Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
File:                     767ef686-79af-43b0-9354-86aa78f8c407.cer (raw, json)
Hash identifier:          Fyhp/u0qmC2oSLhJonor9kdfzFe6xLuOf+Q33bk9P+k=
Subject key identifier:   9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584A5E08482E0F4E6AAD357D0480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Jun 2025 22:03:26 +0000
Certificate not after:    Mon 13 Sep 2027 00:45:36 +0000
Subordinate resources:    AS: 86
                          AS: 206
                          AS: 277
                          AS: 1810 -- 1815
                          AS: 4237
                          AS: 17020
                          AS: 19141
                          AS: 20060
                          AS: 21877
                          AS: 22562
                          AS: 25784
                          AS: 395002
                          IP: 15.176.0.0/16
                          IP: 15.211.0.0/16
                          IP: 15.218.0.0/16
                          IP: 15.226.0.0/16
                          IP: 15.243.0.0/16
                          IP: 66.54.0.0/18
                          IP: 130.174.0.0/16
                          IP: 130.177.0.0/16
                          IP: 138.35.0.0/16
                          IP: 146.123.0.0/16
                          IP: 155.61.0.0/16
                          IP: 159.249.0.0/16
                          IP: 168.87.0.0/16
                          IP: 170.30.0.0/16
                          IP: 192.34.72.0/24
                          IP: 192.40.25.0/24
                          IP: 192.40.61.0/24
                          IP: 192.40.156.0/24
                          IP: 192.40.245.0/24
                          IP: 192.40.248.0/24
                          IP: 192.56.27.0/24
                          IP: 192.57.0.0/16
                          IP: 192.67.136.0/24
                          IP: 192.67.144.0/24
                          IP: 192.67.152.0/24
                          IP: 192.85.0.0/16
                          IP: 192.86.19.0 -- 192.86.20.255
                          IP: 192.100.31.0 -- 192.100.45.255
                          IP: 192.100.47.0 -- 192.100.50.255
                          IP: 192.132.103.0/24
                          IP: 192.146.103.0/24
                          IP: 192.147.35.0/24
                          IP: 192.170.124.0/23
                          IP: 192.208.32.0 -- 192.208.51.255
                          IP: 192.234.10.0/23
                          IP: 192.238.32.0/19
                          IP: 192.251.168.0 -- 192.251.173.255
                          IP: 198.136.129.0/24
                          IP: 198.202.132.0/22
                          IP: 198.212.181.0/24
                          IP: 199.10.65.0/24
                          IP: 199.20.0.0/21
                          IP: 199.42.0.0/16
                          IP: 199.201.219.0/24
                          IP: 199.228.0.0/16
                          IP: 204.26.128.0 -- 204.26.254.255
                          IP: 204.103.0.0 -- 204.105.255.255
                          IP: 204.153.108.0/22
                          IP: 204.172.0.0/15
                          IP: 204.230.0.0/16
                          IP: 205.141.192.0 -- 205.141.231.255
                          IP: 205.191.0.0/16
                          IP: 205.239.0.0/16
                          IP: 206.120.0.0/16
                          IP: 206.122.0.0/16
                          IP: 206.164.0.0/16
                          IP: 207.37.0.0/16
                          IP: 207.169.0.0/16
                          IP: 216.240.192.0/20
                          IP: 2607:f028::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:08:48:2e:0f:4e:6a:ad:35:7d:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 30 22:03:26 2025 GMT
            Not After : Sep 13 00:45:36 2027 GMT
        Subject: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:30:2c:70:ab:5a:fc:de:12:b9:dc:53:a3:
                    90:fe:22:98:e7:8d:c8:4b:38:99:23:30:e2:9f:97:
                    54:4f:b4:69:26:d0:30:16:83:6b:37:32:42:0d:5e:
                    f9:2c:65:b6:cf:1c:96:d2:49:89:07:ef:5d:8c:51:
                    5d:8a:68:2f:80:01:2f:9d:c9:bd:9a:1b:3d:b4:a5:
                    82:02:0e:8e:31:52:5a:9c:6e:2d:0a:28:61:c2:0b:
                    de:69:b6:7c:ad:ff:67:92:91:32:6c:80:80:fa:51:
                    24:58:e3:77:5e:fe:5d:66:05:a2:9b:6e:f3:4b:8c:
                    40:ea:16:71:69:cb:cc:7e:fb:4e:b0:a1:50:75:c7:
                    ba:a1:b1:b6:54:1e:79:b5:f1:71:35:89:b2:d5:4f:
                    de:ae:9f:2d:d6:a0:01:b2:c1:be:ff:55:3e:1b:9b:
                    7d:77:70:46:6f:8f:83:b0:fe:d4:3e:fe:1a:5c:52:
                    4b:47:87:b2:6b:1b:ec:f7:20:e5:b7:b2:97:0a:fb:
                    5b:1b:5f:90:a8:e7:ae:8e:5f:2b:f4:92:8a:4c:89:
                    13:8b:5a:c9:33:4f:47:59:bc:1a:7a:3b:88:2f:64:
                    85:a0:75:48:75:c3:6c:3f:c5:f4:23:b2:57:d6:0c:
                    01:cc:e6:a4:24:2f:b5:bb:92:48:8e:33:a4:37:39:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.0.0/16
                  15.211.0.0/16
                  15.218.0.0/16
                  15.226.0.0/16
                  15.243.0.0/16
                  66.54.0.0/18
                  130.174.0.0/16
                  130.177.0.0/16
                  138.35.0.0/16
                  146.123.0.0/16
                  155.61.0.0/16
                  159.249.0.0/16
                  168.87.0.0/16
                  170.30.0.0/16
                  192.34.72.0/24
                  192.40.25.0/24
                  192.40.61.0/24
                  192.40.156.0/24
                  192.40.245.0/24
                  192.40.248.0/24
                  192.56.27.0/24
                  192.57.0.0/16
                  192.67.136.0/24
                  192.67.144.0/24
                  192.67.152.0/24
                  192.85.0.0/16
                  192.86.19.0-192.86.20.255
                  192.100.31.0-192.100.45.255
                  192.100.47.0-192.100.50.255
                  192.132.103.0/24
                  192.146.103.0/24
                  192.147.35.0/24
                  192.170.124.0/23
                  192.208.32.0-192.208.51.255
                  192.234.10.0/23
                  192.238.32.0/19
                  192.251.168.0-192.251.173.255
                  198.136.129.0/24
                  198.202.132.0/22
                  198.212.181.0/24
                  199.10.65.0/24
                  199.20.0.0/21
                  199.42.0.0/16
                  199.201.219.0/24
                  199.228.0.0/16
                  204.26.128.0-204.26.254.255
                  204.103.0.0-204.105.255.255
                  204.153.108.0/22
                  204.172.0.0/15
                  204.230.0.0/16
                  205.141.192.0-205.141.231.255
                  205.191.0.0/16
                  205.239.0.0/16
                  206.120.0.0/16
                  206.122.0.0/16
                  206.164.0.0/16
                  207.37.0.0/16
                  207.169.0.0/16
                  216.240.192.0/20
                IPv6:
                  2607:f028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  86
                  206
                  277
                  1810-1815
                  4237
                  17020
                  19141
                  20060
                  21877
                  22562
                  25784
                  395002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ed:33:bb:e6:0b:41:d1:0d:54:b3:c2:50:e4:89:b9:af:7a:
         fb:8c:36:a5:75:cc:b4:c9:1c:2f:16:f0:c8:f4:a4:42:ba:ad:
         dd:d6:67:d3:68:50:51:00:31:80:03:b6:d2:4b:82:38:0d:43:
         09:12:08:3d:23:bf:6e:49:12:5e:f2:27:a8:2c:7e:02:54:e6:
         33:fb:46:ff:76:d3:26:36:e3:41:14:2d:d5:5c:8d:c5:c6:47:
         87:e3:bc:b6:1a:b4:c0:03:f8:07:e2:df:97:62:e4:51:f9:5d:
         fc:36:af:9b:59:1d:46:24:95:5f:2c:9d:35:c6:7a:c3:9a:01:
         43:24:db:82:46:56:f6:2f:57:c0:ce:85:70:c9:1a:1a:9b:96:
         3b:95:30:e5:62:96:72:84:d0:96:49:40:85:c3:df:cd:a5:77:
         3c:1a:f4:54:ba:76:d8:07:f2:31:69:30:77:a1:8e:df:9d:e0:
         07:25:e6:1d:6f:b9:4b:8b:06:26:99:1b:86:21:34:e9:dd:1f:
         58:c1:3f:56:55:61:27:3a:0f:ca:1d:7f:dc:ba:f9:8c:58:70:
         95:ff:2c:cf:fa:ee:0d:4a:34:75:81:90:8b:74:53:57:4f:e3:
         6f:64:e8:cc:47:90:1d:d9:bd:29:40:92:bf:40:91:db:ca:75:
         64:95:e0:eb
-----BEGIN CERTIFICATE-----
MIII0zCCB7ugAwIBAgIUAQ0Mn0MoWEpeCEguD05qrTV9BIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI1MDYzMDIyMDMyNloXDTI3MDkxMzAwNDUzNlowLzEtMCsGA1UEAxMk
NzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4ZjhjNDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYEwLHCrWvzeErncU6OQ/iKY543ISziZIzDi
n5dUT7RpJtAwFoNrNzJCDV75LGW2zxyW0kmJB+9djFFdimgvgAEvncm9mhs9tKWC
Ag6OMVJanG4tCihhwgveabZ8rf9nkpEybICA+lEkWON3Xv5dZgWim27zS4xA6hZx
acvMfvtOsKFQdce6obG2VB55tfFxNYmy1U/erp8t1qABssG+/1U+G5t9d3BGb4+D
sP7UPv4aXFJLR4eyaxvs9yDlt7KXCvtbG1+QqOeujl8r9JKKTIkTi1rJM09HWbwa
ejuIL2SFoHVIdcNsP8X0I7JX1gwBzOakJC+1u5JIjjOkNzlXmwIDAQABo4IF5TCC
BeEwHQYDVR0OBBYEFJ+3BbQ6tiwEkEjeyTrSruzD9Xl4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83
NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzc2N2VmNjg2LTc5YWYtNDNiMC05
MzU0LTg2YWE3OGY4YzQwNy83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhm
OGM0MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwggG2BggrBgEF
BQcBBwEB/wSCAaUwggGhMIIBjgQCAAEwggGGAwMAD7ADAwAP0wMDAA/aAwMAD+ID
AwAP8wMEBkI2AAMDAIKuAwMAgrEDAwCKIwMDAJJ7AwMAmz0DAwCf+QMDAKhXAwMA
qh4DBADAIkgDBADAKBkDBADAKD0DBADAKJwDBADAKPUDBADAKPgDBADAOBsDAwDA
OQMEAMBDiAMEAMBDkAMEAMBDmAMDAMBVMAwDBADAVhMDBADAVhQwDAMEAMBkHwME
AcBkLDAMAwQAwGQvAwQAwGQyAwQAwIRnAwQAwJJnAwQAwJMjAwQBwKp8MAwDBAXA
0CADBALA0DADBAHA6goDBAXA7iAwDAMEA8D7qAMEAcD7rAMEAMaIgQMEAsbKhAME
AMbUtQMEAMcKQQMEA8cUAAMDAMcqAwQAx8nbAwMAx+QwDAMEB8wagAMEAMwa/jAK
AwMAzGcDAwHMaAMEAsyZbAMDAcysAwMAzOYwDAMEBs2NwAMEA82N4AMDAM2/AwMA
ze8DAwDOeAMDAM56AwMAzqQDAwDPJQMDAM+pAwQE2PDAMA0EAgACMAcDBQAmB/Ao
MEsGCCsGAQUFBwEIAQH/BDwwOqA4MDYCAVYCAgDOAgIBFTAIAgIHEgICBxcCAhCN
AgJCfAICSsUCAk5cAgJVdQICWCICAmS4AgMGBvowVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACu0zu+YLQdEN
VLPCUOSJua96+4w2pXXMtMkcLxbwyPSkQrqt3dZn02hQUQAxgAO20kuCOA1DCRII
PSO/bkkSXvInqCx+AlTmM/tG/3bTJjbjQRQt1VyNxcZHh+O8thq0wAP4B+Lfl2Lk
Ufld/Davm1kdRiSVXyydNcZ6w5oBQyTbgkZW9i9XwM6FcMkaGpuWO5Uw5WKWcoTQ
lklAhcPfzaV3PBr0VLp22AfyMWkwd6GO353gByXmHW+5S4sGJpkbhiE06d0fWME/
VlVhJzoPyh1/3Lr5jFhwlf8sz/ruDUo0dYGQi3RTV0/jb2TozEeQHdm9KUCSv0CR
28p1ZJXg6w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:49:40 2025 by rpki-client