$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dba30733-0285-4a0c-af4c-7fb4656656aa.cer File: dba30733-0285-4a0c-af4c-7fb4656656aa.cer (raw, json) Hash identifier: 4XEfaqgVN5d0OgOIMYG1ojFJmxyO/WgybqPy3iy8EXA= Subject key identifier: 2C:8D:92:03:E1:01:AE:3A:D7:73:BE:0F:B9:19:2E:ED:91:89:19:67 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584ACE040A34036A2AF9762CED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dba30733-0285-4a0c-af4c-7fb4656656aa/dba30733-0285-4a0c-af4c-7fb4656656aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dba30733-0285-4a0c-af4c-7fb4656656aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 00:45:25 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 16570 AS: 32710 IP: 2605:fa00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:04:0a:34:03:6a:2a:f9:76:2c:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 10 00:45:25 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=dba30733-0285-4a0c-af4c-7fb4656656aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:fe:1a:bc:f1:77:8f:a5:ad:4e:3c:fe:b5: 43:12:fa:cf:40:d9:4c:62:7b:76:75:81:8f:39:1f: f3:7d:5c:dc:bd:b1:21:7c:2e:3d:ae:0d:39:66:d6: 02:fb:d1:42:41:43:3b:89:d2:03:e5:43:22:9e:e8: 7b:8a:95:b4:7b:4e:12:37:20:1e:07:df:42:79:af: c1:b0:62:68:21:fc:18:47:07:93:b5:df:1d:f7:6c: 27:52:93:18:bd:07:b7:d1:e9:65:11:c1:5e:7a:ba: 4d:13:af:5b:fe:a0:fd:5a:0d:da:36:3b:e1:3d:97: 02:5c:c4:f9:01:37:95:81:55:19:9d:c0:db:e5:c0: b4:e5:b6:64:a5:31:f6:7c:82:81:58:33:6b:e3:05: 8c:5b:5b:d3:97:44:1d:79:37:ae:95:f8:04:9a:a5: f9:25:a9:6c:62:e7:60:dc:a1:4e:dc:2d:c6:f5:99: a2:6d:4b:82:60:33:80:a5:b8:6c:04:1d:08:00:ef: b7:f3:77:95:0e:82:8c:45:0b:99:aa:2c:03:76:30: eb:17:cb:4c:66:e4:55:eb:90:f0:58:8c:8d:a6:ca: 7e:db:b8:dc:a2:80:dc:a8:41:ac:d9:82:5d:85:06: 60:9d:c3:76:c0:c1:b1:1e:fa:31:4c:87:79:f7:1d: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:92:03:E1:01:AE:3A:D7:73:BE:0F:B9:19:2E:ED:91:89:19:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dba30733-0285-4a0c-af4c-7fb4656656aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dba30733-0285-4a0c-af4c-7fb4656656aa/dba30733-0285-4a0c-af4c-7fb4656656aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv6: 2605:fa00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16570 32710 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0e:70:7f:c1:21:ef:d0:30:0e:17:72:b1:d3:73:a6:23:c9: 64:d1:ea:85:b1:92:9e:84:c6:d9:e3:06:43:ed:34:4d:ae:81: 23:4a:be:a6:51:d2:ec:c3:25:4c:57:ac:74:ba:9d:01:f3:1c: dc:e8:41:14:16:e9:3f:1b:93:1e:ae:56:47:10:eb:33:12:a3: 28:5e:e7:37:89:dd:c9:89:75:05:70:5b:12:12:3c:6f:52:e0: 4c:bd:04:49:f9:95:60:c9:e4:0c:56:82:d7:e4:70:2f:ed:3d: 3e:4d:1e:ec:fe:e3:41:17:2c:d5:cc:01:68:45:b4:cb:78:56: 1e:fb:3d:1e:2b:99:ac:fb:44:cd:8d:0f:e4:2f:27:58:57:42: 41:c0:b0:47:85:81:68:39:e2:85:af:eb:13:eb:75:04:2e:9c: f4:7b:69:ce:30:d5:ff:8f:cc:b2:1d:99:93:a5:1d:01:7d:e8: 99:16:ec:b4:38:db:5d:43:14:38:8b:f6:48:49:be:2b:c1:ba: 74:60:aa:b7:d7:c6:4c:d6:50:da:4f:df:9c:38:db:63:f4:8e: 0c:ce:9a:cc:1b:68:3b:e9:ac:6e:df:a6:5b:0e:a3:f4:16:ed: 50:2e:5e:3a:f0:f0:b2:f5:dc:75:85:76:aa:1f:b2:73:33:dd: 19:12:95:53 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWErOBAo0A2oq+XYs7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDgxMDAwNDUyNVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk ZGJhMzA3MzMtMDI4NS00YTBjLWFmNGMtN2ZiNDY1NjY1NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcf+Grzxd4+lrU48/rVDEvrPQNlMYnt2dYGP OR/zfVzcvbEhfC49rg05ZtYC+9FCQUM7idID5UMinuh7ipW0e04SNyAeB99Cea/B sGJoIfwYRweTtd8d92wnUpMYvQe30ellEcFeerpNE69b/qD9Wg3aNjvhPZcCXMT5 ATeVgVUZncDb5cC05bZkpTH2fIKBWDNr4wWMW1vTl0QdeTeulfgEmqX5JalsYudg 3KFO3C3G9ZmibUuCYDOApbhsBB0IAO+383eVDoKMRQuZqiwDdjDrF8tMZuRV65Dw WIyNpsp+27jcooDcqEGs2YJdhQZgncN2wMGxHvoxTId59x1IhwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFCyNkgPhAa4613O+D7kZLu2RiRlnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k YmEzMDczMy0wMjg1LTRhMGMtYWY0Yy03ZmI0NjU2NjU2YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2RiYTMwNzMzLTAyODUtNGEwYy1h ZjRjLTdmYjQ2NTY2NTZhYS9kYmEzMDczMy0wMjg1LTRhMGMtYWY0Yy03ZmI0NjU2 NjU2YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBfoAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgC AkC6AgJ/xjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCWDnB/wSHv0DAOF3Kx03OmI8lk0eqFsZKehMbZ4wZD 7TRNroEjSr6mUdLswyVMV6x0up0B8xzc6EEUFuk/G5MerlZHEOszEqMoXuc3id3J iXUFcFsSEjxvUuBMvQRJ+ZVgyeQMVoLX5HAv7T0+TR7s/uNBFyzVzAFoRbTLeFYe +z0eK5ms+0TNjQ/kLydYV0JBwLBHhYFoOeKFr+sT63UELpz0e2nOMNX/j8yyHZmT pR0BfeiZFuy0ONtdQxQ4i/ZISb4rwbp0YKq318ZM1lDaT9+cONtj9I4MzprMG2g7 6axu36ZbDqP0Fu1QLl468PCy9dx1hXaqH7JzM90ZEpVT -----END CERTIFICATE-----Generated at Tue Nov 4 23:20:47 2025 by rpki-client