$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer File: dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer (raw, json) Hash identifier: w553pOltG6yhPK4Vm/vf4XsxajQJ1WvxQEgKl6tZ5vo= Subject key identifier: BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AA0CFEDC8B9C7A081BE011480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Jul 2025 20:09:03 +0000 Certificate not after: Wed 27 Oct 2027 20:09:03 +0000 Subordinate resources: AS: 401086 IP: 198.207.244.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:cf:ed:c8:b9:c7:a0:81:be:01:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 24 20:09:03 2025 GMT Not After : Oct 27 20:09:03 2027 GMT Subject: CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:be:7c:a1:36:45:9d:02:69:fb:2d:f2:d0: 3a:b0:89:97:4f:49:36:6c:0d:70:ae:fe:58:49:2b: b6:91:f0:50:90:56:68:c3:a0:4b:50:60:44:66:e3: ba:db:a0:c2:32:8d:97:1f:46:38:d3:87:5d:78:cc: dc:eb:00:45:01:35:df:52:17:36:71:22:c8:99:ae: 44:83:1c:fe:42:c2:15:b2:bd:28:42:02:19:05:af: 7e:b1:97:e6:c4:ca:55:79:3b:96:aa:c2:87:8a:49: 75:e2:1c:75:8e:2d:31:3d:3e:c0:ce:fa:15:83:69: fd:b8:48:f6:34:12:d8:f4:45:0f:37:cf:22:aa:c3: dc:a3:02:ee:a4:bf:1e:b9:20:c2:2d:15:c0:bb:28: 34:1f:e3:0a:64:8e:dc:ee:88:d6:93:be:ee:5b:14: ca:cb:d6:ad:98:b2:b2:6a:4b:84:94:ac:7a:d9:31: e0:b8:8c:31:c8:6c:ca:3c:aa:af:94:9e:8b:e8:83: 26:65:50:82:b9:81:a1:82:69:9b:fb:78:fc:97:90: 84:53:30:03:f9:7b:27:cc:0e:07:2f:c1:a0:d0:b4: 04:31:88:0b:e6:23:8a:b5:70:35:f7:e7:17:52:70: 04:c7:0a:67:2b:ea:b5:f9:05:e1:e6:99:18:f6:03: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.207.244.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401086 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ab:05:6b:7e:2b:9d:c3:c4:92:52:c8:79:d6:6d:f6:cd:b3: 40:d0:f6:52:61:d7:b2:72:9b:a7:d1:b1:49:9b:67:7d:43:67: 05:5b:e8:87:24:ef:a6:db:1f:0e:c4:b2:4e:83:c4:d3:8a:22: 22:d8:4d:9a:6c:c3:ee:95:5b:1d:3e:84:fc:b8:28:41:86:f8: 9c:3e:e8:21:d3:8e:51:d0:7e:c9:14:29:01:43:3b:93:96:e3: b9:fa:9d:f6:7b:36:50:87:b5:11:a7:af:30:66:5f:ec:36:38: 58:b2:b9:bf:5a:34:c9:76:39:8d:da:a6:35:bc:7d:f2:fd:bf: df:b3:df:26:58:aa:f5:c0:7f:a4:d8:11:03:83:fb:56:30:d8: d9:e5:21:ec:a6:80:5b:23:62:10:65:0d:44:9f:d5:c2:7d:3b: 5c:d1:cf:e5:1b:f7:21:fe:96:e8:5b:13:5f:e5:83:c3:05:5c: 7c:18:d2:59:9a:a7:ef:fa:4b:90:30:44:86:66:c9:5b:4e:99: 59:83:ec:77:0e:f6:83:d8:96:8a:65:bf:26:af:06:6f:1b:fb: 07:24:8e:96:d4:f0:14:c2:52:d7:e5:c4:be:95:c9:c9:94:bb: f6:fd:79:66:85:c1:a2:42:4d:c7:9a:12:0f:75:e9:b7:28:aa: e5:da:57:9b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqgz+3Iuceggb4BFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDcyNDIwMDkwM1oXDTI3MTAyNzIwMDkwM1owLzEtMCsGA1UEAxMk ZGJjODk3NTgtYmE1My00NmE3LWIxY2QtYmI5ZmRhNjZiY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4S+fKE2RZ0Cafst8tA6sImXT0k2bA1wrv5Y SSu2kfBQkFZow6BLUGBEZuO626DCMo2XH0Y404ddeMzc6wBFATXfUhc2cSLIma5E gxz+QsIVsr0oQgIZBa9+sZfmxMpVeTuWqsKHikl14hx1ji0xPT7AzvoVg2n9uEj2 NBLY9EUPN88iqsPcowLupL8euSDCLRXAuyg0H+MKZI7c7ojWk77uWxTKy9atmLKy akuElKx62THguIwxyGzKPKqvlJ6L6IMmZVCCuYGhgmmb+3j8l5CEUzAD+XsnzA4H L8Gg0LQEMYgL5iOKtXA19+cXUnAExwpnK+q1+QXh5pkY9gOXeQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFL+bu7/zyjfG++tL/zZoSusdPPftMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k YmM4OTc1OC1iYTUzLTQ2YTctYjFjZC1iYjlmZGE2NmJjZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2RiYzg5NzU4LWJhNTMtNDZhNy1i MWNkLWJiOWZkYTY2YmNkNS9kYmM4OTc1OC1iYTUzLTQ2YTctYjFjZC1iYjlmZGE2 NmJjZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALGz/QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh6+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGerBWt+K53DxJJSyHnWbfbNs0DQ9lJh17Jym6fRsUmbZ31D ZwVb6Ick76bbHw7Esk6DxNOKIiLYTZpsw+6VWx0+hPy4KEGG+Jw+6CHTjlHQfskU KQFDO5OW47n6nfZ7NlCHtRGnrzBmX+w2OFiyub9aNMl2OY3apjW8ffL9v9+z3yZY qvXAf6TYEQOD+1Yw2NnlIeymgFsjYhBlDUSf1cJ9O1zRz+Ub9yH+luhbE1/lg8MF XHwY0lmap+/6S5AwRIZmyVtOmVmD7HcO9oPYloplvyavBm8b+wckjpbU8BTCUtfl xL6VycmUu/b9eWaFwaJCTceaEg916bcoquXaV5s= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:02 2025 by rpki-client