$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer File: dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer (raw, json) Hash identifier: a6U1z7iUtQvYNjEwHOZgJ/ESk+bM+tH2T4Iz0ha/sB0= Subject key identifier: F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B98261BB68F309EEF21EB6900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 10:27:21 +0000 Certificate not after: Tue 04 Jan 2028 16:17:10 +0000 Subordinate resources: AS: 19272 IP: 199.180.64.0/21 IP: 2604:2620::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:26:1b:b6:8f:30:9e:ef:21:eb:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 21 10:27:21 2025 GMT Not After : Jan 4 16:17:10 2028 GMT Subject: CN=dbcce398-e4da-4d5d-8cbc-ef8968bec8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:82:16:f6:d3:89:a0:35:a7:25:54:74:83: d7:74:bc:09:6f:57:1a:44:ca:31:f8:0a:31:91:73: 7f:e1:cc:5e:5f:d6:9b:e5:4d:53:83:89:1a:69:2b: fd:de:84:83:0d:df:06:12:77:f7:02:08:14:7c:6b: 13:df:aa:53:b4:b6:e8:e2:8b:4a:c3:7a:ab:81:01: 9b:cc:5c:14:e3:3b:4d:de:09:c7:68:cb:e1:cb:d3: 6d:c9:2e:16:12:4e:64:72:ed:dc:69:35:62:41:ea: ac:63:b0:52:10:f2:49:ce:1b:68:1f:22:68:f1:47: 92:58:a6:6e:38:25:94:7e:bb:a0:cd:19:58:f9:1f: 49:01:fa:1f:50:eb:94:52:5f:b9:bf:6a:9d:34:fc: 8a:51:fd:93:eb:50:ea:c4:91:f4:91:1f:96:81:7a: d2:f2:24:c9:4e:ca:91:31:00:7f:d5:1a:28:32:d1: c4:35:7d:d5:e7:86:83:0d:42:a3:81:94:6c:93:d2: 01:a9:5b:0e:57:5d:c9:3d:8e:23:88:d4:6e:f9:ff: 42:13:f9:dc:99:53:b4:7f:5c:cd:ee:66:f9:2b:ea: 9a:95:2a:54:6a:22:63:9b:d9:d6:8f:b9:39:35:c7: 95:08:b2:57:77:28:ff:27:eb:db:7b:56:87:ba:63: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.180.64.0/21 IPv6: 2604:2620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19272 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:70:31:38:de:62:f6:d0:70:20:fb:fc:09:33:4e:36:d1:e3: 22:3b:46:1e:1f:21:ec:7a:cb:e0:74:cf:ce:a4:17:65:60:61: 0c:cc:23:0c:47:29:50:0b:5d:22:27:45:dd:88:59:54:bd:d1: 5c:65:7b:e7:ea:fe:ee:14:44:17:e3:e9:95:3f:2e:38:c9:88: be:38:2b:63:09:23:49:56:3c:ff:37:7d:6b:a0:44:e3:4d:16: 71:ec:7f:c7:38:7c:d1:f5:06:f5:0f:03:0e:86:9c:ce:00:f7: a0:bd:43:b5:5f:f6:9d:04:ef:a1:ae:87:bf:82:b1:22:fd:8f: 83:ab:65:12:6b:c5:d2:71:92:9f:ec:61:1e:50:da:4c:c5:c7: 4d:f3:87:8f:da:11:c4:ba:e7:86:fd:fd:42:ee:58:39:3e:ac: a6:dd:41:d6:a1:f4:6a:60:df:9d:1e:29:28:11:c5:33:ac:b1: 24:f2:60:0b:d1:b5:1f:7f:ee:48:ab:ad:5c:7c:f7:fc:b9:f0: bc:ba:a2:bf:c4:6c:a1:26:1b:49:6a:19:3e:87:4c:14:08:df: 3f:d2:34:70:4f:e6:f8:f1:80:55:54:6b:b9:a7:86:b6:f0:22: ae:da:26:b1:ae:5e:c7:b7:73:07:cb:57:23:5f:4b:76:a4:43: a1:0e:c0:0f -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEuYJhu2jzCe7yHraQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAyMTEwMjcyMVoXDTI4MDEwNDE2MTcxMFowLzEtMCsGA1UEAxMk ZGJjY2UzOTgtZTRkYS00ZDVkLThjYmMtZWY4OTY4YmVjOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCWCFvbTiaA1pyVUdIPXdLwJb1caRMox+Aox kXN/4cxeX9ab5U1Tg4kaaSv93oSDDd8GEnf3AggUfGsT36pTtLbo4otKw3qrgQGb zFwU4ztN3gnHaMvhy9NtyS4WEk5kcu3caTViQeqsY7BSEPJJzhtoHyJo8UeSWKZu OCWUfrugzRlY+R9JAfofUOuUUl+5v2qdNPyKUf2T61DqxJH0kR+WgXrS8iTJTsqR MQB/1RooMtHENX3V54aDDUKjgZRsk9IBqVsOV13JPY4jiNRu+f9CE/ncmVO0f1zN 7mb5K+qalSpUaiJjm9nWj7k5NceVCLJXdyj/J+vbe1aHumMNuwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFPIOvSTakphl/DLT61zxyhED9jTUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k YmNjZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5NjhiZWM4ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RiY2NlMzk4LWU0ZGEtNGQ1ZC04 Y2JjLWVmODk2OGJlYzhmZS9kYmNjZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5Njhi ZWM4ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPHtEAwDQQCAAIwBwMFACYEJiAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICS0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE3AxON5i9tBwIPv8CTNONtHjIjtG Hh8h7HrL4HTPzqQXZWBhDMwjDEcpUAtdIidF3YhZVL3RXGV75+r+7hREF+PplT8u OMmIvjgrYwkjSVY8/zd9a6BE400Wcex/xzh80fUG9Q8DDoaczgD3oL1DtV/2nQTv oa6Hv4KxIv2Pg6tlEmvF0nGSn+xhHlDaTMXHTfOHj9oRxLrnhv39Qu5YOT6spt1B 1qH0amDfnR4pKBHFM6yxJPJgC9G1H3/uSKutXHz3/LnwvLqiv8RsoSYbSWoZPodM FAjfP9I0cE/m+PGAVVRruaeGtvAirtomsa5ex7dzB8tXI19LdqRDoQ7ADw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:49 2025 by rpki-client