Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
File:                     767ef686-79af-43b0-9354-86aa78f8c407.cer (raw, json)
Hash identifier:          ySY3H2pa3TnDm2XEbpqedtEBAXp56lEUjeYuXCY+Raw=
Subject key identifier:   9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584A23B866A8404F9AB20137C100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Jun 2025 00:45:36 +0000
Certificate not after:    Mon 13 Sep 2027 00:45:36 +0000
Subordinate resources:    AS: 86
                          AS: 206
                          AS: 277
                          AS: 1810 -- 1815
                          AS: 4237
                          AS: 17020
                          AS: 19141
                          AS: 20060
                          AS: 21877
                          AS: 22562
                          AS: 25784
                          AS: 395002
                          IP: 15.176.0.0/16
                          IP: 15.195.0.0/16
                          IP: 15.208.0.0/16
                          IP: 15.211.0.0/16
                          IP: 15.218.0.0/16
                          IP: 15.226.0.0/16
                          IP: 15.243.0.0/16
                          IP: 66.54.0.0/18
                          IP: 130.174.0.0/16
                          IP: 130.177.0.0/16
                          IP: 138.35.0.0/16
                          IP: 146.123.0.0/16
                          IP: 155.61.0.0/16
                          IP: 159.249.0.0/16
                          IP: 168.87.0.0/16
                          IP: 170.30.0.0/16
                          IP: 192.34.72.0/24
                          IP: 192.40.25.0/24
                          IP: 192.40.61.0/24
                          IP: 192.40.156.0/24
                          IP: 192.40.245.0/24
                          IP: 192.40.248.0/24
                          IP: 192.56.27.0/24
                          IP: 192.57.0.0/16
                          IP: 192.67.136.0/24
                          IP: 192.67.144.0/24
                          IP: 192.67.152.0/24
                          IP: 192.85.0.0/16
                          IP: 192.86.19.0 -- 192.86.20.255
                          IP: 192.100.31.0 -- 192.100.45.255
                          IP: 192.100.47.0 -- 192.100.50.255
                          IP: 192.132.103.0/24
                          IP: 192.146.103.0/24
                          IP: 192.147.35.0/24
                          IP: 192.170.124.0/23
                          IP: 192.208.32.0 -- 192.208.51.255
                          IP: 192.234.10.0/23
                          IP: 192.238.32.0/19
                          IP: 192.251.168.0 -- 192.251.173.255
                          IP: 198.136.129.0/24
                          IP: 198.202.132.0/22
                          IP: 198.212.181.0/24
                          IP: 199.10.65.0/24
                          IP: 199.20.0.0/21
                          IP: 199.42.0.0/16
                          IP: 199.201.219.0/24
                          IP: 199.228.0.0/16
                          IP: 204.26.128.0 -- 204.26.254.255
                          IP: 204.103.0.0 -- 204.105.255.255
                          IP: 204.153.108.0/22
                          IP: 204.172.0.0/15
                          IP: 204.230.0.0/16
                          IP: 205.141.192.0 -- 205.141.231.255
                          IP: 205.191.0.0/16
                          IP: 205.239.0.0/16
                          IP: 206.120.0.0/16
                          IP: 206.122.0.0/16
                          IP: 206.164.0.0/16
                          IP: 207.37.0.0/16
                          IP: 207.169.0.0/16
                          IP: 216.240.192.0/20
                          IP: 2607:f028::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:b8:66:a8:40:4f:9a:b2:01:37:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 10 00:45:36 2025 GMT
            Not After : Sep 13 00:45:36 2027 GMT
        Subject: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:30:2c:70:ab:5a:fc:de:12:b9:dc:53:a3:
                    90:fe:22:98:e7:8d:c8:4b:38:99:23:30:e2:9f:97:
                    54:4f:b4:69:26:d0:30:16:83:6b:37:32:42:0d:5e:
                    f9:2c:65:b6:cf:1c:96:d2:49:89:07:ef:5d:8c:51:
                    5d:8a:68:2f:80:01:2f:9d:c9:bd:9a:1b:3d:b4:a5:
                    82:02:0e:8e:31:52:5a:9c:6e:2d:0a:28:61:c2:0b:
                    de:69:b6:7c:ad:ff:67:92:91:32:6c:80:80:fa:51:
                    24:58:e3:77:5e:fe:5d:66:05:a2:9b:6e:f3:4b:8c:
                    40:ea:16:71:69:cb:cc:7e:fb:4e:b0:a1:50:75:c7:
                    ba:a1:b1:b6:54:1e:79:b5:f1:71:35:89:b2:d5:4f:
                    de:ae:9f:2d:d6:a0:01:b2:c1:be:ff:55:3e:1b:9b:
                    7d:77:70:46:6f:8f:83:b0:fe:d4:3e:fe:1a:5c:52:
                    4b:47:87:b2:6b:1b:ec:f7:20:e5:b7:b2:97:0a:fb:
                    5b:1b:5f:90:a8:e7:ae:8e:5f:2b:f4:92:8a:4c:89:
                    13:8b:5a:c9:33:4f:47:59:bc:1a:7a:3b:88:2f:64:
                    85:a0:75:48:75:c3:6c:3f:c5:f4:23:b2:57:d6:0c:
                    01:cc:e6:a4:24:2f:b5:bb:92:48:8e:33:a4:37:39:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.0.0/16
                  15.195.0.0/16
                  15.208.0.0/16
                  15.211.0.0/16
                  15.218.0.0/16
                  15.226.0.0/16
                  15.243.0.0/16
                  66.54.0.0/18
                  130.174.0.0/16
                  130.177.0.0/16
                  138.35.0.0/16
                  146.123.0.0/16
                  155.61.0.0/16
                  159.249.0.0/16
                  168.87.0.0/16
                  170.30.0.0/16
                  192.34.72.0/24
                  192.40.25.0/24
                  192.40.61.0/24
                  192.40.156.0/24
                  192.40.245.0/24
                  192.40.248.0/24
                  192.56.27.0/24
                  192.57.0.0/16
                  192.67.136.0/24
                  192.67.144.0/24
                  192.67.152.0/24
                  192.85.0.0/16
                  192.86.19.0-192.86.20.255
                  192.100.31.0-192.100.45.255
                  192.100.47.0-192.100.50.255
                  192.132.103.0/24
                  192.146.103.0/24
                  192.147.35.0/24
                  192.170.124.0/23
                  192.208.32.0-192.208.51.255
                  192.234.10.0/23
                  192.238.32.0/19
                  192.251.168.0-192.251.173.255
                  198.136.129.0/24
                  198.202.132.0/22
                  198.212.181.0/24
                  199.10.65.0/24
                  199.20.0.0/21
                  199.42.0.0/16
                  199.201.219.0/24
                  199.228.0.0/16
                  204.26.128.0-204.26.254.255
                  204.103.0.0-204.105.255.255
                  204.153.108.0/22
                  204.172.0.0/15
                  204.230.0.0/16
                  205.141.192.0-205.141.231.255
                  205.191.0.0/16
                  205.239.0.0/16
                  206.120.0.0/16
                  206.122.0.0/16
                  206.164.0.0/16
                  207.37.0.0/16
                  207.169.0.0/16
                  216.240.192.0/20
                IPv6:
                  2607:f028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  86
                  206
                  277
                  1810-1815
                  4237
                  17020
                  19141
                  20060
                  21877
                  22562
                  25784
                  395002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:bb:20:44:d4:6a:e3:e7:e7:ff:9a:f1:bc:b0:4c:d9:b7:05:
         6b:0d:84:1e:f7:1b:53:54:91:10:2f:47:da:bf:8b:62:63:1b:
         81:59:50:9d:bc:88:47:33:33:6d:fe:25:96:1b:16:94:31:5e:
         e0:4e:fd:16:db:a3:2c:9b:a9:d1:0a:02:5b:ad:04:62:fa:6a:
         70:59:45:e8:5d:23:86:0f:a0:75:5d:ae:6f:68:42:90:e3:0e:
         be:da:d0:e2:33:87:b3:59:c9:85:0f:d9:c4:95:56:30:a1:cc:
         9f:97:2f:3c:70:24:9d:6e:d6:d7:ee:d1:88:38:45:40:b1:52:
         8b:0b:c4:0b:e3:29:b4:1b:c3:17:a2:e3:db:dc:26:d7:4b:06:
         bc:22:ef:65:f7:cc:6a:fa:d3:6f:5a:6d:8b:ef:02:4c:57:44:
         11:13:ce:26:44:6d:56:ec:81:b1:d1:7c:22:21:c2:d4:d0:73:
         9d:d3:f4:7c:17:96:ed:ca:ec:40:62:fd:1a:f8:36:e6:34:4b:
         dc:9e:ee:7d:ad:e6:2d:d0:76:14:ff:ce:79:f5:d5:de:96:60:
         77:1b:20:c6:05:11:9d:ea:61:8e:26:b7:66:20:be:3d:4d:1f:
         9c:95:d1:2a:85:03:2a:92:68:8f:8a:65:10:e1:31:c8:ea:32:
         62:05:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:52:15 2025 by rpki-client