$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer File: 158d5f15-a892-4134-840b-026e68357d71.cer (raw, json) Hash identifier: HzwpzDxOW+noa2+Ncwbwh2ZNDqGxsmCsSvsuBiRp/Vk= Subject key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584CAFCF8C12CCE337EEFE76D780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jan 2026 14:39:17 +0000 Certificate not after: Wed 30 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 55116 IP: 131.143.31.0/24 IP: 2602:2c9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:cf:8c:12:cc:e3:37:ee:fe:76:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 29 14:39:17 2026 GMT Not After : Jun 30 00:45:33 2027 GMT Subject: CN=158d5f15-a892-4134-840b-026e68357d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:fe:18:91:c4:3c:1f:d0:08:f2:97:f2:31: f0:d3:07:5b:0f:19:04:4c:26:e4:ed:e0:c1:5a:94: d7:22:82:e0:1f:eb:06:71:87:ff:96:14:e6:60:97: 59:d5:f3:77:26:e7:b3:40:d8:ce:d7:90:1e:df:23: 84:1c:84:d2:6e:0f:ee:71:61:58:6f:21:57:49:d3: a4:b7:cf:44:b9:6a:a1:43:c7:93:84:9c:c6:16:cc: 82:e9:dd:a8:b1:1e:a8:f1:72:e6:b4:3d:05:2d:4f: 25:88:84:fd:67:ab:29:69:f1:71:8d:ae:57:fc:61: 8f:0e:ff:8a:98:36:a6:3f:06:85:ed:af:6b:be:65: 2d:92:6f:22:21:4b:53:8b:5a:94:4c:94:91:79:2e: c4:93:e8:3a:48:ee:a9:18:90:e0:74:3a:a9:68:53: 65:6e:3a:39:61:38:b5:51:4d:14:5a:9f:99:2d:71: 96:67:f4:43:93:f7:41:17:8a:d9:36:b8:64:ab:d3: e3:81:6b:96:6c:57:a6:80:eb:b1:ea:bf:5d:16:3f: ae:a1:3a:fc:f2:7d:a4:d1:4e:4b:03:d1:12:3a:20: 8d:62:04:9b:c6:c7:bc:07:7a:b6:12:ce:b0:57:58: 4d:77:73:96:4e:a8:95:7d:3e:1d:4f:8e:a8:d2:b1: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 131.143.31.0/24 IPv6: 2602:2c9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55116 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:60:3a:7e:83:fe:a0:26:1a:52:14:d9:6d:92:58:d0:26:21: 0b:bb:68:eb:17:cd:d2:d1:d5:d7:57:2a:d6:03:4a:35:05:6b: 1d:95:dd:9d:c1:96:de:5f:8e:45:7e:09:c1:d1:24:ee:bc:b1: 23:db:47:f9:fb:70:dd:66:21:8c:37:12:b1:b8:07:68:16:f7: 08:d1:b3:b5:3d:5f:a4:71:e4:b3:5d:54:2b:bd:38:c6:de:ec: 14:52:6a:a3:28:56:f4:fa:13:0c:ba:f0:84:d6:70:67:ff:3f: e0:fe:27:41:72:bd:9a:da:1d:ab:66:48:e8:17:0c:c2:18:38: df:65:2b:22:cd:e0:58:79:15:a7:d5:18:76:ca:b9:56:93:c3: 25:71:1d:f5:62:56:97:87:e9:b2:48:66:f5:73:c1:a7:2a:38: a2:78:ad:68:9a:af:12:40:7d:76:c7:2c:e5:23:16:c6:05:88: 8f:9c:58:3f:25:1c:1f:90:81:b4:f0:41:99:6d:75:fb:7d:d2: a8:be:41:cc:1c:c8:28:77:c1:3f:f9:16:b5:33:dd:94:fa:fa: 54:0d:69:19:de:af:93:65:3c:0d:de:5e:f9:20:34:2e:0e:b8: ba:22:37:80:f1:83:0d:e9:45:59:92:2f:be:e4:0e:64:8c:39: 87:7f:f7:e8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEyvz4wSzOM37v5214AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDEyOTE0MzkxN1oXDTI3MDYzMDAwNDUzM1owLzEtMCsGA1UEAxMk MTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUT+GJHEPB/QCPKX8jHw0wdbDxkETCbk7eDB WpTXIoLgH+sGcYf/lhTmYJdZ1fN3JuezQNjO15Ae3yOEHITSbg/ucWFYbyFXSdOk t89EuWqhQ8eThJzGFsyC6d2osR6o8XLmtD0FLU8liIT9Z6spafFxja5X/GGPDv+K mDamPwaF7a9rvmUtkm8iIUtTi1qUTJSReS7Ek+g6SO6pGJDgdDqpaFNlbjo5YTi1 UU0UWp+ZLXGWZ/RDk/dBF4rZNrhkq9PjgWuWbFemgOux6r9dFj+uoTr88n2k0U5L A9ESOiCNYgSbxse8B3q2Es6wV1hNd3OWTqiVfT4dT46o0rEL/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC4hVRHcCjs2DM3yBtSd5t/Jxzm6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x NThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzE1OGQ1ZjE1LWE4OTItNDEzNC04 NDBiLTAyNmU2ODM1N2Q3MS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgz NTdkNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACDjx8wDgQCAAIwCAMGBCYCAskAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDXTDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJYDp+g/6gJhpSFNltkljQJiEL u2jrF83S0dXXVyrWA0o1BWsdld2dwZbeX45FfgnB0STuvLEj20f5+3DdZiGMNxKx uAdoFvcI0bO1PV+kceSzXVQrvTjG3uwUUmqjKFb0+hMMuvCE1nBn/z/g/idBcr2a 2h2rZkjoFwzCGDjfZSsizeBYeRWn1Rh2yrlWk8MlcR31YlaXh+mySGb1c8GnKjii eK1omq8SQH12xyzlIxbGBYiPnFg/JRwfkIG08EGZbXX7fdKovkHMHMgod8E/+Ra1 M92U+vpUDWkZ3q+TZTwN3l75IDQuDri6IjeA8YMN6UVZki++5A5kjDmHf/fo -----END CERTIFICATE-----Generated at Sun Mar 1 20:57:29 2026 by rpki-client