$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer File: dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer (raw, json) Hash identifier: Q4KOhNn3UB4wiTVKn54TpGNv/57RHRNbHobMCB48rKQ= Subject key identifier: F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B60E042F7DDECE89D2B1D8300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 15:17:10 +0000 Certificate not after: Tue 04 Jan 2028 16:17:10 +0000 Subordinate resources: AS: 19272 IP: 199.180.64.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:e0:42:f7:dd:ec:e8:9d:2b:1d:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 1 15:17:10 2025 GMT Not After : Jan 4 16:17:10 2028 GMT Subject: CN=dbcce398-e4da-4d5d-8cbc-ef8968bec8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:82:16:f6:d3:89:a0:35:a7:25:54:74:83: d7:74:bc:09:6f:57:1a:44:ca:31:f8:0a:31:91:73: 7f:e1:cc:5e:5f:d6:9b:e5:4d:53:83:89:1a:69:2b: fd:de:84:83:0d:df:06:12:77:f7:02:08:14:7c:6b: 13:df:aa:53:b4:b6:e8:e2:8b:4a:c3:7a:ab:81:01: 9b:cc:5c:14:e3:3b:4d:de:09:c7:68:cb:e1:cb:d3: 6d:c9:2e:16:12:4e:64:72:ed:dc:69:35:62:41:ea: ac:63:b0:52:10:f2:49:ce:1b:68:1f:22:68:f1:47: 92:58:a6:6e:38:25:94:7e:bb:a0:cd:19:58:f9:1f: 49:01:fa:1f:50:eb:94:52:5f:b9:bf:6a:9d:34:fc: 8a:51:fd:93:eb:50:ea:c4:91:f4:91:1f:96:81:7a: d2:f2:24:c9:4e:ca:91:31:00:7f:d5:1a:28:32:d1: c4:35:7d:d5:e7:86:83:0d:42:a3:81:94:6c:93:d2: 01:a9:5b:0e:57:5d:c9:3d:8e:23:88:d4:6e:f9:ff: 42:13:f9:dc:99:53:b4:7f:5c:cd:ee:66:f9:2b:ea: 9a:95:2a:54:6a:22:63:9b:d9:d6:8f:b9:39:35:c7: 95:08:b2:57:77:28:ff:27:eb:db:7b:56:87:ba:63: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.180.64.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19272 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:12:ab:43:33:1c:10:0b:84:07:1e:b4:95:e4:b5:94:10:73: 00:cc:59:b7:c7:ab:1d:e2:c7:83:12:db:37:42:7e:e8:1a:a2: 88:28:8c:6c:c6:ed:4a:73:2e:a6:e1:c3:ee:dc:bb:68:8f:81: 68:b4:9d:b0:f8:53:ae:01:38:4a:b5:e1:0b:ad:fe:b8:46:0c: bf:9b:f8:7c:50:d9:54:4a:4b:11:af:85:4f:54:1a:2d:95:66: ce:66:c2:9b:36:f1:01:e3:50:9e:1f:ee:bf:26:25:eb:0d:21: 8d:76:cc:22:6f:19:15:b8:81:41:02:d9:c9:7d:87:f5:e5:3a: 49:8e:62:70:91:a9:97:95:1b:c7:39:8a:61:16:2c:12:49:71: 05:5b:40:30:2b:f4:57:26:bf:20:d4:58:71:5f:52:63:64:4e: 42:85:79:ea:b8:cc:70:de:27:8d:b3:36:2b:69:21:9c:b0:57: 09:ac:1d:1c:db:d1:c8:19:f3:04:35:45:72:6b:fd:d8:77:bb: 44:01:85:f9:69:f4:f6:0f:d5:54:a0:4d:ff:21:5b:b5:de:2f: ec:9b:5a:22:b1:b5:c8:39:88:7d:c0:68:88:d2:be:5f:c7:e8: 48:86:b4:0c:3c:1f:5a:25:42:d6:b4:01:52:73:68:a1:af:f2: cc:18:c9:25 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEtg4EL33ezonSsdgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwMTE1MTcxMFoXDTI4MDEwNDE2MTcxMFowLzEtMCsGA1UEAxMk ZGJjY2UzOTgtZTRkYS00ZDVkLThjYmMtZWY4OTY4YmVjOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCWCFvbTiaA1pyVUdIPXdLwJb1caRMox+Aox kXN/4cxeX9ab5U1Tg4kaaSv93oSDDd8GEnf3AggUfGsT36pTtLbo4otKw3qrgQGb zFwU4ztN3gnHaMvhy9NtyS4WEk5kcu3caTViQeqsY7BSEPJJzhtoHyJo8UeSWKZu OCWUfrugzRlY+R9JAfofUOuUUl+5v2qdNPyKUf2T61DqxJH0kR+WgXrS8iTJTsqR MQB/1RooMtHENX3V54aDDUKjgZRsk9IBqVsOV13JPY4jiNRu+f9CE/ncmVO0f1zN 7mb5K+qalSpUaiJjm9nWj7k5NceVCLJXdyj/J+vbe1aHumMNuwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPIOvSTakphl/DLT61zxyhED9jTUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k YmNjZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5NjhiZWM4ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RiY2NlMzk4LWU0ZGEtNGQ1ZC04 Y2JjLWVmODk2OGJlYzhmZS9kYmNjZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5Njhi ZWM4ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHtEAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC S0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAaRKrQzMcEAuEBx60leS1lBBzAMxZt8erHeLHgxLbN0J+6Bqi iCiMbMbtSnMupuHD7ty7aI+BaLSdsPhTrgE4SrXhC63+uEYMv5v4fFDZVEpLEa+F T1QaLZVmzmbCmzbxAeNQnh/uvyYl6w0hjXbMIm8ZFbiBQQLZyX2H9eU6SY5icJGp l5UbxzmKYRYsEklxBVtAMCv0Vya/INRYcV9SY2ROQoV56rjMcN4njbM2K2khnLBX CawdHNvRyBnzBDVFcmv92He7RAGF+Wn09g/VVKBN/yFbtd4v7JtaIrG1yDmIfcBo iNK+X8foSIa0DDwfWiVC1rQBUnNooa/yzBjJJQ== -----END CERTIFICATE-----Generated at Fri Oct 17 07:34:56 2025 by rpki-client