$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer File: 0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer (raw, json) Hash identifier: HH8GTXHOAf36m1tR/IIM0GXa5HdUVxMynBFEgC2dFss= Subject key identifier: B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584CA1BF5EC151E90C67A6131100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 24 Jan 2026 13:45:21 +0000 Certificate not after: Fri 28 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 394015 IP: 172.93.124.0/22 IP: 2620:131:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a1:bf:5e:c1:51:e9:0c:67:a6:13:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 24 13:45:21 2026 GMT Not After : Apr 28 12:45:21 2028 GMT Subject: CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:8a:b2:58:8b:b0:19:ee:10:fb:4f:3d:11: e8:a5:b0:49:a5:20:7e:1e:4a:50:42:f5:a5:bb:9b: 04:af:4d:c2:92:b9:49:ca:b7:d7:b4:62:66:a1:d6: 8a:74:3d:26:90:47:7a:07:63:dc:03:ab:3a:55:fc: 09:0d:5f:02:c0:30:4b:69:eb:af:0b:a7:ad:43:a7: 62:84:37:86:8d:38:d7:23:f5:4e:bb:fa:69:e0:94: 96:b4:0b:6a:92:59:06:b4:72:cd:e7:23:fc:e0:e1: b9:6d:90:14:f2:ee:5f:16:d5:aa:46:27:a7:ad:9b: 6b:be:49:f9:27:c6:65:11:9a:db:43:6a:2f:32:c8: 86:5e:a0:e1:a3:f0:15:a6:24:21:f1:15:d9:fe:88: b7:ee:d7:9d:a0:e4:03:a4:b7:c9:04:3b:35:b9:23: 5a:61:67:1d:bb:95:e1:68:77:08:6d:11:32:97:c0: 1c:4f:ba:39:d4:be:b0:6a:f2:03:6d:06:a3:25:8f: e2:44:1f:ca:56:7c:76:3f:16:96:9a:4b:45:29:de: 9a:d1:00:55:04:f7:b9:83:62:54:d2:be:d8:fd:dd: e0:7f:e1:b1:63:3c:3e:52:45:5a:95:1a:50:14:ef: c7:79:ac:7f:34:3e:7d:7b:cf:79:ae:8e:85:37:3e: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 172.93.124.0/22 IPv6: 2620:131:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394015 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cd:82:97:7e:ae:23:51:33:39:32:c7:7f:5d:8e:ed:59:27: db:3d:d8:10:7d:55:24:61:30:d9:97:26:5e:07:b0:f4:ff:e5: ef:b1:29:a0:c0:d3:14:e0:55:e2:9f:28:36:ef:79:38:2d:04: a1:88:95:db:bb:b1:aa:8e:aa:2b:c8:fb:07:2c:52:d9:47:02: ef:94:a6:1f:2d:ef:32:c7:c5:8a:b0:01:f8:c7:d3:ab:b2:6a: 24:85:3c:08:1c:b6:98:c8:7c:c8:a7:a9:a1:e0:8d:c8:f0:5b: 62:3e:40:8f:75:1a:5d:00:3a:7e:b9:0e:12:31:b1:ac:f2:33: 97:93:ab:f9:46:6c:c9:ce:bd:87:dc:b6:bd:f0:4c:7e:f4:a2: 90:9e:73:8e:b2:b0:08:38:5d:4b:49:0b:f1:a6:fc:eb:24:f4: 4a:0a:82:33:a0:21:34:36:23:3e:af:7f:0a:8b:dc:f5:5c:13: 8f:6a:f9:84:93:43:11:4c:11:3d:f3:6f:ae:6e:e5:fa:d2:76: d0:d6:e4:96:69:11:fa:a3:bf:4c:f8:81:0c:ed:a0:26:eb:9a: 47:f8:42:b8:a1:35:af:cf:fb:78:22:89:ba:46:e3:d8:c6:6a: 11:09:e3:5a:45:17:80:fa:df:69:82:4e:65:70:71:d5:2a:88: 8c:be:80:83 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEyhv17BUekMZ6YTEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEyNDEzNDUyMVoXDTI4MDQyODEyNDUyMVowLzEtMCsGA1UEAxMk MGZhZGY0YWEtZTMxMy00MWZlLWE3YTEtNjg1Yzc2ODFlYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fSKsliLsBnuEPtPPRHopbBJpSB+HkpQQvWl u5sEr03CkrlJyrfXtGJmodaKdD0mkEd6B2PcA6s6VfwJDV8CwDBLaeuvC6etQ6di hDeGjTjXI/VOu/pp4JSWtAtqklkGtHLN5yP84OG5bZAU8u5fFtWqRienrZtrvkn5 J8ZlEZrbQ2ovMsiGXqDho/AVpiQh8RXZ/oi37tedoOQDpLfJBDs1uSNaYWcdu5Xh aHcIbREyl8AcT7o51L6wavIDbQajJY/iRB/KVnx2PxaWmktFKd6a0QBVBPe5g2JU 0r7Y/d3gf+GxYzw+UkValRpQFO/Heax/ND59e895ro6FNz7eaQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLNIz/7sqpeQtvf9LvUzAOANbvHpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ZmFkZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVjNzY4MWVhZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzBmYWRmNGFhLWUzMTMtNDFmZS1h N2ExLTY4NWM3NjgxZWFkMi8wZmFkZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVjNzY4 MWVhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKsXXwwDgQCAAIwCAMGACYgATFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYDHzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXzYKXfq4jUTM5Msd/XY7tWSfb PdgQfVUkYTDZlyZeB7D0/+XvsSmgwNMU4FXinyg273k4LQShiJXbu7GqjqoryPsH LFLZRwLvlKYfLe8yx8WKsAH4x9OrsmokhTwIHLaYyHzIp6mh4I3I8FtiPkCPdRpd ADp+uQ4SMbGs8jOXk6v5RmzJzr2H3La98Ex+9KKQnnOOsrAIOF1LSQvxpvzrJPRK CoIzoCE0NiM+r38Ki9z1XBOPavmEk0MRTBE982+ubuX60nbQ1uSWaRH6o79M+IEM 7aAm65pH+EK4oTWvz/t4Iom6RuPYxmoRCeNaRReA+t9pgk5lcHHVKoiMvoCD -----END CERTIFICATE-----Generated at Sun Feb 22 12:47:26 2026 by rpki-client