Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File:                     baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier:          F+YPEMVwufSDCmYDZaTAs+/Mjakz0umjlmspIzrusiE=
Subject key identifier:   50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584F20DFCEEA173A4933312755E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Sep 2026 12:12:16 +0000
Certificate not after:    Sat 09 Oct 2027 00:45:36 +0000
Subordinate resources:    AS: 11539
                          AS: 11858
                          AS: 16751
                          AS: 18442
                          AS: 19139
                          AS: 19554
                          AS: 21563
                          AS: 22591
                          AS: 26547
                          AS: 26575
                          AS: 26704
                          AS: 27495
                          AS: 27570
                          AS: 30446
                          AS: 31917
                          AS: 32216
                          AS: 32263
                          AS: 33459
                          AS: 33737
                          AS: 35888
                          AS: 46371
                          AS: 46675
                          AS: 46858
                          AS: 395509
                          AS: 395791
                          AS: 397717
                          AS: 398848
                          AS: 399973
                          IP: 64.56.208.0/24
                          IP: 66.159.106.0/23
                          IP: 67.202.160.0/20
                          IP: 74.112.144.0/21
                          IP: 137.236.0.0/16
                          IP: 142.75.0.0/16
                          IP: 150.105.0.0/16
                          IP: 162.252.12.0/22
                          IP: 173.243.48.0/20
                          IP: 192.67.53.0/24
                          IP: 192.80.54.0/24
                          IP: 192.138.191.0/24
                          IP: 199.71.120.0/24
                          IP: 199.85.101.0/24
                          IP: 199.87.216.0/22
                          IP: 199.182.176.0/21
                          IP: 199.201.226.0 -- 199.201.229.255
                          IP: 199.231.96.0/22
                          IP: 204.107.28.0/22
                          IP: 204.138.115.0/24
                          IP: 205.141.236.0/22
                          IP: 205.142.224.0/22
                          IP: 205.211.178.0/24
                          IP: 206.197.31.0/24
                          IP: 206.253.128.0/21
                          IP: 207.195.160.0/19
                          IP: 208.87.136.0/22
                          IP: 2604:8b00::/32
                          IP: 2620:0:1a40::/48
                          IP: 2620:10c:f000::/40
                          IP: 2620:134:d000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:df:ce:ea:17:3a:49:33:31:27:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 10 12:12:16 2026 GMT
            Not After : Oct  9 00:45:36 2027 GMT
        Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
                    3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
                    b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
                    bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
                    9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
                    23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
                    48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
                    5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
                    df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
                    8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
                    f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
                    77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
                    ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
                    9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
                    79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
                    bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
                    e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.208.0/24
                  66.159.106.0/23
                  67.202.160.0/20
                  74.112.144.0/21
                  137.236.0.0/16
                  142.75.0.0/16
                  150.105.0.0/16
                  162.252.12.0/22
                  173.243.48.0/20
                  192.67.53.0/24
                  192.80.54.0/24
                  192.138.191.0/24
                  199.71.120.0/24
                  199.85.101.0/24
                  199.87.216.0/22
                  199.182.176.0/21
                  199.201.226.0-199.201.229.255
                  199.231.96.0/22
                  204.107.28.0/22
                  204.138.115.0/24
                  205.141.236.0/22
                  205.142.224.0/22
                  205.211.178.0/24
                  206.197.31.0/24
                  206.253.128.0/21
                  207.195.160.0/19
                  208.87.136.0/22
                IPv6:
                  2604:8b00::/32
                  2620:0:1a40::/48
                  2620:10c:f000::/40
                  2620:134:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11539
                  11858
                  16751
                  18442
                  19139
                  19554
                  21563
                  22591
                  26547
                  26575
                  26704
                  27495
                  27570
                  30446
                  31917
                  32216
                  32263
                  33459
                  33737
                  35888
                  46371
                  46675
                  46858
                  395509
                  395791
                  397717
                  398848
                  399973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b5:41:58:28:97:aa:28:8e:dc:dc:98:af:a8:3b:73:bb:c9:
         2c:20:fb:b4:fb:53:62:6d:3b:40:05:fd:c2:1e:0c:2e:13:24:
         46:f5:2b:34:32:41:ac:6b:b1:76:bb:8e:70:bb:46:ba:62:fa:
         ed:f0:7e:34:a8:87:f2:03:77:25:93:9a:25:62:0a:a2:98:97:
         04:71:a6:50:41:98:eb:5f:3d:35:03:24:7a:74:27:cb:4b:66:
         a1:5b:b3:ab:29:bd:1f:73:8d:be:dd:dd:aa:90:8f:89:c2:6f:
         76:84:c8:4d:ba:db:e4:ff:22:e3:f4:a4:1e:29:bf:38:3d:f4:
         18:fc:56:dc:77:88:55:cd:d0:c4:57:ac:e9:2e:f2:51:c0:15:
         40:24:44:e7:82:d5:fc:b9:89:97:56:06:89:16:a6:e0:32:08:
         74:f1:a0:96:ff:14:d6:3a:06:4a:b0:e8:ea:1d:49:ea:9c:78:
         dd:19:6d:09:b1:5e:2a:1d:29:8f:0d:d1:e0:11:24:e5:c5:0e:
         6b:e3:22:71:08:1d:fb:8b:17:7c:6d:81:ec:af:f3:4f:00:e2:
         5f:6e:1d:05:ad:3c:ad:e0:f7:a7:cd:93:42:b0:7f:38:bc:df:
         07:ba:68:cd:b4:e6:5d:f6:87:7b:20:79:4e:e0:0f:f6:65:0d:
         8b:10:c2:2d
-----BEGIN CERTIFICATE-----
MIIIUDCCBzigAwIBAgIUAQ0Mn0MoWE8g387qFzpJMzEnVeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI2MDkxMDEyMTIxNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk
YmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4MGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02f0srICEvFMb1OICQE85K+sbzq/eluqQqRB
jjexUIWQG+Va5e73pPkaG1+92m8RnbYTsibQXazOrxeaZQpAWC659PsALZBt2LAj
ZozfBhCGjMJClE+18DxIPFsCXelc4nbFtgdwLmFc6PWsSLEyv05qGAWxtKXfyzke
CrjyQLxA1H5konCPQBxAO7UhLIiOHBuq4j34dW+K/I3aUvggP7Y63Ox39o0Cg616
x+LrZwIkL7vvBubqEBDD14M/MWT02x2d6b58bYggKAdL6AfabBB5/dYrEPPGljHt
K1i/Om67sjpGwLy9TmkJc+pAayLkeDktfndpb9lHAzkNzMHjxwIDAQABo4IFYjCC
BV4wHQYDVR0OBBYEFFA2TRbEtah2aHYo+t3+shTwQwDhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i
YWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JhZWJkZTM3LTI0NjEtNDQwOS05
NmUxLWE3MjBlZGJlODBhNy9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRi
ZTgwYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwge0GCCsGAQUF
BwEHAQH/BIHdMIHaMIGuBAIAATCBpwMEAEA40AMEAUKfagMEBEPKoAMEA0pwkAMD
AInsAwMAjksDAwCWaQMEAqL8DAMEBK3zMAMEAMBDNQMEAMBQNgMEAMCKvwMEAMdH
eAMEAMdVZQMEAsdX2AMEA8e2sDAMAwQBx8niAwQBx8nkAwQCx+dgAwQCzGscAwQA
zIpzAwQCzY3sAwQCzY7gAwQAzdOyAwQAzsUfAwQDzv2AAwQFz8OgAwQC0FeIMCcE
AgACMCEDBQAmBIsAAwcAJiAAABpAAwYAJiABDPADBwQmIAE00AAwgZEGCCsGAQUF
BwEIAQH/BIGBMH+gfTB7AgItEwICLlICAkFvAgJICgICSsMCAkxiAgJUOwICWD8C
AmezAgJnzwICaFACAmtnAgJrsgICdu4CAnytAgJ92AICfgcCAwCCswIDAIPJAgMA
jDACAwC1IwIDALZTAgMAtwoCAwYI9QIDBgoPAgMGEZUCAwYWAAIDBhplMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAKi1QVgol6oojtzcmK+oO3O7ySwg+7T7U2JtO0AF/cIeDC4TJEb1KzQyQaxr
sXa7jnC7Rrpi+u3wfjSoh/IDdyWTmiViCqKYlwRxplBBmOtfPTUDJHp0J8tLZqFb
s6spvR9zjb7d3aqQj4nCb3aEyE262+T/IuP0pB4pvzg99Bj8Vtx3iFXN0MRXrOku
8lHAFUAkROeC1fy5iZdWBokWpuAyCHTxoJb/FNY6Bkqw6OodSeqceN0ZbQmxXiod
KY8N0eARJOXFDmvjInEIHfuLF3xtgeyv808A4l9uHQWtPK3g96fNk0Kwfzi83we6
aM205l32h3sgeU7gD/ZlDYsQwi0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:10:44 2026 by rpki-client