Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
File:                     c727dab7-c852-4d24-82ff-cf171b24f2f9.cer (raw, json)
Hash identifier:          H5rm2g70arR0ehnNPZ3t2JWw+APq3edJgyCA+QPZY+g=
Subject key identifier:   61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584D7B62E9A39368340482A43600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 Apr 2026 12:45:18 +0000
Certificate not after:    Sat 15 Jul 2028 12:45:18 +0000
Subordinate resources:    AS: 394161
                          AS: 394363
                          AS: 394943
                          IP: 66.17.0.0/18
                          IP: 149.106.192.0/19
                          IP: 192.95.64.0/24
                          IP: 199.43.255.0/24
                          IP: 199.66.8.0/22
                          IP: 199.120.32.0 -- 199.120.57.255
                          IP: 216.23.0.0/18
                          IP: 2620:137:d000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:62:e9:a3:93:68:34:04:82:a4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr 12 12:45:18 2026 GMT
            Not After : Jul 15 12:45:18 2028 GMT
        Subject: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:74:51:af:dc:13:3c:ff:d6:6a:fa:f8:d4:
                    9a:d0:cf:8c:26:74:b4:1b:e2:ff:87:ef:48:a5:b7:
                    63:1b:4e:eb:ee:92:0e:07:53:80:b8:f0:34:cb:d0:
                    1c:14:db:5a:5b:81:c6:50:b8:7f:a2:62:39:6a:b4:
                    ab:ef:5e:62:c8:3c:24:49:b9:65:e1:93:5c:92:01:
                    1d:10:0f:70:a5:6c:18:09:32:25:0a:81:3b:a6:a7:
                    db:8c:41:f2:fa:d3:a1:91:a4:dd:63:c2:bc:80:c2:
                    c6:5b:5c:8e:e6:3a:cb:c6:9f:c5:19:c6:11:0d:ac:
                    3f:df:c3:d2:8a:b3:ff:35:69:fc:e9:69:18:c8:64:
                    d5:65:b8:27:71:4e:5d:6c:8a:9f:22:3d:3f:01:18:
                    e2:fd:ef:82:db:a6:2a:2d:91:dd:a1:22:e3:c3:2f:
                    c7:44:2d:68:87:fc:6e:22:1d:d7:62:bd:f1:54:68:
                    e8:d6:32:ba:b9:d1:4e:bf:c5:53:71:6e:2e:dc:f7:
                    d7:13:6f:64:83:1b:2b:40:7c:62:d7:05:0f:26:41:
                    01:de:6f:79:ce:da:4c:15:8a:91:02:62:5c:e9:c1:
                    74:72:31:a2:c0:0d:a1:73:21:f0:37:ec:b6:cf:49:
                    55:ac:75:ee:7e:8f:9d:ad:82:09:ca:d2:83:df:48:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.17.0.0/18
                  149.106.192.0/19
                  192.95.64.0/24
                  199.43.255.0/24
                  199.66.8.0/22
                  199.120.32.0-199.120.57.255
                  216.23.0.0/18
                IPv6:
                  2620:137:d000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394161
                  394363
                  394943

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:fa:8b:0a:8f:93:fb:c7:da:ec:78:3e:3c:cc:b9:73:85:
         27:c8:95:76:f0:61:9e:8b:14:0b:39:87:ad:53:60:82:e2:0d:
         5a:5e:47:2b:2f:59:77:26:be:7c:14:b3:18:50:ed:4e:c9:fb:
         37:c3:40:50:a3:79:45:04:33:b6:e4:55:a7:58:88:d7:47:bf:
         cf:d2:9e:15:bb:3f:1c:cb:a5:04:cb:d5:f3:3c:f1:48:03:d4:
         ca:d2:df:56:6a:ae:89:e8:f6:ff:f2:da:fe:dc:7a:5a:a3:47:
         4c:41:58:6e:b6:9c:dd:38:c8:80:5a:fb:ec:a3:47:81:e5:f3:
         87:92:d2:94:52:98:e0:da:36:4b:4b:f6:9d:df:57:9d:e2:6c:
         68:87:22:11:fb:71:7b:f3:e9:4e:74:f8:4e:1d:b0:54:be:30:
         58:2c:73:03:c1:09:7c:1a:fa:87:ba:9a:0f:d7:d5:e7:45:19:
         19:ba:aa:fc:0d:69:98:52:c5:bd:87:ba:e9:d6:2c:06:a3:95:
         ff:46:d2:4c:3d:c9:c5:9e:7f:8a:30:16:ff:4c:7c:cb:92:b6:
         88:9d:65:4c:8c:62:00:5a:c1:f0:57:7a:a2:a8:dd:82:b2:ed:
         3a:44:08:cb:9d:90:b6:ee:82:45:51:4f:f3:2c:bc:44:86:e1:
         5d:b1:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:06 2026 by rpki-client