.0.0 -- 129.41.35.255
IP: 129.41.42.0/24
IP: 129.41.44.0/24
IP: 129.41.46.0/23
IP: 129.41.53.0 -- 129.41.61.255
IP: 129.41.64.0/21
IP: 129.41.84.0/22
IP: 129.41.91.0 -- 129.41.93.255
IP: 129.41.95.0 -- 129.41.111.255
IP: 129.41.160.0 -- 129.41.165.255
IP: 129.41.177.0 -- 129.41.187.255
IP: 129.41.190.0/23
IP: 129.41.210.0 -- 129.41.215.255
IP: 129.41.217.0 -- 129.41.219.255
IP: 129.41.224.0/19
IP: 137.42.0.0/16
IP: 146.84.128.0/17
IP: 149.131.152.0 -- 149.131.255.255
IP: 170.224.128.0/19
IP: 170.224.192.0/18
IP: 170.225.32.0 -- 170.225.95.255
IP: 170.225.112.0/20
IP: 170.225.144.0 -- 170.225.226.255
IP: 170.225.229.0 -- 170.225.231.255
IP: 170.225.234.0 -- 170.225.241.255
IP: 170.225.243.0 -- 170.225.251.255
IP: 170.226.0.0 -- 170.226.57.255
IP: 170.226.60.0/22
IP: 192.35.231.0 -- 192.35.232.255
IP: 192.35.234.0 -- 192.35.239.255
IP: 192.41.137.0/24
IP: 192.41.205.0/24
IP: 192.83.206.0/24
IP: 192.86.29.0 -- 192.86.65.255
IP: 192.91.192.0 -- 192.91.197.255
IP: 192.124.113.0/24
IP: 192.147.13.0/24
IP: 192.148.0.0 -- 192.148.32.255
IP: 192.150.122.0/24
IP: 192.156.133.0/24
IP: 192.157.175.0/24
IP: 192.195.29.0/24
IP: 192.207.88.0/24
IP: 192.229.32.0/19
IP: 192.231.8.0/24
IP: 192.231.10.0/24
IP: 192.231.12.0 -- 192.231.14.255
IP: 198.17.57.0/24
IP: 198.17.202.0 -- 198.17.204.255
IP: 198.49.195.0 -- 198.49.196.255
IP: 198.151.0.0/21
IP: 198.180.207.0/24
IP: 198.182.248.0/24
IP: 198.187.219.0/24
IP: 198.206.218.0/24
IP: 198.232.134.0/24
IP: 199.103.69.0 -- 199.103.72.255
IP: 199.164.149.0/24
IP: 199.181.149.0/24
IP: 199.201.254.0/24
IP: 199.242.142.0/24
IP: 204.79.144.0/23
IP: 204.79.175.0/24
IP: 204.79.184.0/24
IP: 204.107.195.0/24
IP: 204.231.227.0/24
IP: 204.231.239.0/24
IP: 205.210.232.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:29:1e:f6:02:1d:25:00:61:7a:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jan 25 01:45:33 2025 GMT
Not After : Apr 30 00:45:33 2027 GMT
Subject: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:01:eb:bf:b6:65:5a:e0:90:d2:fb:cc:88:
15:ac:42:62:c1:38:c5:0a:53:2b:98:ff:80:77:b4:
87:b4:d2:62:80:3d:51:d8:79:27:33:61:59:d1:36:
d6:a8:eb:90:38:c0:51:93:2d:74:90:a5:81:d1:fd:
0b:ea:38:77:19:2c:5f:3a:27:2e:a7:49:08:ac:f7:
bf:91:ed:9f:2a:71:ba:4d:8d:ae:b0:85:b5:66:19:
f0:e3:42:38:8a:b0:05:e7:66:95:0d:3f:5b:5f:d2:
b6:5c:96:11:fc:80:9e:7b:0f:d4:2e:d1:8e:30:87:
f4:45:55:4f:5c:3f:0d:0d:1e:23:37:0d:94:71:ed:
cd:a5:6d:bc:8c:0d:96:90:fa:48:3d:55:ba:23:3e:
f4:80:41:0d:e1:3d:b6:cd:03:6d:c9:df:53:a1:5c:
2d:f6:2d:fc:4f:45:38:73:89:d8:3a:de:04:37:5e:
12:d1:c3:63:dd:b9:31:89:5f:93:25:37:43:da:1d:
74:40:9b:dd:b1:82:a6:27:98:38:cb:50:58:f4:1e:
1c:ba:d2:55:c3:b1:16:f9:8d:ca:f7:a4:9f:be:d8:
84:8d:8b:4a:82:1c:c5:39:70:87:92:84:f0:eb:a5:
e8:e9:8a:e7:2b:57:cc:b5:e3:1c:aa:98:e2:3d:69:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
9.0.0.0-9.9.8.255
9.9.10.0-9.128.255.255
9.134.0.0/16
9.137.0.0-9.140.255.255
9.142.0.0-9.144.255.255
9.147.0.0-9.148.255.255
9.150.0.0-9.159.255.255
9.161.0.0-9.162.255.255
9.165.0.0/16
9.168.0.0/16
9.170.0.0-9.176.255.255
9.178.0.0-9.184.255.255
9.186.0.0-9.204.255.255
9.206.0.0-9.219.255.255
9.221.0.0-9.222.255.255
9.224.0.0/14
9.230.0.0/16
9.232.0.0/15
9.236.0.0-9.247.255.255
9.249.0.0-9.255.255.255
129.33.241.0-129.33.242.255
129.34.0.0/16
129.41.0.0-129.41.35.255
129.41.42.0/24
129.41.44.0/24
129.41.46.0/23
129.41.53.0-129.41.61.255
129.41.64.0/21
129.41.84.0/22
129.41.91.0-129.41.93.255
129.41.95.0-129.41.111.255
129.41.160.0-129.41.165.255
129.41.177.0-129.41.187.255
129.41.190.0/23
129.41.210.0-129.41.215.255
129.41.217.0-129.41.219.255
129.41.224.0/19
137.42.0.0/16
146.84.128.0/17
149.131.152.0-149.131.255.255
170.224.128.0/19
170.224.192.0/18
170.225.32.0-170.225.95.255
170.225.112.0/20
170.225.144.0-170.225.226.255
170.225.229.0-170.225.231.255
170.225.234.0-170.225.241.255
170.225.243.0-170.225.251.255
170.226.0.0-170.226.57.255
170.226.60.0/22
192.35.231.0-192.35.232.255
192.35.234.0-192.35.239.255
192.41.137.0/24
192.41.205.0/24
192.83.206.0/24
192.86.29.0-192.86.65.255
192.91.192.0-192.91.197.255
192.124.113.0/24
192.147.13.0/24
192.148.0.0-192.148.32.255
192.150.122.0/24
192.156.133.0/24
192.157.175.0/24
192.195.29.0/24
192.207.88.0/24
192.229.32.0/19
192.231.8.0/24
192.231.10.0/24
192.231.12.0-192.231.14.255
198.17.57.0/24
198.17.202.0-198.17.204.255
198.49.195.0-198.49.196.255
198.151.0.0/21
198.180.207.0/24
198.182.248.0/24
198.187.219.0/24
198.206.218.0/24
198.232.134.0/24
199.103.69.0-199.103.72.255
199.164.149.0/24
199.181.149.0/24
199.201.254.0/24
199.242.142.0/24
204.79.144.0/23
204.79.175.0/24
204.79.184.0/24
204.107.195.0/24
204.231.227.0/24
204.231.239.0/24
205.210.232.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
163
547
1747
1786
1956
1997
2538
3082
3383
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d9:17:e2:53:45:b1:62:c6:d2:89:49:fb:07:6d:71:85:8f:
2b:42:d4:f7:91:36:f6:e1:58:2a:16:66:db:49:58:b7:eb:6b:
ed:c4:b5:2c:84:60:e3:64:c9:29:f3:47:ff:9f:a2:b0:cb:28:
c8:c9:ff:55:ff:70:d9:4b:41:9b:7c:b9:f7:3a:78:a1:e9:dc:
73:38:57:e3:1d:a1:98:40:15:45:57:3c:fd:52:34:06:b1:0a:
9e:1c:3a:99:53:47:a0:66:ee:fa:69:ea:09:23:84:d3:7c:98:
d2:80:b6:4a:b0:14:fc:04:84:f3:0d:0d:ff:aa:3c:14:79:75:
3d:05:c5:29:73:df:12:c6:cb:d8:87:40:34:53:d4:0a:21:0d:
6b:31:17:d0:51:29:87:88:85:9c:82:38:22:db:b2:30:bb:9a:
ae:39:c4:e9:00:f2:98:94:f5:dc:51:df:96:77:ff:b4:88:d3:
02:b1:51:d0:08:cd:3f:08:65:fd:a6:f2:b1:f5:b2:6c:3a:64:
ce:e4:ca:88:b7:90:10:e8:fd:cb:33:66:51:c7:c4:19:93:dd:
7b:ef:62:a6:cf:69:23:b8:5b:64:03:3e:6d:54:2e:49:63:df:
05:43:c5:ae:91:cd:e9:a0:f9:79:03:b8:6d:59:a1:d8:22:43:
d8:a0:2c:ed
-----BEGIN CERTIFICATE-----
MIIKWDCCCUCgAwIBAgIUAQ0Mn0MoWEioKR72Ah0lAGF6VDgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDEyNTAxNDUzM1oXDTI3MDQzMDAwNDUzM1owLzEtMCsGA1UEAxMk
NGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4Mjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQEB67+2ZVrgkNL7zIgVrEJiwTjFClMrmP+A
d7SHtNJigD1R2HknM2FZ0TbWqOuQOMBRky10kKWB0f0L6jh3GSxfOicup0kIrPe/
ke2fKnG6TY2usIW1Zhnw40I4irAF52aVDT9bX9K2XJYR/ICeew/ULtGOMIf0RVVP
XD8NDR4jNw2Uce3NpW28jA2WkPpIPVW6Iz70gEEN4T22zQNtyd9ToVwt9i38T0U4
c4nYOt4EN14S0cNj3bkxiV+TJTdD2h10QJvdsYKmJ5g4y1BY9B4cutJVw7EW+Y3K
96SfvtiEjYtKghzFOXCHkoTw66Xo6YrnK1fMteMcqpjiPWmfuQIDAQABo4IHajCC
B2YwHQYDVR0OBBYEFOL61G/DS2WNeeOWemOhls+5jI3VMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80
Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRjYzk3ZDk2LTUyZDAtNDhhNy1h
OWVhLWE3NzQ5ZGMwODI3OS80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRj
MDgyNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwggNNBggrBgEF
BQcBBwEB/wSCAzwwggM4MIIDNAQCAAEwggMsMAoDAgAJAwQACQkIMAsDBAEJCQoD
AwAJgAMDAAmGMAoDAwAJiQMDAAmMMAoDAwEJjgMDAAmQMAoDAwAJkwMDAAmUMAoD
AwEJlgMDBQmAMAoDAwAJoQMDAAmiAwMACaUDAwAJqDAKAwMBCaoDAwAJsDAKAwMB
CbIDAwAJuDAKAwMBCboDAwAJzDAKAwMBCc4DAwIJ2DAKAwMACd0DAwAJ3gMDAgng
AwMACeYDAwEJ6DAKAwMCCewDAwMJ8DAJAwMACfkDAgEIMAwDBACBIfEDBACBIfID
AwCBIjALAwMAgSkDBAKBKSADBACBKSoDBACBKSwDBAGBKS4wDAMEAIEpNQMEAYEp
PAMEA4EpQAMEAoEpVDAMAwQAgSlbAwQBgSlcMAwDBACBKV8DBASBKWAwDAMEBYEp
oAMEAYEppDAMAwQAgSmxAwQCgSm4AwQBgSm+MAwDBAGBKdIDBAOBKdAwDAMEAIEp
2QMEAoEp2AMEBYEp4AMDAIkqAwQHklSAMAsDBAOVg5gDAwKVgAMEBarggAMEBqrg
wDAMAwQFquEgAwQFquFAAwQEquFwMAwDBASq4ZADBACq4eIwDAMEAKrh5QMEA6rh
4DAMAwQBquHqAwQBquHwMAwDBACq4fMDBAKq4fgwCwMDAariAwQBquI4AwQCquI8
MAwDBADAI+cDBADAI+gwDAMEAcAj6gMEBMAj4AMEAMApiQMEAMApzQMEAMBTzjAM
AwQAwFYdAwQBwFZAMAwDBAbAW8ADBAHAW8QDBADAfHEDBADAkw0wCwMDAsCUAwQA
wJQgAwQAwJZ6AwQAwJyFAwQAwJ2vAwQAwMMdAwQAwM9YAwQFwOUgAwQAwOcIAwQA
wOcKMAwDBALA5wwDBADA5w4DBADGETkwDAMEAcYRygMEAMYRzDAMAwQAxjHDAwQA
xjHEAwQDxpcAAwQAxrTPAwQAxrb4AwQAxrvbAwQAxs7aAwQAxuiGMAwDBADHZ0UD
BADHZ0gDBADHpJUDBADHtZUDBADHyf4DBADH8o4DBAHMT5ADBADMT68DBADMT7gD
BADMa8MDBADM5+MDBADM5+8DBAHN0ugwOQYIKwYBBQUHAQgBAf8EKjAooCYwJAIC
AKMCAgIjAgIG0wICBvoCAgekAgIHzQICCeoCAgwKAgINNzBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAM2Rfi
U0WxYsbSiUn7B21xhY8rQtT3kTb24VgqFmbbSVi362vtxLUshGDjZMkp80f/n6Kw
yyjIyf9V/3DZS0GbfLn3Onih6dxzOFfjHaGYQBVFVzz9UjQGsQqeHDqZU0egZu76
aeoJI4TTfJjSgLZKsBT8BITzDQ3/qjwUeXU9BcUpc98SxsvYh0A0U9QKIQ1rMRfQ
USmHiIWcgjgi27Iwu5quOcTpAPKYlPXcUd+Wd/+0iNMCsVHQCM0/CGX9pvKx9bJs
OmTO5MqIt5AQ6P3LM2ZRx8QZk91772Kmz2kjuFtkAz5tVC5JY98FQ8Wukc3poPl5
A7htWaHYIkPYoCzt
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:14 2025 by rpki-client