$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer File: c501b1e0-0018-475e-9d4b-5090237060ae.cer (raw, json) Hash identifier: NYBTuRDCs6b8MBZAQWINhZpeZmVqjOPVrNqT+F8t1kE= Subject key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B983C6E10F9A7040DE77C9180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 11:12:20 +0000 Certificate not after: Thu 28 Jan 2027 19:44:11 +0000 Subordinate resources: AS: 54840 IP: 130.250.158.0/23 IP: 167.150.166.0/24 IP: 192.30.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:3c:6e:10:f9:a7:04:0d:e7:7c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 21 11:12:20 2025 GMT Not After : Jan 28 19:44:11 2027 GMT Subject: CN=c501b1e0-0018-475e-9d4b-5090237060ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:1f:40:f5:f8:af:44:b7:26:43:c0:41:14: 2d:be:31:21:a5:b1:d3:cb:92:38:50:4f:8b:0e:8d: b7:83:b4:9d:4d:ca:88:0b:93:2e:e5:43:94:f6:da: 6b:0d:81:6b:e8:a6:39:76:1d:94:9a:8e:6d:81:0a: 01:9c:d2:04:07:5d:d9:f6:c9:d4:73:5c:84:21:ed: 38:d4:05:51:3e:ee:09:b6:2a:10:0c:92:d6:ad:5e: ef:5b:2b:c7:d0:c5:fd:ac:83:bb:ff:aa:22:ea:41: 0d:53:61:fc:4a:89:62:6f:e4:bb:cf:e0:7c:ba:48: 3a:69:a9:b0:1c:a7:72:84:07:44:fb:0d:29:22:d7: 33:d6:31:8a:17:16:94:f7:da:3c:98:79:93:58:bf: b9:b5:a6:6f:68:9b:d1:ad:d7:29:6a:13:ab:51:30: 29:4b:40:d4:d6:0b:b7:b1:88:db:b4:cc:51:5a:7f: 19:91:01:1e:e7:52:39:75:a7:77:b1:18:e8:ed:9f: 74:44:23:d4:a9:da:68:b0:cd:3f:18:94:66:ba:a9: b9:25:04:50:dc:f8:0f:09:38:db:95:55:06:ea:df: 2e:53:60:33:20:66:9d:fb:be:2b:c7:ac:20:14:3d: 1f:5b:a9:c6:8a:3c:c8:0e:b5:93:92:14:d9:6f:22: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 130.250.158.0/23 167.150.166.0/24 192.30.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54840 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f3:41:6e:78:40:3f:8c:eb:f7:5c:5c:7f:5b:fb:1a:f6:04: fc:9d:b3:1a:a0:bd:bd:4f:f8:dd:0a:8d:48:a0:40:1c:a6:30: 0d:ce:a7:22:28:1a:dd:13:5f:7b:ff:2c:15:80:c4:72:78:59: d4:a7:95:08:a0:95:7c:9c:e0:d6:9c:2e:f7:c2:bd:d2:58:5f: a5:6d:c6:b0:4d:ab:5a:52:24:ae:7f:29:37:09:e8:72:81:91: b9:6e:9f:33:a8:71:b8:fd:63:b8:da:c0:c0:32:75:b3:16:92: 8c:e5:f8:f9:60:63:1b:0a:bd:8a:92:5e:9c:8c:db:2b:21:54: 75:73:2c:c1:b0:03:0e:56:9e:eb:b8:cd:21:27:91:7c:a5:4a: 55:57:a8:19:e6:2c:b6:20:90:d6:18:77:d5:4c:87:d7:3a:f3: 4a:3a:ac:6b:6e:70:29:34:5a:03:f6:c7:c6:6f:31:fb:5b:07: 82:b2:de:f1:bd:a6:ae:73:1b:aa:20:8b:c1:30:04:6e:0d:46: bc:2d:83:7a:68:67:16:42:b3:c6:bf:17:d2:d1:29:5e:fe:5a: 33:11:58:3c:ca:b0:4c:8f:ff:4c:fd:90:08:35:79:d9:19:f7: 2c:4b:8a:54:20:e2:f0:a2:f8:2b:98:78:59:77:8a:0b:ce:26: a4:d1:3d:8e -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEuYPG4Q+acEDed8kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAyMTExMTIyMFoXDTI3MDEyODE5NDQxMVowLzEtMCsGA1UEAxMk YzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiUfQPX4r0S3JkPAQRQtvjEhpbHTy5I4UE+L Do23g7SdTcqIC5Mu5UOU9tprDYFr6KY5dh2Umo5tgQoBnNIEB13Z9snUc1yEIe04 1AVRPu4JtioQDJLWrV7vWyvH0MX9rIO7/6oi6kENU2H8Solib+S7z+B8ukg6aamw HKdyhAdE+w0pItcz1jGKFxaU99o8mHmTWL+5taZvaJvRrdcpahOrUTApS0DU1gu3 sYjbtMxRWn8ZkQEe51I5dad3sRjo7Z90RCPUqdposM0/GJRmuqm5JQRQ3PgPCTjb lVUG6t8uU2AzIGad+74rx6wgFD0fW6nGijzIDrWTkhTZbyLYyQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFMuIl52neR/E4gFl/Gxd3BC7uqzFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9j NTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2M1MDFiMWUwLTAwMTgtNDc1ZS05 ZDRiLTUwOTAyMzcwNjBhZS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3 MDYwYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAGC+p4DBACnlqYDBALAHtQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDANY4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAALzQW54QD+M6/dcXH9b+xr2BPydsxqg vb1P+N0KjUigQBymMA3OpyIoGt0TX3v/LBWAxHJ4WdSnlQiglXyc4NacLvfCvdJY X6VtxrBNq1pSJK5/KTcJ6HKBkblunzOocbj9Y7jawMAydbMWkozl+PlgYxsKvYqS XpyM2yshVHVzLMGwAw5Wnuu4zSEnkXylSlVXqBnmLLYgkNYYd9VMh9c680o6rGtu cCk0WgP2x8ZvMftbB4Ky3vG9pq5zG6ogi8EwBG4NRrwtg3poZxZCs8a/F9LRKV7+ WjMRWDzKsEyP/0z9kAg1edkZ9yxLilQg4vCi+CuYeFl3igvOJqTRPY4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:18 2025 by rpki-client