$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer File: bacde40d-2f28-483a-8cfd-628d470b87a7.cer (raw, json) Hash identifier: L5Wp7HkYiEvDqrHAZz7xt+TeuSyqP3wgvl3unIL5hOQ= Subject key identifier: 1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC2F99B2E7A1686D51C3B1F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Nov 2026 13:45:11 +0000 Certificate not after: Fri 09 Feb 2029 13:45:11 +0000 Subordinate resources: AS: 398863 IP: 64.112.188.0/23 IP: 204.8.177.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c2:f9:9b:2e:7a:16:86:d5:1c:3b:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 7 13:45:11 2026 GMT Not After : Feb 9 13:45:11 2029 GMT Subject: CN=bacde40d-2f28-483a-8cfd-628d470b87a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:f2:25:19:40:4d:65:1e:d4:61:92:74:2f: fa:3e:81:7c:ad:65:d7:b3:3d:19:db:39:14:3b:90: 21:2e:6d:71:96:1d:15:e5:32:85:b2:18:6d:e0:26: 80:16:18:47:7e:e7:65:3d:dc:7e:ac:bb:72:ff:f2: 50:1c:c9:25:68:32:f7:d3:74:75:d4:93:f7:50:01: b7:7d:85:45:a5:89:9a:18:ac:1e:d9:85:db:d3:c0: 3a:8c:9a:ce:10:a6:a9:f8:00:32:68:70:ff:45:37: 24:32:58:ef:73:63:c5:24:4a:3e:74:75:ef:1f:75: 77:f8:af:2e:87:cd:e5:89:b3:ea:8c:35:a2:15:5f: 16:db:75:f8:fc:d2:69:95:40:c3:04:8f:f1:0c:7e: d1:95:aa:f3:c5:b0:80:93:95:28:41:93:cf:21:74: 54:41:80:e4:dd:ef:75:8d:c0:c3:8c:2c:09:bd:f8: 14:4d:cc:5e:54:d3:91:d2:d1:ed:a0:07:27:56:91: 85:42:0b:b9:35:38:49:02:e2:30:7b:62:2a:4b:ef: 6b:aa:63:00:22:1f:69:5c:79:ca:32:73:61:bc:0b: 74:6a:0e:18:1d:bf:aa:74:61:85:68:70:c1:6b:c9: a2:1e:81:ee:18:06:56:24:13:f8:32:6b:f0:a3:91: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.112.188.0/23 204.8.177.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398863 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:07:db:bd:f0:00:1f:49:75:a2:2e:5c:71:c2:30:45:f4:b6: ac:46:5f:ee:02:fe:5d:ee:31:6f:92:97:0d:98:01:9a:d6:12: c4:2b:0a:f8:c0:e9:81:22:09:3d:8a:17:f6:1f:0a:d1:4c:ee: 1b:0f:cb:9e:77:a5:e1:f6:ee:51:40:2e:bc:f4:27:79:48:56: b4:a3:8f:0a:a6:44:cb:58:89:75:0b:08:d1:de:b9:d4:3b:0e: 32:56:6c:b4:f3:00:9a:31:e1:c4:00:ec:20:4a:ce:26:40:6d: 0f:af:62:20:91:c3:dd:68:e9:e8:2a:53:4f:6d:a1:b5:b1:69: 5c:54:84:a7:86:ec:9b:2f:10:28:11:2f:f5:9d:36:33:30:4a: 41:82:b4:1b:b0:ee:37:a0:ba:f7:24:4d:c9:2f:66:3f:70:18: f5:81:9d:eb:41:e5:a9:f7:f0:3a:50:6c:3c:70:68:36:3d:31: 05:42:8d:d3:23:b6:bf:67:3d:4f:65:61:7f:94:a9:c2:26:c9: 99:0e:5d:ec:ad:c2:ea:2c:05:74:6e:d7:6a:d2:b6:c4:12:ad: ca:45:91:7e:69:d3:1f:aa:39:b8:27:61:b1:36:e6:49:4a:60: d8:ad:74:01:9a:cf:1f:35:7d:c8:9b:f9:ba:04:a3:0d:64:cd: 83:96:c0:bf -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE/C+ZsuehaG1Rw7H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwNzEzNDUxMVoXDTI5MDIwOTEzNDUxMVowLzEtMCsGA1UEAxMk YmFjZGU0MGQtMmYyOC00ODNhLThjZmQtNjI4ZDQ3MGI4N2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3zyJRlATWUe1GGSdC/6PoF8rWXXsz0Z2zkU O5AhLm1xlh0V5TKFshht4CaAFhhHfudlPdx+rLty//JQHMklaDL303R11JP3UAG3 fYVFpYmaGKwe2YXb08A6jJrOEKap+AAyaHD/RTckMljvc2PFJEo+dHXvH3V3+K8u h83libPqjDWiFV8W23X4/NJplUDDBI/xDH7RlarzxbCAk5UoQZPPIXRUQYDk3e91 jcDDjCwJvfgUTcxeVNOR0tHtoAcnVpGFQgu5NThJAuIwe2IqS+9rqmMAIh9pXHnK MnNhvAt0ag4YHb+qdGGFaHDBa8miHoHuGAZWJBP4Mmvwo5FnbQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBzfnZBYBl3LXHQCqDAFQ3/5BsUmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i YWNkZTQwZC0yZjI4LTQ4M2EtOGNmZC02MjhkNDcwYjg3YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JhY2RlNDBkLTJmMjgtNDgzYS04 Y2ZkLTYyOGQ0NzBiODdhNy9iYWNkZTQwZC0yZjI4LTQ4M2EtOGNmZC02MjhkNDcw Yjg3YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAFAcLwDBADMCLEwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABYH273wAB9JdaIuXHHCMEX0tqxGX+4C/l3uMW+S lw2YAZrWEsQrCvjA6YEiCT2KF/YfCtFM7hsPy553peH27lFALrz0J3lIVrSjjwqm RMtYiXULCNHeudQ7DjJWbLTzAJox4cQA7CBKziZAbQ+vYiCRw91o6egqU09tobWx aVxUhKeG7JsvECgRL/WdNjMwSkGCtBuw7jeguvckTckvZj9wGPWBnetB5an38DpQ bDxwaDY9MQVCjdMjtr9nPU9lYX+UqcImyZkOXeytwuosBXRu12rStsQSrcpFkX5p 0x+qObgnYbE25klKYNitdAGazx81fcib+boEow1kzYOWwL8= -----END CERTIFICATE-----Generated at Sun Nov 15 13:10:57 2026 by rpki-client