$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer File: dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer (raw, json) Hash identifier: aDu11K1RfgYboGFxLGi8xmXtdtOaN8s1QLvqVppNSfo= Subject key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AE18ED24EEE4F997F75AE8A30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 22215 IP: 198.177.154.0/24 IP: 204.52.252.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d2:4e:ee:4f:99:7f:75:ae:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:19:97:3d:9e:70:5e:2b:82:aa:f7:8f:77: 5c:d0:b1:a7:05:5c:39:94:47:34:3b:46:1f:29:75: ea:81:e4:7a:5a:58:c1:66:46:c4:69:3f:cd:9a:21: 52:01:eb:6c:63:f9:6e:bb:d0:51:fe:ba:03:1a:56: 58:20:75:36:dd:6d:0d:96:f1:ca:74:be:de:aa:0d: b2:e3:c4:be:ea:ec:91:15:b5:5b:d6:99:e8:b5:03: 49:da:a2:af:ee:4e:10:49:b7:cf:45:fb:a8:e5:a9: 47:73:31:a3:28:5f:1c:f1:7a:46:ab:38:ba:c9:6e: 68:ad:f5:3c:ea:1f:b8:f7:4c:64:c8:96:4d:2a:a3: 1a:e5:9e:2a:8f:e4:1a:5f:7b:ca:b0:55:9a:fa:6a: 06:b9:95:cf:06:20:c4:46:10:c3:58:c7:53:e7:3e: fa:fb:b6:98:10:45:ce:fc:41:26:00:b6:34:a5:3d: 2d:db:1d:09:be:c6:5d:79:09:57:cd:2e:53:78:98: dc:38:86:e5:0f:97:a3:d1:07:a5:d7:ed:29:74:bd: ee:df:8f:a5:66:46:a7:2c:ee:ac:07:7e:db:3c:60: eb:50:11:6b:95:dc:08:b6:da:d1:3e:ed:03:d9:22: 66:d8:50:da:2e:e3:dd:8e:7a:92:f5:6f:61:8d:6e: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.177.154.0/24 204.52.252.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22215 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f2:5e:65:ed:2c:23:2d:57:72:05:56:a7:bc:c5:d7:74:ee: a2:a5:0f:08:c5:83:16:36:7b:8b:6f:7a:50:08:37:2f:2b:9b: e6:4b:0f:79:7d:93:8a:22:9a:18:f9:b2:ed:af:3a:c4:99:42: cf:9d:28:f9:1c:33:86:5c:d2:94:cb:46:f5:51:e9:a6:73:93: ba:d2:bd:19:f7:56:0b:3e:c3:08:bb:25:04:02:7c:e3:14:59: 34:cf:ac:f5:d4:c8:fa:1c:9b:e9:db:01:e7:9d:5e:90:04:e7: f6:66:e1:10:4f:10:89:58:1d:e8:6b:48:cf:b4:d8:65:7b:e5: 08:20:c2:9d:eb:51:e7:be:31:d6:a2:14:c8:db:51:0e:18:4b: d4:7f:5d:a8:12:91:d6:5a:eb:d2:40:53:6d:07:64:6f:22:7f: 83:d4:28:d6:5c:ab:27:11:c5:04:d7:f3:2d:6c:14:1a:3a:73: e4:4e:6c:9f:5b:42:7e:78:a6:20:32:8b:df:04:80:ef:de:40: 35:4e:4e:93:0e:f8:dd:e0:bc:8d:4a:ca:fa:45:5d:7e:f0:06: 1b:f9:66:f4:df:35:8d:8e:2d:5a:3e:91:3c:46:ba:d6:1d:23: 19:a3:c9:3b:ea:c3:10:8b:14:6a:0b:e6:b6:b5:19:2a:a8:d1: f1:25:d6:6a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWErhjtJO7k+Zf3WuijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk ZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdjMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUZlz2ecF4rgqr3j3dc0LGnBVw5lEc0O0Yf KXXqgeR6WljBZkbEaT/NmiFSAetsY/luu9BR/roDGlZYIHU23W0NlvHKdL7eqg2y 48S+6uyRFbVb1pnotQNJ2qKv7k4QSbfPRfuo5alHczGjKF8c8XpGqzi6yW5orfU8 6h+490xkyJZNKqMa5Z4qj+QaX3vKsFWa+moGuZXPBiDERhDDWMdT5z76+7aYEEXO /EEmALY0pT0t2x0JvsZdeQlXzS5TeJjcOIblD5ej0Qel1+0pdL3u34+lZkanLO6s B37bPGDrUBFrldwIttrRPu0D2SJm2FDaLuPdjnqS9W9hjW7mMwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFApN0S+A5S/Z+Qq2XY//wLEsZli1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k Y2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RjYjBhNTk3LWY2ZWItNGM5Ny1h YTZjLTM2ZDA0YmQ3YzJkMS9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJk N2MyZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGsZoDBADMNPwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICVscwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAPfJeZe0sIy1XcgVWp7zF13TuoqUPCMWDFjZ7i296 UAg3Lyub5ksPeX2TiiKaGPmy7a86xJlCz50o+RwzhlzSlMtG9VHppnOTutK9GfdW Cz7DCLslBAJ84xRZNM+s9dTI+hyb6dsB551ekATn9mbhEE8QiVgd6GtIz7TYZXvl CCDCnetR574x1qIUyNtRDhhL1H9dqBKR1lrr0kBTbQdkbyJ/g9Qo1lyrJxHFBNfz LWwUGjpz5E5sn1tCfnimIDKL3wSA795ANU5Okw743eC8jUrK+kVdfvAGG/lm9N81 jY4tWj6RPEa61h0jGaPJO+rDEIsUagvmtrUZKqjR8SXWag== -----END CERTIFICATE-----Generated at Tue Nov 4 18:51:11 2025 by rpki-client