Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
File:                     767ef686-79af-43b0-9354-86aa78f8c407.cer (raw, json)
Hash identifier:          GTPcp0mXa48tQtiR+FUUAInEaC04xMo75rATFZ47ams=
Subject key identifier:   9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848883C58648CDF23FF6BEFF140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Jan 2025 15:18:25 +0000
Certificate not after:    Wed 10 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 86
                          AS: 206
                          AS: 277
                          AS: 1810 -- 1815
                          AS: 4237
                          AS: 17020
                          AS: 19141
                          AS: 20060
                          AS: 21877
                          AS: 22562
                          AS: 25784
                          AS: 395002
                          IP: 15.176.0.0/16
                          IP: 15.195.0.0/16
                          IP: 15.208.0.0/16
                          IP: 15.211.0.0/16
                          IP: 15.218.0.0/16
                          IP: 15.226.0.0/16
                          IP: 15.243.0.0/16
                          IP: 66.54.0.0/18
                          IP: 130.174.0.0/16
                          IP: 130.177.0.0/16
                          IP: 138.35.0.0/16
                          IP: 146.123.0.0/16
                          IP: 155.61.0.0/16
                          IP: 159.249.0.0/16
                          IP: 168.87.0.0/16
                          IP: 170.30.0.0/16
                          IP: 192.34.72.0/24
                          IP: 192.40.25.0/24
                          IP: 192.40.61.0/24
                          IP: 192.40.156.0/24
                          IP: 192.40.245.0/24
                          IP: 192.40.248.0/24
                          IP: 192.56.27.0/24
                          IP: 192.57.0.0/16
                          IP: 192.67.136.0/24
                          IP: 192.67.144.0/24
                          IP: 192.67.152.0/24
                          IP: 192.85.0.0/16
                          IP: 192.86.19.0 -- 192.86.20.255
                          IP: 192.100.31.0 -- 192.100.45.255
                          IP: 192.100.47.0 -- 192.100.50.255
                          IP: 192.132.103.0/24
                          IP: 192.146.103.0/24
                          IP: 192.147.35.0/24
                          IP: 192.170.124.0/23
                          IP: 192.208.32.0 -- 192.208.51.255
                          IP: 192.234.10.0/23
                          IP: 192.238.32.0/19
                          IP: 192.251.168.0 -- 192.251.173.255
                          IP: 198.136.129.0/24
                          IP: 198.202.132.0/22
                          IP: 198.212.181.0/24
                          IP: 199.10.65.0/24
                          IP: 199.20.0.0/21
                          IP: 199.42.0.0/16
                          IP: 199.201.219.0/24
                          IP: 199.228.0.0/16
                          IP: 204.26.128.0 -- 204.26.254.255
                          IP: 204.103.0.0 -- 204.105.255.255
                          IP: 204.153.108.0/22
                          IP: 204.172.0.0/15
                          IP: 204.230.0.0/16
                          IP: 205.141.192.0 -- 205.141.231.255
                          IP: 205.191.0.0/16
                          IP: 205.239.0.0/16
                          IP: 206.120.0.0/16
                          IP: 206.122.0.0/16
                          IP: 206.164.0.0/16
                          IP: 207.37.0.0/16
                          IP: 207.169.0.0/16
                          IP: 216.240.192.0/20
                          IP: 2607:f028::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:3c:58:64:8c:df:23:ff:6b:ef:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 13 15:18:25 2025 GMT
            Not After : Jun 10 00:45:20 2026 GMT
        Subject: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:30:2c:70:ab:5a:fc:de:12:b9:dc:53:a3:
                    90:fe:22:98:e7:8d:c8:4b:38:99:23:30:e2:9f:97:
                    54:4f:b4:69:26:d0:30:16:83:6b:37:32:42:0d:5e:
                    f9:2c:65:b6:cf:1c:96:d2:49:89:07:ef:5d:8c:51:
                    5d:8a:68:2f:80:01:2f:9d:c9:bd:9a:1b:3d:b4:a5:
                    82:02:0e:8e:31:52:5a:9c:6e:2d:0a:28:61:c2:0b:
                    de:69:b6:7c:ad:ff:67:92:91:32:6c:80:80:fa:51:
                    24:58:e3:77:5e:fe:5d:66:05:a2:9b:6e:f3:4b:8c:
                    40:ea:16:71:69:cb:cc:7e:fb:4e:b0:a1:50:75:c7:
                    ba:a1:b1:b6:54:1e:79:b5:f1:71:35:89:b2:d5:4f:
                    de:ae:9f:2d:d6:a0:01:b2:c1:be:ff:55:3e:1b:9b:
                    7d:77:70:46:6f:8f:83:b0:fe:d4:3e:fe:1a:5c:52:
                    4b:47:87:b2:6b:1b:ec:f7:20:e5:b7:b2:97:0a:fb:
                    5b:1b:5f:90:a8:e7:ae:8e:5f:2b:f4:92:8a:4c:89:
                    13:8b:5a:c9:33:4f:47:59:bc:1a:7a:3b:88:2f:64:
                    85:a0:75:48:75:c3:6c:3f:c5:f4:23:b2:57:d6:0c:
                    01:cc:e6:a4:24:2f:b5:bb:92:48:8e:33:a4:37:39:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.0.0/16
                  15.195.0.0/16
                  15.208.0.0/16
                  15.211.0.0/16
                  15.218.0.0/16
                  15.226.0.0/16
                  15.243.0.0/16
                  66.54.0.0/18
                  130.174.0.0/16
                  130.177.0.0/16
                  138.35.0.0/16
                  146.123.0.0/16
                  155.61.0.0/16
                  159.249.0.0/16
                  168.87.0.0/16
                  170.30.0.0/16
                  192.34.72.0/24
                  192.40.25.0/24
                  192.40.61.0/24
                  192.40.156.0/24
                  192.40.245.0/24
                  192.40.248.0/24
                  192.56.27.0/24
                  192.57.0.0/16
                  192.67.136.0/24
                  192.67.144.0/24
                  192.67.152.0/24
                  192.85.0.0/16
                  192.86.19.0-192.86.20.255
                  192.100.31.0-192.100.45.255
                  192.100.47.0-192.100.50.255
                  192.132.103.0/24
                  192.146.103.0/24
                  192.147.35.0/24
                  192.170.124.0/23
                  192.208.32.0-192.208.51.255
                  192.234.10.0/23
                  192.238.32.0/19
                  192.251.168.0-192.251.173.255
                  198.136.129.0/24
                  198.202.132.0/22
                  198.212.181.0/24
                  199.10.65.0/24
                  199.20.0.0/21
                  199.42.0.0/16
                  199.201.219.0/24
                  199.228.0.0/16
                  204.26.128.0-204.26.254.255
                  204.103.0.0-204.105.255.255
                  204.153.108.0/22
                  204.172.0.0/15
                  204.230.0.0/16
                  205.141.192.0-205.141.231.255
                  205.191.0.0/16
                  205.239.0.0/16
                  206.120.0.0/16
                  206.122.0.0/16
                  206.164.0.0/16
                  207.37.0.0/16
                  207.169.0.0/16
                  216.240.192.0/20
                IPv6:
                  2607:f028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  86
                  206
                  277
                  1810-1815
                  4237
                  17020
                  19141
                  20060
                  21877
                  22562
                  25784
                  395002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:89:0e:86:0c:8d:44:6c:95:98:45:0b:0b:2c:20:60:e6:94:
         2d:86:95:4f:b5:b9:9f:81:5d:6b:46:a8:36:37:ce:a8:f5:af:
         5e:5b:25:6a:33:2a:6c:8a:5e:ca:f8:96:1e:cc:c5:3a:b9:1f:
         3c:eb:58:53:af:26:f4:a8:d1:84:93:74:9f:80:89:b2:71:c2:
         3c:ef:f1:19:e5:3b:dc:9c:42:15:c2:02:b4:e2:bd:6a:59:ba:
         6a:a3:60:bb:ad:75:41:12:d5:64:ca:42:53:52:39:d7:31:60:
         5c:2e:bb:c5:21:65:25:a3:a4:91:d0:53:fc:a2:91:e3:b0:24:
         69:4c:a5:fe:17:1b:98:fb:a6:6e:f6:9a:c5:44:d3:e9:3a:cd:
         61:b9:de:85:eb:c2:b7:34:0b:47:7d:e4:01:51:b4:cb:a0:34:
         d5:95:03:81:88:ba:49:d2:22:d6:2e:d3:76:4b:1a:9f:ad:b3:
         ad:23:6f:6a:01:b3:97:df:bf:22:c7:d4:19:90:de:1f:39:52:
         1a:60:61:bb:bb:43:32:5a:56:a8:73:7d:e3:66:95:08:57:ae:
         26:a1:c7:e4:a1:af:f3:0a:25:d9:72:32:11:f0:f6:fd:6e:ee:
         66:3e:f5:48:4a:49:ad:f0:bf:bb:3e:92:d5:57:a3:26:a7:d6:
         26:46:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:58 2025 by rpki-client