$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer File: 158d5f15-a892-4134-840b-026e68357d71.cer (raw, json) Hash identifier: gRgUTP0Q/J/viQ/pU2RUTTmy6nHxBUoq5AAuPsR/Lck= Subject key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B7226F21E731AFA86F6817C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 19:48:19 +0000 Certificate not after: Wed 30 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 55116 IP: 23.151.216.0/24 IP: 131.143.31.0/24 IP: 2602:2c9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:26:f2:1e:73:1a:fa:86:f6:81:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 7 19:48:19 2025 GMT Not After : Jun 30 00:45:33 2027 GMT Subject: CN=158d5f15-a892-4134-840b-026e68357d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:fe:18:91:c4:3c:1f:d0:08:f2:97:f2:31: f0:d3:07:5b:0f:19:04:4c:26:e4:ed:e0:c1:5a:94: d7:22:82:e0:1f:eb:06:71:87:ff:96:14:e6:60:97: 59:d5:f3:77:26:e7:b3:40:d8:ce:d7:90:1e:df:23: 84:1c:84:d2:6e:0f:ee:71:61:58:6f:21:57:49:d3: a4:b7:cf:44:b9:6a:a1:43:c7:93:84:9c:c6:16:cc: 82:e9:dd:a8:b1:1e:a8:f1:72:e6:b4:3d:05:2d:4f: 25:88:84:fd:67:ab:29:69:f1:71:8d:ae:57:fc:61: 8f:0e:ff:8a:98:36:a6:3f:06:85:ed:af:6b:be:65: 2d:92:6f:22:21:4b:53:8b:5a:94:4c:94:91:79:2e: c4:93:e8:3a:48:ee:a9:18:90:e0:74:3a:a9:68:53: 65:6e:3a:39:61:38:b5:51:4d:14:5a:9f:99:2d:71: 96:67:f4:43:93:f7:41:17:8a:d9:36:b8:64:ab:d3: e3:81:6b:96:6c:57:a6:80:eb:b1:ea:bf:5d:16:3f: ae:a1:3a:fc:f2:7d:a4:d1:4e:4b:03:d1:12:3a:20: 8d:62:04:9b:c6:c7:bc:07:7a:b6:12:ce:b0:57:58: 4d:77:73:96:4e:a8:95:7d:3e:1d:4f:8e:a8:d2:b1: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.151.216.0/24 131.143.31.0/24 IPv6: 2602:2c9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55116 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:73:b0:ef:c0:b3:0f:8a:fd:5a:13:8b:ec:50:dc:98:5a:c9: 52:08:de:cd:e4:45:e0:38:2a:82:7f:fa:f4:64:fe:37:81:4c: c4:8a:8d:93:e9:ba:2f:4b:d7:d4:4b:f9:23:48:82:29:c9:96: dd:95:ab:d8:df:18:f8:2f:a9:a2:e3:2d:80:71:72:1d:98:a9: 97:49:2e:d0:cd:e7:25:0b:86:1f:e7:a3:80:02:1d:9c:5a:22: 5b:1d:29:b5:92:ab:49:72:38:34:96:39:14:2b:30:b6:28:51: 35:c1:e8:ca:2a:82:75:c9:a7:ad:b1:82:8c:7d:d2:20:6f:86: 4c:4f:b3:80:11:49:3d:bc:3e:dc:28:04:5e:8b:da:85:5b:97: bf:41:16:3f:18:d1:03:cb:3c:e9:fb:89:89:d6:e1:a7:dd:39: 36:7b:a3:c8:69:e4:6b:48:89:33:7b:cb:14:09:1a:65:26:52: e5:6e:de:19:4d:59:e9:7c:51:3e:df:1c:d1:42:4f:8d:53:0f: 71:08:14:bc:4f:78:f1:88:6b:25:f2:45:d2:0b:60:5b:1e:5f: 16:5c:38:b6:d5:13:a4:d9:f6:03:ee:08:67:98:90:93:26:48: 82:05:c9:7b:82:30:3c:d2:b6:13:a3:a4:e1:54:71:6e:22:d6: d4:be:33:f8 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtyJvIecxr6hvaBfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAwNzE5NDgxOVoXDTI3MDYzMDAwNDUzM1owLzEtMCsGA1UEAxMk MTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUT+GJHEPB/QCPKX8jHw0wdbDxkETCbk7eDB WpTXIoLgH+sGcYf/lhTmYJdZ1fN3JuezQNjO15Ae3yOEHITSbg/ucWFYbyFXSdOk t89EuWqhQ8eThJzGFsyC6d2osR6o8XLmtD0FLU8liIT9Z6spafFxja5X/GGPDv+K mDamPwaF7a9rvmUtkm8iIUtTi1qUTJSReS7Ek+g6SO6pGJDgdDqpaFNlbjo5YTi1 UU0UWp+ZLXGWZ/RDk/dBF4rZNrhkq9PjgWuWbFemgOux6r9dFj+uoTr88n2k0U5L A9ESOiCNYgSbxse8B3q2Es6wV1hNd3OWTqiVfT4dT46o0rEL/QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFC4hVRHcCjs2DM3yBtSd5t/Jxzm6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x NThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzE1OGQ1ZjE1LWE4OTItNDEzNC04 NDBiLTAyNmU2ODM1N2Q3MS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgz NTdkNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXl9gDBACDjx8wDgQCAAIwCAMGBCYCAskAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDXTDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBec7DvwLMPiv1aE4vs UNyYWslSCN7N5EXgOCqCf/r0ZP43gUzEio2T6bovS9fUS/kjSIIpyZbdlavY3xj4 L6mi4y2AcXIdmKmXSS7QzeclC4Yf56OAAh2cWiJbHSm1kqtJcjg0ljkUKzC2KFE1 wejKKoJ1yaetsYKMfdIgb4ZMT7OAEUk9vD7cKARei9qFW5e/QRY/GNEDyzzp+4mJ 1uGn3Tk2e6PIaeRrSIkze8sUCRplJlLlbt4ZTVnpfFE+3xzRQk+NUw9xCBS8T3jx iGsl8kXSC2BbHl8WXDi21ROk2fYD7ghnmJCTJkiCBcl7gjA80rYTo6ThVHFuItbU vjP4 -----END CERTIFICATE-----Generated at Mon Oct 20 02:49:02 2025 by rpki-client