$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer File: 99EA551918C05BC3D918A731137DF0B86224F868.cer (raw, json) Hash identifier: 8w5sNzEZ6QjCW+krSciRTPbUehHLburSdk6NqfOL8Eg= Subject key identifier: 99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5F6A4B58232DEC7CC61E6AAA29AE7C9DF59CA896 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 12 Oct 2026 20:06:00 +0000 Certificate not after: Mon 11 Oct 2027 20:11:00 +0000 Subordinate resources: IP: 2a0b:4e07:5d00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Oct 2026 19:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6a:4b:58:23:2d:ec:7c:c6:1e:6a:aa:29:ae:7c:9d:f5:9c:a8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 12 20:06:00 2026 GMT Not After : Oct 11 20:11:00 2027 GMT Subject: CN=99EA551918C05BC3D918A731137DF0B86224F868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:da:e1:b9:26:ab:5e:a1:5b:82:15:5e:f9: 5d:29:78:92:c7:c7:f1:ff:72:b5:38:20:b6:8e:9c: 2b:49:64:04:57:c8:33:a9:ea:1a:91:a1:d9:7d:89: 10:e2:81:b7:3d:e4:c3:01:c5:ec:95:c9:18:5f:71: c8:83:f9:ea:fe:41:fa:c8:a0:27:20:08:e5:69:85: 69:78:21:22:f9:88:8a:9c:92:2d:31:48:29:2e:ca: 06:c0:bd:fa:6b:14:ee:a9:8f:cf:d5:38:b3:82:ee: a6:69:3f:22:ee:20:61:73:93:46:6c:cb:30:aa:96: e0:be:a6:85:cf:46:05:4f:d8:04:08:ab:62:10:9d: c8:b0:1c:cd:36:f0:db:64:a7:9b:f2:5e:80:f7:6c: 76:53:56:5d:df:99:89:7f:2a:0a:9f:ec:9f:50:b5: 84:14:2b:81:ff:bd:92:e5:5b:6b:0f:74:d8:87:a9: aa:60:e6:b7:5d:9a:18:6f:fc:cc:0e:b8:a6:f2:3e: cb:54:86:98:d9:70:2e:3e:81:63:0f:eb:5c:2a:69: 7c:79:37:c4:c9:32:85:4e:5e:be:cb:29:9a:03:cc: c2:bd:f3:25:18:a7:f6:e6:97:b9:71:26:cc:48:49: 2f:cf:aa:ea:41:61:b8:99:60:5f:6d:d4:b1:2e:a8: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5d00::/40 Signature Algorithm: sha256WithRSAEncryption 60:99:2b:dc:0a:1b:13:6c:a3:45:07:12:b7:c0:37:95:72:94: 7f:0a:6f:24:7d:23:e6:d2:63:5a:e2:e0:6b:c0:06:60:cb:f8: 38:95:fd:2e:c7:7c:c4:f6:cc:49:37:61:2c:16:17:23:74:0e: fe:c9:a3:be:56:96:4d:26:1b:63:77:8d:e2:aa:c3:3d:58:27: 25:a9:82:32:fa:d9:3c:6e:2d:b5:7d:00:4a:ac:0e:a6:2c:bc: 06:b4:35:82:12:be:54:cb:dc:f1:ea:8d:c0:45:92:8b:e1:68: 7b:75:40:ea:1f:35:79:ee:d7:f2:ba:ad:f9:52:47:d0:97:d0: 6a:fe:38:c4:dc:fd:e5:9e:b1:23:66:9c:4e:4e:1e:61:d0:1e: 2e:98:e7:02:d4:41:96:49:3d:96:ee:e4:0a:fe:18:08:6a:72: f1:99:d6:ab:94:cc:0a:41:0a:6d:4e:40:c9:ae:c0:af:74:d5: e6:7e:af:36:bc:29:f8:7f:56:fa:c3:0b:03:a7:33:d4:5a:f0: 4c:03:b9:71:8f:3c:92:21:c7:61:fb:77:b6:3b:03:1e:5f:4c: 6e:2c:ee:d0:43:ce:de:a6:63:c3:94:1c:a2:3d:66:b1:e9:51: ef:89:3d:30:26:0b:06:ff:97:6f:63:2b:a4:fd:1c:c3:64:d4: 2b:8a:2a:6a -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUX2pLWCMt7HzGHmqqKa58nfWcqJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMTIyMDA2MDBaFw0yNzEwMTEyMDExMDBaMDMxMTAvBgNV BAMTKDk5RUE1NTE5MThDMDVCQzNEOTE4QTczMTEzN0RGMEI4NjIyNEY4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8NrhuSarXqFbghVe+V0peJLH x/H/crU4ILaOnCtJZARXyDOp6hqRodl9iRDigbc95MMBxeyVyRhfcciD+er+QfrI oCcgCOVphWl4ISL5iIqcki0xSCkuygbAvfprFO6pj8/VOLOC7qZpPyLuIGFzk0Zs yzCqluC+poXPRgVP2AQIq2IQnciwHM028Ntkp5vyXoD3bHZTVl3fmYl/Kgqf7J9Q tYQUK4H/vZLlW2sPdNiHqapg5rddmhhv/MwOuKbyPstUhpjZcC4+gWMP61wqaXx5 N8TJMoVOXr7LKZoDzMK98yUYp/bml7lxJsxISS/PqupBYbiZYF9t1LEuqApzAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZ6lUZGMBbw9kY pzETffC4YiT4aDAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2I2M2FmODc5LWJhZWYtNGRlNC05NmQ3LWFhYmE2ZDlkOGU1Zi8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYjYzYWY4NzktYmFlZi00ZGU0LTk2ZDctYWFiYTZkOWQ4ZTVmLzEvOTlF QTU1MTkxOEMwNUJDM0Q5MThBNzMxMTM3REYwQjg2MjI0Rjg2OC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOB10wDQYJKoZIhvcNAQELBQADggEBAGCZK9wKGxNs o0UHErfAN5VylH8KbyR9I+bSY1ri4GvABmDL+DiV/S7HfMT2zEk3YSwWFyN0Dv7J o75Wlk0mG2N3jeKqwz1YJyWpgjL62TxuLbV9AEqsDqYsvAa0NYISvlTL3PHqjcBF kovhaHt1QOofNXnu1/K6rflSR9CX0Gr+OMTc/eWesSNmnE5OHmHQHi6Y5wLUQZZJ PZbu5Ar+GAhqcvGZ1quUzApBCm1OQMmuwK901eZ+rza8Kfh/VvrDCwOnM9Ra8EwD uXGPPJIhx2H7d7Y7Ax5fTG4s7tBDzt6mY8OUHKI9ZrHpUe+JPTAmCwb/l29jK6T9 HMNk1CuKKmo= -----END CERTIFICATE-----Generated at Fri Oct 30 11:55:51 2026 by rpki-client