$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer File: 7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer (raw, json) Hash identifier: xwwKfa+I+90hxedYjwHVnw4d2LQFcQfiA6j/ReZ25F8= Subject key identifier: CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584CF14FE031892A5FE70E6890A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Feb 2026 01:45:23 +0000 Certificate not after: Sat 27 May 2028 00:45:23 +0000 Subordinate resources: IP: 140.235.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:4f:e0:31:89:2a:5f:e7:0e:68:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Feb 22 01:45:23 2026 GMT Not After : May 27 00:45:23 2028 GMT Subject: CN=7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:8e:b8:05:13:21:03:13:f0:01:5b:80:ad: 2f:dc:17:8b:9e:27:01:f5:fc:32:66:65:b9:4c:70: a4:49:73:7e:49:83:05:3d:25:ae:fa:6b:b7:47:24: cb:89:eb:fa:12:a6:ee:f3:cb:69:1a:c2:7b:fc:43: c9:f1:0f:d3:e6:3e:bf:43:7a:aa:7b:da:5f:0c:31: d8:51:fa:80:89:99:ab:fb:68:c5:df:e1:de:64:74: 39:4f:54:d7:b5:9a:f0:f4:dc:c2:7d:9e:17:5c:2a: b8:77:0e:73:92:40:6a:13:8f:1b:45:21:12:82:36: f7:ad:3f:75:e2:50:ab:d5:f4:48:ad:3b:6d:da:c4: 69:fc:ac:9d:26:71:7c:37:a6:91:b6:22:75:fb:99: ae:9a:02:37:53:94:3a:b6:96:99:f2:f2:2f:af:0b: b0:bd:c9:54:bf:fc:71:87:c1:e2:3c:55:94:ec:79: 5c:37:8b:a3:8e:80:24:94:a9:5b:6c:36:b8:cb:0c: da:bc:95:54:29:35:6a:a4:63:ab:5e:fd:b3:a1:b5: ed:a4:9a:ee:26:f7:dc:31:63:4b:a7:1d:49:4e:36: 5b:d4:35:a3:56:f3:0e:dd:0e:f3:cd:33:99:87:54: 61:05:a4:a8:ba:23:d1:99:94:e4:1b:95:a5:b7:aa: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 140.235.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:63:5e:bc:b3:d8:cd:e2:34:6d:1e:aa:bf:26:47:9c:31:ec: cd:5c:42:75:45:5e:b1:c9:d6:41:05:7d:72:60:ba:63:23:cd: 26:87:1d:16:e3:f1:46:8b:8c:3f:52:1e:13:a8:85:fb:2b:ed: 3a:a4:49:96:eb:20:7e:ea:e6:a9:d3:aa:d5:7a:f5:97:ff:27: 14:28:16:3f:1a:24:18:02:52:2a:36:b7:4d:2f:84:08:24:fa: ac:77:5d:d3:2c:1e:17:ef:e2:18:fa:a9:58:ee:6a:b3:46:18: 9c:d8:cd:d9:06:04:74:ba:c4:c0:a4:42:43:ce:4e:6c:67:ff: 3d:02:5a:68:9c:4f:b9:b3:d7:fc:03:e8:0d:34:83:64:0b:d8: 56:76:63:90:a6:f1:8b:68:ec:c3:a5:ca:17:b4:c5:8c:89:f0: ad:af:1e:71:36:fd:fa:a9:c6:0d:22:37:a1:c4:96:5c:21:a9: ff:b5:8e:e1:be:9b:62:a9:c6:a8:e6:0d:51:8d:66:5f:79:52: c0:2d:2f:bf:c3:5d:80:cf:23:c4:18:e1:2f:80:b1:92:c8:fb: a5:8b:3b:3a:12:f7:d5:29:21:96:64:99:6d:5b:9a:9f:a2:f1: b6:cd:6a:71:6f:4d:33:63:4a:3f:72:a4:07:fc:0e:c9:f1:70: 7b:87:bf:fe -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzxT+AxiSpf5w5okKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MDIyMjAxNDUyM1oXDTI4MDUyNzAwNDUyM1owLzEtMCsGA1UEAxMk NzMwNWQxYTAtYTc3OS00ZGMxLWFlYWMtOWU1YjJmZDllYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppqOuAUTIQMT8AFbgK0v3BeLnicB9fwyZmW5 THCkSXN+SYMFPSWu+mu3RyTLiev6Eqbu88tpGsJ7/EPJ8Q/T5j6/Q3qqe9pfDDHY UfqAiZmr+2jF3+HeZHQ5T1TXtZrw9NzCfZ4XXCq4dw5zkkBqE48bRSESgjb3rT91 4lCr1fRIrTtt2sRp/KydJnF8N6aRtiJ1+5mumgI3U5Q6tpaZ8vIvrwuwvclUv/xx h8HiPFWU7HlcN4ujjoAklKlbbDa4ywzavJVUKTVqpGOrXv2zobXtpJruJvfcMWNL px1JTjZb1DWjVvMO3Q7zzTOZh1RhBaSouiPRmZTkG5Wlt6qMXwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMydcULFr2KEGJXuJb5UyGCssO3UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 MzA1ZDFhMC1hNzc5LTRkYzEtYWVhYy05ZTViMmZkOWViZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzczMDVkMWEwLWE3NzktNGRjMS1h ZWFjLTllNWIyZmQ5ZWJkMi83MzA1ZDFhMC1hNzc5LTRkYzEtYWVhYy05ZTViMmZk OWViZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM63QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE2NevLPYzeI0bR6qvyZH nDHszVxCdUVescnWQQV9cmC6YyPNJocdFuPxRouMP1IeE6iF+yvtOqRJlusgfurm qdOq1Xr1l/8nFCgWPxokGAJSKja3TS+ECCT6rHdd0yweF+/iGPqpWO5qs0YYnNjN 2QYEdLrEwKRCQ85ObGf/PQJaaJxPubPX/APoDTSDZAvYVnZjkKbxi2jsw6XKF7TF jInwra8ecTb9+qnGDSI3ocSWXCGp/7WO4b6bYqnGqOYNUY1mX3lSwC0vv8NdgM8j xBjhL4Cxksj7pYs7OhL31SkhlmSZbVuan6Lxts1qcW9NM2NKP3KkB/wOyfFwe4e/ /g== -----END CERTIFICATE-----Generated at Thu Feb 26 10:50:35 2026 by rpki-client