$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer File: ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer (raw, json) Hash identifier: ly7cXO+Ww6cBVkJtZFReXlD6ly5zs4elVOQxPiO4P4Q= Subject key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC2F99B0B352B90D8F1FE1FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Nov 2026 13:45:11 +0000 Certificate not after: Fri 09 Feb 2029 13:45:11 +0000 Subordinate resources: AS: 36511 IP: 137.83.76.0/24 IP: 137.83.102.0/24 IP: 142.202.112.0/22 IP: 192.149.44.0/22 IP: 208.103.148.0/23 IP: 209.35.0.0/22 IP: 216.230.17.0/24 IP: 216.230.19.0/24 IP: 2606:2480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c2:f9:9b:0b:35:2b:90:d8:f1:fe:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 7 13:45:11 2026 GMT Not After : Feb 9 13:45:11 2029 GMT Subject: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:df:9a:a5:83:ba:b6:34:38:fc:df:d1:bc: a6:98:76:9c:66:37:2a:48:85:fd:9f:ef:f0:9c:c7: 55:f0:06:9b:6f:f8:2c:e8:3f:01:7d:2d:25:06:53: e0:50:dc:c8:48:09:67:a8:04:ff:94:36:a5:6f:2d: dc:c6:2f:a3:5d:08:1d:ec:38:97:b3:3f:71:7f:5f: 69:77:2a:0f:f2:ac:0e:5e:9d:49:e5:03:c3:72:6b: dc:91:4e:39:a4:7e:87:54:aa:a2:77:32:f8:59:84: 6e:8c:b8:83:42:3c:d6:d4:ed:17:86:72:71:2c:6e: 0a:95:ba:59:e6:6c:f9:7d:b4:07:1b:51:ea:74:80: 01:da:89:1a:2c:12:2f:54:ae:a2:14:e1:b5:21:ca: 77:fc:d4:48:60:cc:08:6d:ca:7c:0e:9d:84:87:92: 18:4f:d9:7e:d6:5b:df:2a:8d:1f:da:00:2c:16:09: 61:c5:39:47:20:10:99:01:79:18:a1:b9:6a:8d:e6: a7:7f:7d:c1:04:1a:9b:3f:21:d8:28:b2:76:c8:0a: 1d:ad:85:ae:0c:a1:64:28:df:72:61:29:f6:0f:fb: 86:43:48:4f:25:58:aa:78:83:30:3f:da:49:70:8d: 6b:8e:c5:7a:1e:4e:f0:2f:27:11:85:af:a7:2d:6d: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 137.83.76.0/24 137.83.102.0/24 142.202.112.0/22 192.149.44.0/22 208.103.148.0/23 209.35.0.0/22 216.230.17.0/24 216.230.19.0/24 IPv6: 2606:2480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36511 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:42:97:bb:8c:f6:3f:69:c8:8f:54:4d:88:6d:c8:c2:49:08: dd:d6:28:a0:15:54:a4:f2:0c:e4:a6:cd:de:fd:06:80:fc:98: 7f:72:c9:17:21:11:39:f3:2d:9e:af:48:f8:5e:f4:ad:19:23: 28:04:83:bd:19:55:bb:3e:9a:25:e2:a6:60:27:28:bd:f9:c4: dd:b4:a9:17:96:4f:66:e5:5b:87:f0:2f:bf:fd:3f:c0:51:7e: 32:e2:54:bf:d9:76:36:09:d6:4b:ce:5d:22:60:6e:4d:e2:d0: 02:ad:9b:d4:8c:82:59:45:30:67:c1:ce:0e:f5:83:39:6d:98: 60:46:ea:c7:8a:e7:a7:89:21:00:0c:39:83:43:9a:e4:8e:62: 34:7a:62:7b:9c:0a:5c:26:18:7c:03:52:10:77:df:f1:6e:af: 0d:dc:f9:21:35:ac:8c:ca:70:b1:d7:7f:90:50:33:33:4f:fc: 47:5d:ad:20:7e:a4:6e:0e:62:06:47:04:98:65:f0:c3:39:01: ca:6b:27:48:e9:c7:7e:4a:08:a6:94:65:f5:f3:ce:01:8d:7b: fb:c3:7b:36:6c:1b:ee:41:20:49:ce:16:57:22:61:4a:b2:98: 76:60:75:f0:f7:d4:33:a2:d0:8a:91:f8:9a:88:05:7f:5b:52: c9:4a:40:03 -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWE/C+ZsLNSuQ2PH+H6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwNzEzNDUxMVoXDTI5MDIwOTEzNDUxMVowLzEtMCsGA1UEAxMk YmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlePfmqWDurY0OPzf0bymmHacZjcqSIX9n+/w nMdV8Aabb/gs6D8BfS0lBlPgUNzISAlnqAT/lDalby3cxi+jXQgd7DiXsz9xf19p dyoP8qwOXp1J5QPDcmvckU45pH6HVKqidzL4WYRujLiDQjzW1O0XhnJxLG4KlbpZ 5mz5fbQHG1HqdIAB2okaLBIvVK6iFOG1Icp3/NRIYMwIbcp8Dp2Eh5IYT9l+1lvf Ko0f2gAsFglhxTlHIBCZAXkYoblqjeanf33BBBqbPyHYKLJ2yAodrYWuDKFkKN9y YSn2D/uGQ0hPJViqeIMwP9pJcI1rjsV6Hk7wLycRha+nLW2evQIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFCIoBWKBkvs0s4JS1YhIF4C7zzVIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i YTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JhMGVlZmRiLWVmMGQtNDA4Yy04 ZTM1LTMxZTVmMjlkOWNmYy9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5 ZDljZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBACJU0wDBACJU2YDBAKOynADBALAlSwDBAHQZ5QD BALRIwADBADY5hEDBADY5hMwDQQCAAIwBwMFACYGJIAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAI6fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAD1Cl7uM9j9pyI9UTYhtyMJJCN3WKKAVVKTy DOSmzd79BoD8mH9yyRchETnzLZ6vSPhe9K0ZIygEg70ZVbs+miXipmAnKL35xN20 qReWT2blW4fwL7/9P8BRfjLiVL/ZdjYJ1kvOXSJgbk3i0AKtm9SMgllFMGfBzg71 gzltmGBG6seK56eJIQAMOYNDmuSOYjR6YnucClwmGHwDUhB33/Furw3c+SE1rIzK cLHXf5BQMzNP/EddrSB+pG4OYgZHBJhl8MM5AcprJ0jpx35KCKaUZfXzzgGNe/vD ezZsG+5BIEnOFlciYUqymHZgdfD31DOi0IqR+JqIBX9bUslKQAM= -----END CERTIFICATE-----Generated at Sun Nov 15 13:09:49 2026 by rpki-client