Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
File:                     767ef686-79af-43b0-9354-86aa78f8c407.cer (raw, json)
Hash identifier:          xAGh9BbpHxEIlorrz5dMMCGcL6E950rmiC23sE89NL8=
Subject key identifier:   9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858451FA363520DA6F7E211FEC000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Mar 2024 01:45:20 +0000
Certificate not after:    Wed 10 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 86
                          AS: 206
                          AS: 277
                          AS: 1810 -- 1815
                          AS: 4237
                          AS: 17020
                          AS: 19141
                          AS: 20060
                          AS: 21877
                          AS: 22562
                          AS: 25784
                          AS: 395002
                          IP: 15.176.0.0/16
                          IP: 15.195.0.0/16
                          IP: 15.208.0.0/16
                          IP: 15.211.0.0/16
                          IP: 15.218.0.0/16
                          IP: 15.226.0.0/16
                          IP: 15.243.0.0/16
                          IP: 66.54.0.0/18
                          IP: 130.174.0.0/16
                          IP: 130.177.0.0/16
                          IP: 138.35.0.0/16
                          IP: 146.123.0.0/16
                          IP: 155.61.0.0/16
                          IP: 159.249.0.0/16
                          IP: 168.87.0.0/16
                          IP: 170.30.0.0/16
                          IP: 192.34.72.0/24
                          IP: 192.40.61.0/24
                          IP: 192.40.156.0/24
                          IP: 192.40.245.0/24
                          IP: 192.40.248.0/24
                          IP: 192.57.0.0/16
                          IP: 192.85.0.0/16
                          IP: 192.86.19.0 -- 192.86.20.255
                          IP: 192.100.31.0 -- 192.100.45.255
                          IP: 192.100.47.0 -- 192.100.50.255
                          IP: 192.132.103.0/24
                          IP: 192.146.103.0/24
                          IP: 192.147.35.0/24
                          IP: 192.208.32.0 -- 192.208.51.255
                          IP: 192.234.10.0/23
                          IP: 192.238.32.0/19
                          IP: 192.251.168.0 -- 192.251.173.255
                          IP: 198.136.129.0/24
                          IP: 198.202.132.0/22
                          IP: 198.212.181.0/24
                          IP: 199.10.65.0/24
                          IP: 199.20.0.0/21
                          IP: 199.42.0.0/16
                          IP: 199.201.219.0/24
                          IP: 199.228.0.0/16
                          IP: 204.26.128.0 -- 204.26.254.255
                          IP: 204.103.0.0 -- 204.105.255.255
                          IP: 204.153.108.0/22
                          IP: 204.172.0.0/15
                          IP: 204.230.0.0/16
                          IP: 205.141.192.0 -- 205.141.231.255
                          IP: 205.191.0.0/16
                          IP: 205.239.0.0/16
                          IP: 206.120.0.0/16
                          IP: 206.122.0.0/16
                          IP: 206.164.0.0/16
                          IP: 207.37.0.0/16
                          IP: 207.169.0.0/16
                          IP: 216.240.192.0/20
                          IP: 2607:f028::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:a3:63:52:0d:a6:f7:e2:11:fe:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Mar  7 01:45:20 2024 GMT
            Not After : Jun 10 00:45:20 2026 GMT
        Subject: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:30:2c:70:ab:5a:fc:de:12:b9:dc:53:a3:
                    90:fe:22:98:e7:8d:c8:4b:38:99:23:30:e2:9f:97:
                    54:4f:b4:69:26:d0:30:16:83:6b:37:32:42:0d:5e:
                    f9:2c:65:b6:cf:1c:96:d2:49:89:07:ef:5d:8c:51:
                    5d:8a:68:2f:80:01:2f:9d:c9:bd:9a:1b:3d:b4:a5:
                    82:02:0e:8e:31:52:5a:9c:6e:2d:0a:28:61:c2:0b:
                    de:69:b6:7c:ad:ff:67:92:91:32:6c:80:80:fa:51:
                    24:58:e3:77:5e:fe:5d:66:05:a2:9b:6e:f3:4b:8c:
                    40:ea:16:71:69:cb:cc:7e:fb:4e:b0:a1:50:75:c7:
                    ba:a1:b1:b6:54:1e:79:b5:f1:71:35:89:b2:d5:4f:
                    de:ae:9f:2d:d6:a0:01:b2:c1:be:ff:55:3e:1b:9b:
                    7d:77:70:46:6f:8f:83:b0:fe:d4:3e:fe:1a:5c:52:
                    4b:47:87:b2:6b:1b:ec:f7:20:e5:b7:b2:97:0a:fb:
                    5b:1b:5f:90:a8:e7:ae:8e:5f:2b:f4:92:8a:4c:89:
                    13:8b:5a:c9:33:4f:47:59:bc:1a:7a:3b:88:2f:64:
                    85:a0:75:48:75:c3:6c:3f:c5:f4:23:b2:57:d6:0c:
                    01:cc:e6:a4:24:2f:b5:bb:92:48:8e:33:a4:37:39:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.0.0/16
                  15.195.0.0/16
                  15.208.0.0/16
                  15.211.0.0/16
                  15.218.0.0/16
                  15.226.0.0/16
                  15.243.0.0/16
                  66.54.0.0/18
                  130.174.0.0/16
                  130.177.0.0/16
                  138.35.0.0/16
                  146.123.0.0/16
                  155.61.0.0/16
                  159.249.0.0/16
                  168.87.0.0/16
                  170.30.0.0/16
                  192.34.72.0/24
                  192.40.61.0/24
                  192.40.156.0/24
                  192.40.245.0/24
                  192.40.248.0/24
                  192.57.0.0/16
                  192.85.0.0/16
                  192.86.19.0-192.86.20.255
                  192.100.31.0-192.100.45.255
                  192.100.47.0-192.100.50.255
                  192.132.103.0/24
                  192.146.103.0/24
                  192.147.35.0/24
                  192.208.32.0-192.208.51.255
                  192.234.10.0/23
                  192.238.32.0/19
                  192.251.168.0-192.251.173.255
                  198.136.129.0/24
                  198.202.132.0/22
                  198.212.181.0/24
                  199.10.65.0/24
                  199.20.0.0/21
                  199.42.0.0/16
                  199.201.219.0/24
                  199.228.0.0/16
                  204.26.128.0-204.26.254.255
                  204.103.0.0-204.105.255.255
                  204.153.108.0/22
                  204.172.0.0/15
                  204.230.0.0/16
                  205.141.192.0-205.141.231.255
                  205.191.0.0/16
                  205.239.0.0/16
                  206.120.0.0/16
                  206.122.0.0/16
                  206.164.0.0/16
                  207.37.0.0/16
                  207.169.0.0/16
                  216.240.192.0/20
                IPv6:
                  2607:f028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  86
                  206
                  277
                  1810-1815
                  4237
                  17020
                  19141
                  20060
                  21877
                  22562
                  25784
                  395002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:13:da:65:36:d7:a6:76:9b:b1:16:d2:02:42:c6:31:e6:84:
         42:4e:08:8a:44:bc:60:2f:0e:f0:cf:42:36:27:6f:fc:c9:8b:
         bd:d4:36:d8:cb:48:bf:10:07:5d:b0:ea:7b:9e:9f:4a:d8:e1:
         4a:b0:b5:a9:a1:36:30:d2:07:2b:65:88:6d:27:6e:bb:c8:46:
         52:de:54:0e:1a:ad:e6:f9:5b:37:04:bf:39:33:ef:9b:23:b5:
         d1:90:16:d8:16:eb:64:46:0c:74:4a:3c:80:28:f1:ff:5d:44:
         05:f4:65:ca:79:93:2b:37:83:a7:52:5a:9a:1f:65:38:82:3c:
         0c:38:7b:3d:31:e8:b1:1e:fb:8f:cf:5f:fc:fb:8e:33:4e:05:
         b7:2c:9e:ab:00:c8:01:46:d6:ab:72:92:c5:94:4c:a5:c9:26:
         95:cf:c5:41:6d:9e:35:07:d3:a8:67:66:cd:27:61:3e:7f:60:
         07:05:5a:98:44:52:5f:ef:c2:98:01:64:8b:b6:6c:ba:a5:c7:
         c5:9b:3f:92:1b:69:dc:49:5d:8a:e2:b7:70:c8:9b:37:f4:b0:
         a6:2f:01:ce:1a:74:ee:4f:09:ab:84:4c:39:84:2f:cc:42:05:
         f7:12:7c:bc:43:a1:72:6f:16:02:78:55:7d:18:5b:52:97:14:
         43:54:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:19 2024 by rpki-client on console-fra.rpki-client.org