Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
File:                     307456E03A11DBB48443E93538958B15B4E9E0F0.cer (raw, json)
Hash identifier:          dHowtSlKZHylOlaKprztNyXjW3qxbPzR+gcTV02g3JY=
Subject key identifier:   30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       62DB2E0FF896CA704BBB7B6B1185C32626ADDB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 23 Jul 2025 22:00:49 +0000
Certificate not after:    Wed 22 Jul 2026 22:05:49 +0000
Subordinate resources:    IP: 103.139.88.0/24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:db:2e:0f:f8:96:ca:70:4b:bb:7b:6b:11:85:c3:26:26:ad:db:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 23 22:00:49 2025 GMT
            Not After : Jul 22 22:05:49 2026 GMT
        Subject: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:10:cc:93:bc:7a:33:52:48:11:85:50:32:
                    bc:57:86:d1:8b:71:ed:00:9b:74:55:08:56:64:2c:
                    04:48:f5:22:7b:c5:c2:3b:55:a6:56:c9:8c:2c:48:
                    37:84:18:2a:94:7d:f8:73:1e:ef:70:95:f1:9c:03:
                    24:40:24:8a:2d:58:46:5d:ea:42:17:81:43:b0:f9:
                    44:0d:28:fc:5c:3c:84:fb:71:2a:6e:17:0a:d5:b6:
                    d2:5b:96:4c:a1:44:1e:40:21:f2:a5:7f:b7:21:84:
                    51:27:07:1c:6d:d7:93:9b:dc:24:3c:f5:5c:5c:2a:
                    23:90:5b:bd:19:45:f8:73:d2:51:92:62:b6:89:83:
                    a1:40:c7:92:4e:70:75:3b:6f:81:6c:84:c3:90:df:
                    3a:70:56:9d:69:10:0c:88:f3:55:e9:8a:30:4a:2e:
                    44:94:3f:80:9a:ac:ec:4c:16:84:a4:ed:9a:77:50:
                    56:ee:d0:80:28:66:46:6e:5f:ae:0e:f7:2d:10:da:
                    f9:d7:10:f5:a5:4b:9c:6b:10:c6:84:14:54:d9:8c:
                    86:7f:08:89:8c:95:dd:b7:2e:12:7a:78:90:0f:bc:
                    2f:31:ae:69:6d:95:13:07:f3:02:85:b1:b2:f2:25:
                    cf:a7:56:4f:b5:e1:d1:a7:9d:1d:4e:2f:73:82:22:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:fb:7e:94:01:80:90:e9:4e:6b:35:95:d5:23:be:50:6d:
         7e:cd:e9:73:d5:fd:84:39:07:9f:12:d2:b7:e3:65:0b:78:60:
         ab:e3:e2:07:f7:8f:a9:40:02:46:75:10:86:3f:c8:de:d8:55:
         e5:4d:85:24:a8:84:35:c2:1e:90:09:66:f7:d9:fd:6c:ea:09:
         05:83:30:f1:93:a0:fc:51:4d:f9:4a:f6:d4:db:0d:9f:3e:1c:
         a4:b8:44:f7:34:98:20:d2:ee:f0:91:cb:dc:61:e6:2b:eb:ac:
         1a:81:ef:25:2b:d8:ea:71:ad:e4:35:ae:d7:6d:31:3c:10:b8:
         96:7b:cc:40:d5:74:a5:05:51:6d:5d:7d:c3:f2:57:ef:ad:94:
         14:7b:17:69:3c:36:9e:f4:82:aa:05:47:f3:50:61:2b:93:2b:
         03:2c:80:e0:da:75:ae:ee:bd:3b:0a:4b:cb:90:80:47:08:2c:
         e4:90:b3:35:46:dc:28:5b:03:11:84:90:2b:5f:09:9d:4e:9e:
         05:d5:6c:a9:37:9d:77:5c:1e:dc:de:0d:f7:6f:14:cb:c8:f4:
         ce:c2:2e:cb:93:00:e9:eb:18:2a:57:6e:be:a4:f2:0f:71:8c:
         74:76:a9:16:8b:f6:54:32:b5:7c:7d:e5:16:87:d7:b9:09:0b:
         1a:2a:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:44:50 2025 by rpki-client