$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer File: EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer (raw, json) Hash identifier: nqbm/ck95+wbtEz+tKQh4YIsjWegHxeLuSGdtjvCTl8= Subject key identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4CFBFF50255F4F34CE48617653B55F6E0C663EDB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 05 Jul 2025 10:40:01 +0000 Certificate not after: Sat 04 Jul 2026 10:45:01 +0000 Subordinate resources: IP: 2a07:54c1:d000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fb:ff:50:25:5f:4f:34:ce:48:61:76:53:b5:5f:6e:0c:66:3e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 5 10:40:01 2025 GMT Not After : Jul 4 10:45:01 2026 GMT Subject: CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:97:2e:8c:23:fb:4f:ec:b4:e8:07:4a:1a: c4:43:1c:4e:23:b3:83:09:f4:c1:8c:94:78:9e:ef: a1:a2:53:f8:0f:7e:cc:85:9f:1d:0f:a4:75:78:71: 35:4a:c6:c8:db:f8:1b:cf:76:c7:88:a3:83:f8:36: aa:0a:f9:b7:06:e9:84:ea:d8:6f:f2:4c:13:0a:95: e3:61:c6:7c:24:23:de:1b:e6:bf:83:98:48:5e:f0: 6f:46:4f:d7:11:a4:69:a8:fd:a6:96:48:c9:12:fe: 3a:54:1a:af:f6:3e:b4:fa:43:34:f7:59:f4:f3:26: 70:22:ee:48:21:0d:63:da:6b:63:61:c6:8c:9c:f2: 70:31:32:dd:7b:3a:24:4a:71:d3:0f:79:84:80:b0: 0d:37:c5:80:42:e3:be:f5:b6:dd:46:ec:20:be:e7: 50:de:da:4e:f9:91:0e:a5:86:08:f4:dd:18:55:12: 50:2f:14:3a:41:8c:d0:e2:e3:d3:52:7a:92:c8:b8: 64:2e:57:a7:b3:44:5a:4c:55:50:e7:08:30:de:f7: 04:86:bd:4e:51:4e:7a:4b:95:b6:81:e6:1f:7c:95: 68:d5:39:ee:55:22:19:43:5a:57:be:2c:e8:f9:b9: e0:d6:a9:b0:f4:28:40:b2:9e:01:a7:7f:4a:f8:ed: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:d000::/36 Signature Algorithm: sha256WithRSAEncryption 35:35:88:d9:88:a7:ca:9b:f3:10:b1:4c:d8:5e:ea:9c:8c:21: 2b:b7:88:03:f5:48:8c:06:75:c8:6e:66:ac:49:f7:4a:f9:91: 8d:1d:b5:d5:61:92:94:db:da:95:2d:62:e2:f7:1d:d9:81:c0: 95:c5:d4:0f:69:bb:16:d1:d0:60:64:1a:1e:69:ab:83:10:50: eb:18:87:12:83:05:f7:15:c6:f7:c5:04:55:b4:f4:b8:89:a4: e4:fc:76:9a:2c:10:e2:50:73:a2:3c:01:ef:72:b7:3d:98:eb: 5c:27:c5:56:da:5a:a2:16:64:cc:00:76:d6:43:ad:84:99:27: 94:8d:4f:f7:83:4d:ff:98:af:4d:2d:41:69:87:cd:e5:3a:f3: 0f:4c:5d:b0:37:e5:63:79:fc:90:9b:38:6d:3e:de:7d:25:f7: a6:58:99:fc:db:76:44:f1:32:7c:cf:6d:45:11:9b:da:90:17: 44:5f:63:a9:d1:8f:9e:db:a9:b5:37:73:20:0d:ad:aa:04:26: 86:ee:17:0e:eb:1d:c8:16:49:94:21:84:69:59:71:5e:94:c0: 5a:80:55:20:9d:49:5f:02:39:7e:7e:91:b3:94:04:3d:09:76: cf:8d:f6:51:6f:50:2f:8f:6f:b0:6a:40:91:de:14:b2:86:03: df:86:5d:ff -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUTPv/UCVfTzTOSGF2U7VfbgxmPtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDUxMDQwMDFaFw0yNjA3MDQxMDQ1MDFaMDMxMTAvBgNV BAMTKEVERUE0OTFFMzY2OTUyQkIzNUUxNEM1N0IyQzdEQzYwNEMyOTA4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UpcujCP7T+y06AdKGsRDHE4j s4MJ9MGMlHie76GiU/gPfsyFnx0PpHV4cTVKxsjb+BvPdseIo4P4NqoK+bcG6YTq 2G/yTBMKleNhxnwkI94b5r+DmEhe8G9GT9cRpGmo/aaWSMkS/jpUGq/2PrT6QzT3 WfTzJnAi7kghDWPaa2Nhxoyc8nAxMt17OiRKcdMPeYSAsA03xYBC4771tt1G7CC+ 51De2k75kQ6lhgj03RhVElAvFDpBjNDi49NSepLIuGQuV6ezRFpMVVDnCDDe9wSG vU5RTnpLlbaB5h98lWjVOe5VIhlDWle+LOj5ueDWqbD0KECyngGnf0r47fAxAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTt6kkeNmlSuzXh TFeyx9xgTCkIwTAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZTkxZmI0M2I0MDE5MmJhY2I3YWJiN2EyOC80LzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk ZTkxZmI0M2I0MDE5MmJhY2I3YWJiN2EyOC80L0VERUE0OTFFMzY2OTUyQkIzNUUx NEM1N0IyQzdEQzYwNEMyOTA4QzEubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoHVMHQMA0G CSqGSIb3DQEBCwUAA4IBAQA1NYjZiKfKm/MQsUzYXuqcjCErt4gD9UiMBnXIbmas SfdK+ZGNHbXVYZKU29qVLWLi9x3ZgcCVxdQPabsW0dBgZBoeaauDEFDrGIcSgwX3 Fcb3xQRVtPS4iaTk/HaaLBDiUHOiPAHvcrc9mOtcJ8VW2lqiFmTMAHbWQ62EmSeU jU/3g03/mK9NLUFph83lOvMPTF2wN+VjefyQmzhtPt59JfemWJn823ZE8TJ8z21F EZvakBdEX2Op0Y+e26m1N3MgDa2qBCaG7hcO6x3IFkmUIYRpWXFelMBagFUgnUlf Ajl+fpGzlAQ9CXbPjfZRb1Avj2+wakCR3hSyhgPfhl3/ -----END CERTIFICATE-----Generated at Wed Jul 23 12:25:37 2025 by rpki-client