Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
File:                     767ef686-79af-43b0-9354-86aa78f8c407.cer (raw, json)
Hash identifier:          fN0g8WTJUmNS5bOf//NMokXs225PLgxhVkoDayf+pJM=
Subject key identifier:   9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584F29503428770AF2A1810FCB30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 13 Sep 2026 12:45:11 +0000
Certificate not after:    Sat 16 Dec 2028 13:45:11 +0000
Subordinate resources:    AS: 86
                          AS: 206
                          AS: 277
                          AS: 1810 -- 1815
                          AS: 4237
                          AS: 17020
                          AS: 19141
                          AS: 20060
                          AS: 21877
                          AS: 22562
                          AS: 25784
                          AS: 395002
                          IP: 15.176.0.0/16
                          IP: 15.226.0.0/16
                          IP: 15.243.0.0/16
                          IP: 66.54.0.0/18
                          IP: 130.174.0.0/16
                          IP: 130.177.0.0/16
                          IP: 138.35.0.0/16
                          IP: 146.123.0.0/16
                          IP: 155.61.0.0/16
                          IP: 159.249.0.0/16
                          IP: 168.87.0.0/16
                          IP: 170.30.0.0/16
                          IP: 192.34.72.0/24
                          IP: 192.40.25.0/24
                          IP: 192.40.61.0/24
                          IP: 192.40.156.0/24
                          IP: 192.40.245.0/24
                          IP: 192.40.248.0/24
                          IP: 192.56.27.0/24
                          IP: 192.57.0.0/16
                          IP: 192.67.136.0/24
                          IP: 192.67.144.0/24
                          IP: 192.67.152.0/24
                          IP: 192.85.0.0/16
                          IP: 192.86.19.0 -- 192.86.20.255
                          IP: 192.100.31.0 -- 192.100.45.255
                          IP: 192.100.47.0 -- 192.100.50.255
                          IP: 192.132.103.0/24
                          IP: 192.146.103.0/24
                          IP: 192.147.35.0/24
                          IP: 192.170.124.0/23
                          IP: 192.208.32.0 -- 192.208.51.255
                          IP: 192.234.10.0/23
                          IP: 192.238.32.0/19
                          IP: 192.251.168.0 -- 192.251.173.255
                          IP: 198.136.129.0/24
                          IP: 198.202.132.0/22
                          IP: 198.212.181.0/24
                          IP: 199.10.65.0/24
                          IP: 199.20.0.0/21
                          IP: 199.42.0.0/16
                          IP: 199.201.219.0/24
                          IP: 199.228.0.0/16
                          IP: 204.26.128.0 -- 204.26.254.255
                          IP: 204.103.0.0 -- 204.105.255.255
                          IP: 204.153.108.0/22
                          IP: 204.172.0.0/15
                          IP: 204.230.0.0/16
                          IP: 205.141.192.0 -- 205.141.231.255
                          IP: 205.191.0.0/16
                          IP: 205.239.0.0/16
                          IP: 206.120.0.0/16
                          IP: 206.122.0.0/16
                          IP: 206.164.0.0/16
                          IP: 207.37.0.0/16
                          IP: 207.169.0.0/16
                          IP: 216.240.192.0/20
                          IP: 2607:f028::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:50:34:28:77:0a:f2:a1:81:0f:cb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 13 12:45:11 2026 GMT
            Not After : Dec 16 13:45:11 2028 GMT
        Subject: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:30:2c:70:ab:5a:fc:de:12:b9:dc:53:a3:
                    90:fe:22:98:e7:8d:c8:4b:38:99:23:30:e2:9f:97:
                    54:4f:b4:69:26:d0:30:16:83:6b:37:32:42:0d:5e:
                    f9:2c:65:b6:cf:1c:96:d2:49:89:07:ef:5d:8c:51:
                    5d:8a:68:2f:80:01:2f:9d:c9:bd:9a:1b:3d:b4:a5:
                    82:02:0e:8e:31:52:5a:9c:6e:2d:0a:28:61:c2:0b:
                    de:69:b6:7c:ad:ff:67:92:91:32:6c:80:80:fa:51:
                    24:58:e3:77:5e:fe:5d:66:05:a2:9b:6e:f3:4b:8c:
                    40:ea:16:71:69:cb:cc:7e:fb:4e:b0:a1:50:75:c7:
                    ba:a1:b1:b6:54:1e:79:b5:f1:71:35:89:b2:d5:4f:
                    de:ae:9f:2d:d6:a0:01:b2:c1:be:ff:55:3e:1b:9b:
                    7d:77:70:46:6f:8f:83:b0:fe:d4:3e:fe:1a:5c:52:
                    4b:47:87:b2:6b:1b:ec:f7:20:e5:b7:b2:97:0a:fb:
                    5b:1b:5f:90:a8:e7:ae:8e:5f:2b:f4:92:8a:4c:89:
                    13:8b:5a:c9:33:4f:47:59:bc:1a:7a:3b:88:2f:64:
                    85:a0:75:48:75:c3:6c:3f:c5:f4:23:b2:57:d6:0c:
                    01:cc:e6:a4:24:2f:b5:bb:92:48:8e:33:a4:37:39:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.0.0/16
                  15.226.0.0/16
                  15.243.0.0/16
                  66.54.0.0/18
                  130.174.0.0/16
                  130.177.0.0/16
                  138.35.0.0/16
                  146.123.0.0/16
                  155.61.0.0/16
                  159.249.0.0/16
                  168.87.0.0/16
                  170.30.0.0/16
                  192.34.72.0/24
                  192.40.25.0/24
                  192.40.61.0/24
                  192.40.156.0/24
                  192.40.245.0/24
                  192.40.248.0/24
                  192.56.27.0/24
                  192.57.0.0/16
                  192.67.136.0/24
                  192.67.144.0/24
                  192.67.152.0/24
                  192.85.0.0/16
                  192.86.19.0-192.86.20.255
                  192.100.31.0-192.100.45.255
                  192.100.47.0-192.100.50.255
                  192.132.103.0/24
                  192.146.103.0/24
                  192.147.35.0/24
                  192.170.124.0/23
                  192.208.32.0-192.208.51.255
                  192.234.10.0/23
                  192.238.32.0/19
                  192.251.168.0-192.251.173.255
                  198.136.129.0/24
                  198.202.132.0/22
                  198.212.181.0/24
                  199.10.65.0/24
                  199.20.0.0/21
                  199.42.0.0/16
                  199.201.219.0/24
                  199.228.0.0/16
                  204.26.128.0-204.26.254.255
                  204.103.0.0-204.105.255.255
                  204.153.108.0/22
                  204.172.0.0/15
                  204.230.0.0/16
                  205.141.192.0-205.141.231.255
                  205.191.0.0/16
                  205.239.0.0/16
                  206.120.0.0/16
                  206.122.0.0/16
                  206.164.0.0/16
                  207.37.0.0/16
                  207.169.0.0/16
                  216.240.192.0/20
                IPv6:
                  2607:f028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  86
                  206
                  277
                  1810-1815
                  4237
                  17020
                  19141
                  20060
                  21877
                  22562
                  25784
                  395002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:83:b4:b6:44:c4:2e:e1:21:9c:8b:47:fb:66:80:8b:1f:7b:
         78:95:59:ea:68:da:d5:a1:67:dc:e7:3e:1c:a2:2e:84:d1:3e:
         33:af:56:2d:6f:46:92:06:80:96:80:f0:44:ea:67:f0:88:70:
         87:fc:2c:96:4a:61:04:5d:c8:59:c8:b7:a1:3b:c3:37:9c:a6:
         4f:96:a6:d9:f1:3f:3e:f0:e6:d9:cc:d9:67:12:bc:58:55:7c:
         82:4f:3e:1e:57:81:21:86:d9:35:2f:5a:f3:73:10:4f:3e:e6:
         84:22:94:2f:ca:9b:25:02:c8:8e:5a:58:15:08:7b:d5:00:c3:
         a9:57:53:ad:06:de:81:b9:20:86:f7:f7:86:2a:44:aa:dc:fa:
         7b:c6:66:5a:66:89:e2:01:ee:ca:04:6c:4d:81:27:b5:0f:0c:
         1e:38:10:71:ee:36:61:32:74:62:ad:f9:48:d2:b3:f9:8f:c4:
         fd:be:a8:0f:35:1b:80:e9:8d:df:75:fd:b6:e1:b8:ea:37:45:
         ff:a4:fd:4f:22:14:18:5c:ab:0f:6f:d8:e7:b3:a3:f8:bb:e7:
         c8:4b:b7:07:72:eb:3f:2a:84:2d:9d:b5:c4:35:e7:db:35:b7:
         1d:51:00:09:26:6e:6b:70:19:fc:79:e3:2d:d4:83:78:d5:29:
         c1:e7:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:24:05 2026 by rpki-client