$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer File: ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer (raw, json) Hash identifier: QXhG1Ip4xM7RWmwzFqWct5qzFhCL33dkIr/GF73X0BE= Subject key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584ABD43EDCFC88D5316ADADB780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 00:45:24 +0000 Certificate not after: Sun 07 Nov 2027 00:45:24 +0000 Subordinate resources: AS: 36511 IP: 137.83.76.0/24 IP: 137.83.102.0/24 IP: 142.202.112.0/22 IP: 192.149.44.0/22 IP: 208.103.148.0/23 IP: 209.35.0.0/22 IP: 216.230.17.0/24 IP: 216.230.19.0/24 IP: 2606:2480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:43:ed:cf:c8:8d:53:16:ad:ad:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 4 00:45:24 2025 GMT Not After : Nov 7 00:45:24 2027 GMT Subject: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:df:9a:a5:83:ba:b6:34:38:fc:df:d1:bc: a6:98:76:9c:66:37:2a:48:85:fd:9f:ef:f0:9c:c7: 55:f0:06:9b:6f:f8:2c:e8:3f:01:7d:2d:25:06:53: e0:50:dc:c8:48:09:67:a8:04:ff:94:36:a5:6f:2d: dc:c6:2f:a3:5d:08:1d:ec:38:97:b3:3f:71:7f:5f: 69:77:2a:0f:f2:ac:0e:5e:9d:49:e5:03:c3:72:6b: dc:91:4e:39:a4:7e:87:54:aa:a2:77:32:f8:59:84: 6e:8c:b8:83:42:3c:d6:d4:ed:17:86:72:71:2c:6e: 0a:95:ba:59:e6:6c:f9:7d:b4:07:1b:51:ea:74:80: 01:da:89:1a:2c:12:2f:54:ae:a2:14:e1:b5:21:ca: 77:fc:d4:48:60:cc:08:6d:ca:7c:0e:9d:84:87:92: 18:4f:d9:7e:d6:5b:df:2a:8d:1f:da:00:2c:16:09: 61:c5:39:47:20:10:99:01:79:18:a1:b9:6a:8d:e6: a7:7f:7d:c1:04:1a:9b:3f:21:d8:28:b2:76:c8:0a: 1d:ad:85:ae:0c:a1:64:28:df:72:61:29:f6:0f:fb: 86:43:48:4f:25:58:aa:78:83:30:3f:da:49:70:8d: 6b:8e:c5:7a:1e:4e:f0:2f:27:11:85:af:a7:2d:6d: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 137.83.76.0/24 137.83.102.0/24 142.202.112.0/22 192.149.44.0/22 208.103.148.0/23 209.35.0.0/22 216.230.17.0/24 216.230.19.0/24 IPv6: 2606:2480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36511 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:21:0a:ba:0e:4e:04:c9:55:c3:aa:13:88:43:1d:58:3d:a5: 49:9a:f2:e9:ec:28:bb:ca:ce:80:7b:d3:b9:81:4e:b5:bc:45: fc:4f:3b:90:d4:89:30:2b:cb:6e:9c:96:ab:df:bc:e0:52:cd: 96:bf:60:a3:9e:45:8f:6a:f4:b4:de:31:5d:ab:f7:84:c5:b1: f7:b2:3a:69:0b:d5:90:3e:71:5e:bd:03:64:9c:d0:e4:19:9c: 5f:82:e0:3d:64:81:18:cc:67:1c:62:4a:62:7d:25:16:72:9e: 99:f8:d5:0d:63:f0:55:8a:94:41:db:8a:3f:45:13:75:59:81: f4:14:59:59:3b:11:4d:a2:b3:12:3d:d8:2f:23:ea:85:99:0b: fb:b2:ec:c4:5c:3d:7b:8a:c4:07:fb:ba:1a:b9:a9:73:f4:8f: c2:ec:fb:d3:c9:aa:f0:31:17:94:7c:73:3c:65:fd:7e:d5:c4: 5e:6a:ed:d7:37:d7:37:c2:3c:c0:90:d7:60:05:9b:72:bd:97: 52:ae:34:57:5e:24:93:c2:df:81:2f:7f:f2:ff:8b:2d:93:bd: 75:42:e5:2e:c8:63:4a:61:25:b6:74:54:53:c6:e1:d9:16:82: 70:04:16:7a:89:fa:d5:ba:a4:d4:df:11:34:6a:d6:6f:01:ca: 88:34:30:d4 -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWEq9Q+3PyI1TFq2tt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNDAwNDUyNFoXDTI3MTEwNzAwNDUyNFowLzEtMCsGA1UEAxMk YmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlePfmqWDurY0OPzf0bymmHacZjcqSIX9n+/w nMdV8Aabb/gs6D8BfS0lBlPgUNzISAlnqAT/lDalby3cxi+jXQgd7DiXsz9xf19p dyoP8qwOXp1J5QPDcmvckU45pH6HVKqidzL4WYRujLiDQjzW1O0XhnJxLG4KlbpZ 5mz5fbQHG1HqdIAB2okaLBIvVK6iFOG1Icp3/NRIYMwIbcp8Dp2Eh5IYT9l+1lvf Ko0f2gAsFglhxTlHIBCZAXkYoblqjeanf33BBBqbPyHYKLJ2yAodrYWuDKFkKN9y YSn2D/uGQ0hPJViqeIMwP9pJcI1rjsV6Hk7wLycRha+nLW2evQIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFCIoBWKBkvs0s4JS1YhIF4C7zzVIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i YTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JhMGVlZmRiLWVmMGQtNDA4Yy04 ZTM1LTMxZTVmMjlkOWNmYy9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5 ZDljZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBACJU0wDBACJU2YDBAKOynADBALAlSwDBAHQZ5QD BALRIwADBADY5hEDBADY5hMwDQQCAAIwBwMFACYGJIAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAI6fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC4hCroOTgTJVcOqE4hDHVg9pUma8unsKLvK zoB707mBTrW8RfxPO5DUiTAry26clqvfvOBSzZa/YKOeRY9q9LTeMV2r94TFsfey OmkL1ZA+cV69A2Sc0OQZnF+C4D1kgRjMZxxiSmJ9JRZynpn41Q1j8FWKlEHbij9F E3VZgfQUWVk7EU2isxI92C8j6oWZC/uy7MRcPXuKxAf7uhq5qXP0j8Ls+9PJqvAx F5R8czxl/X7VxF5q7dc31zfCPMCQ12AFm3K9l1KuNFdeJJPC34Evf/L/iy2TvXVC 5S7IY0phJbZ0VFPG4dkWgnAEFnqJ+tW6pNTfETRq1m8Byog0MNQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:31 2025 by rpki-client