$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer File: 966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer (raw, json) Hash identifier: de+dT0AgOGUaoZ+z7lWtTeZYuwAg0FDvVYGUrVjm7zs= Subject key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 610144682FDFF3F61556ACCA7A31FC121F9E75DB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 16 Jul 2025 09:12:07 +0000 Certificate not after: Wed 15 Jul 2026 09:17:07 +0000 Subordinate resources: IP: 2a0b:4e07:a00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 20:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:01:44:68:2f:df:f3:f6:15:56:ac:ca:7a:31:fc:12:1f:9e:75:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jul 16 09:12:07 2025 GMT Not After : Jul 15 09:17:07 2026 GMT Subject: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:53:0b:d4:cc:32:a0:60:9d:65:45:24:cb:86: d3:4a:c9:06:5e:3e:d7:21:e3:14:bf:69:ac:64:c6: 95:44:9b:09:25:aa:90:d4:c3:cb:6e:32:2b:6a:83: 06:dd:f5:22:46:61:ca:2b:87:f7:8a:30:5a:06:54: ec:03:46:68:8c:73:09:6b:58:02:9e:27:ba:f4:0e: 7a:1a:38:b0:10:31:39:27:95:d3:72:09:b6:b8:60: 10:e5:b0:a9:ba:72:04:54:57:8a:d4:1a:29:c6:f1: 63:ae:cf:90:a8:b1:c4:fd:e8:39:df:88:14:0f:e4: 44:9d:32:74:54:b3:f0:f4:4a:5e:26:6f:4b:8e:d3: 38:d7:e3:73:db:a5:fb:fb:ba:ce:3d:25:fa:31:f7: ee:47:d9:57:05:b9:12:19:e6:ef:bf:36:eb:41:a2: ca:a4:cf:a6:a9:5a:69:00:c4:89:ad:e9:5d:e4:06: e3:55:a0:ee:02:75:60:26:d1:9e:61:14:2e:b7:78: 64:e1:26:ba:40:54:fc:2b:4f:f8:84:39:ea:62:da: bf:4e:f7:7f:3a:10:41:23:01:6d:a9:bf:4b:ac:a7: b0:c2:a5:80:45:87:a8:05:0b:1b:89:ca:22:ef:38: c9:39:6d:5d:13:22:81:eb:0c:d4:3e:27:4e:d7:18: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a00::/40 Signature Algorithm: sha256WithRSAEncryption 64:10:38:19:14:15:f3:62:82:df:3b:04:55:81:93:b0:dc:0a: 0e:fd:3c:24:89:c1:20:42:6a:36:b2:35:a9:9c:a3:db:40:29: bf:a6:86:d2:eb:c0:09:54:84:78:0e:60:fe:4e:6a:61:06:e8: 8a:1c:6c:bf:82:12:c3:ff:a0:ce:6e:0b:eb:f0:93:7e:98:ae: a0:5b:b0:ad:21:bf:df:86:73:7a:14:bb:f2:6b:66:7f:c5:67: 9c:ce:31:6d:8a:ff:76:44:3a:25:f7:46:8b:ee:cf:a2:b2:8c: 4b:25:f1:bc:07:41:b0:5a:4f:27:72:77:75:8c:4b:cc:5d:35: 01:b0:32:20:20:87:8a:c1:23:82:e7:46:b9:66:e8:a9:26:d7: f1:27:1a:ca:3c:6c:e5:04:e9:5a:14:46:75:80:5d:b8:ef:1a: 79:10:94:c5:95:42:e7:06:88:f3:64:65:dc:7c:08:7f:62:ab: e8:f1:dc:c0:a7:a7:d8:c6:86:c4:da:0f:eb:f6:73:cd:8b:f4: 82:97:c4:22:ae:6d:a7:e6:53:cf:aa:e3:a6:a9:b1:a5:59:57: 5e:32:e7:1c:c5:68:b4:53:79:03:ce:e9:2c:4c:8c:c8:35:85: 5e:13:b8:87:dc:bc:08:52:67:74:99:f8:3f:60:ee:60:06:af: 6e:d2:25:5e -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUYQFEaC/f8/YVVqzKejH8Eh+eddswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA3MTYwOTEyMDdaFw0yNjA3MTUwOTE3MDdaMDMxMTAvBgNV BAMTKDk2NjQyNzg2OUZDQUQxNUVDQkU0RjFDNzdBM0ZCM0M2OEJEMUY5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgUwvUzDKgYJ1lRSTLhtNKyQZe Ptch4xS/aaxkxpVEmwklqpDUw8tuMitqgwbd9SJGYcorh/eKMFoGVOwDRmiMcwlr WAKeJ7r0DnoaOLAQMTknldNyCba4YBDlsKm6cgRUV4rUGinG8WOuz5CoscT96Dnf iBQP5ESdMnRUs/D0Sl4mb0uO0zjX43Pbpfv7us49Jfox9+5H2VcFuRIZ5u+/NutB osqkz6apWmkAxImt6V3kBuNVoO4CdWAm0Z5hFC63eGThJrpAVPwrT/iEOepi2r9O 9386EEEjAW2pv0usp7DCpYBFh6gFCxuJyiLvOMk5bV0TIoHrDNQ+J07XGPWDAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWZCeGn8rRXsvk 8cd6P7PGi9H5FzAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzljN2QyNTEyLWU0YmYtNDExYi1iMDBhLWU3OWUzYTM3OGI0Ni8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvOWM3ZDI1MTItZTRiZi00MTFiLWIwMGEtZTc5ZTNhMzc4YjQ2LzEvOTY2 NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQxRjkxNy5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOBwowDQYJKoZIhvcNAQELBQADggEBAGQQOBkUFfNi gt87BFWBk7DcCg79PCSJwSBCajayNamco9tAKb+mhtLrwAlUhHgOYP5OamEG6Ioc bL+CEsP/oM5uC+vwk36YrqBbsK0hv9+Gc3oUu/JrZn/FZ5zOMW2K/3ZEOiX3Rovu z6KyjEsl8bwHQbBaTydyd3WMS8xdNQGwMiAgh4rBI4LnRrlm6Kkm1/EnGso8bOUE 6VoURnWAXbjvGnkQlMWVQucGiPNkZdx8CH9iq+jx3MCnp9jGhsTaD+v2c82L9IKX xCKubafmU8+q46apsaVZV14y5xzFaLRTeQPO6SxMjMg1hV4TuIfcvAhSZ3SZ+D9g 7mAGr27SJV4= -----END CERTIFICATE-----Generated at Tue Jul 22 00:54:56 2025 by rpki-client