$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/9X0AhXWTJDl8lJhfOwvnac-42CA.spl
File:                     9X0AhXWTJDl8lJhfOwvnac-42CA.spl (raw, json)
Hash identifier:          08ayE5TbetBJgYaYU8fig/q/3qUAnHrcE599AcMkAvI=
Subject key identifier:   F5:7D:00:85:75:93:24:39:7C:94:98:5F:3B:0B:E7:69:CF:B8:D8:20
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       A1C7752FF8B1D2E023
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/9X0AhXWTJDl8lJhfOwvnac-42CA.spl
Signing time:             Tue 27 Feb 2024 18:04:04 +0000
SPL not before:           Tue 27 Feb 2024 18:03:48 +0000
SPL not after:            Wed 26 Feb 2025 18:03:48 +0000
asID:                     15562
Originated IP Prefixes:   67.221.245.0/24
                          165.254.225.0/24
                          165.254.255.0/26
                          192.147.168.0/24
                          194.32.71.0/24
                          198.58.3.0/24
                          204.2.30.0/23
                          209.24.0.0/24
                          209.24.1.0/24
                          209.24.3.0/24
                          209.24.4.0/22
                          209.24.8.0/21
                          209.24.8.0/24
                          209.24.9.0/24
                          209.24.16.0/20
                          209.24.32.0/19
                          209.24.64.0/18
                          209.24.128.0/17
                          2001:418:144e::/47
                          2001:67c:208c::/48
                          2001:7fb:fd04::/48
                          2607:fae0:245::/48
                          2a0e:b240::/48

Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
                          rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 11:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:c7:75:2f:f8:b1:d2:e0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Feb 27 18:03:48 2024 GMT
            Not After : Feb 26 18:03:48 2025 GMT
        Subject: CN=1709056991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:db:dd:96:da:9a:d1:52:0f:60:1c:b3:ad:
                    2b:e4:28:a8:9c:84:be:7e:fd:9c:ad:80:1b:4e:b1:
                    3c:22:37:8d:cb:2d:be:81:0c:ca:3a:25:70:12:0e:
                    64:42:60:28:d8:ba:d7:9b:b3:d6:73:89:3e:8d:01:
                    bc:b0:15:c3:06:85:0e:29:c9:bf:e7:5d:29:c5:c8:
                    87:4b:44:e9:40:ed:55:ed:74:f2:0e:65:af:c5:ca:
                    cc:c6:9e:c0:35:a4:5f:68:ef:6f:a8:19:b2:54:62:
                    0a:fc:81:71:b3:12:5b:1b:eb:1e:66:da:ef:38:62:
                    ed:f2:25:1a:3b:52:c9:c9:02:39:27:c0:05:a4:37:
                    f6:d9:d3:79:aa:12:82:14:46:09:3a:e8:6a:df:16:
                    38:b9:09:91:7a:c1:49:50:cc:ba:9a:94:78:06:43:
                    b8:92:05:8c:da:9b:fe:28:73:f4:96:e1:64:f9:51:
                    00:c3:fd:e9:13:ab:47:92:dc:91:f7:df:c3:2d:3b:
                    39:c7:a8:db:b0:d4:39:46:e7:7c:1a:af:3e:de:cc:
                    9f:cf:88:c4:e5:79:43:18:b0:85:05:26:a1:94:3f:
                    b5:99:37:10:f4:5e:b8:d5:19:98:c1:e9:d5:35:c6:
                    ec:41:42:f9:28:a1:f5:32:45:41:13:a1:fd:28:63:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Key Identifier:
                F5:7D:00:85:75:93:24:39:7C:94:98:5F:3B:0B:E7:69:CF:B8:D8:20
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15562

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/9X0AhXWTJDl8lJhfOwvnac-42CA.spl

    Signature Algorithm: sha256WithRSAEncryption
         74:40:ab:f6:20:15:6d:d8:6b:0e:c8:eb:d4:c3:b5:9f:c8:9f:
         40:a6:cc:4c:49:45:04:41:24:fe:09:a5:c1:15:03:2a:2e:07:
         0a:f4:f9:32:d0:a5:39:ef:a0:33:c1:3e:88:94:55:fd:0f:8f:
         8c:bc:1f:e2:00:8e:99:f0:19:80:31:05:77:b7:e8:bd:58:48:
         a2:af:1b:20:66:54:d4:4c:b1:fd:5c:fa:0e:03:60:62:dd:b3:
         23:1d:52:b7:d8:72:eb:b7:b3:7d:c6:79:96:1b:9e:00:9a:f0:
         af:ef:81:58:6a:0e:b4:74:be:d3:d1:5e:86:1e:2d:f7:32:57:
         fd:24:2f:2e:11:00:ee:d5:ce:2e:65:15:2a:74:72:f4:c1:34:
         bf:db:90:e6:58:e5:25:4d:cb:12:42:14:87:a0:9a:2c:b3:f8:
         2f:1d:77:14:ff:12:62:39:62:54:44:50:40:45:99:c6:00:91:
         3e:10:ae:1e:2f:b1:1b:19:06:3f:2c:45:02:ef:db:b9:94:f1:
         b3:4a:12:4c:a0:c5:22:2e:56:74:46:8d:14:d4:bc:68:56:ed:
         67:2e:71:72:50:b9:30:44:c8:f9:46:f5:8a:60:fc:77:b1:ba:
         6d:e8:4c:1d:0e:ba:35:9c:8c:86:fe:d3:70:f4:f2:24:0b:77:
         dd:60:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:00:26 2024 by rpki-client on console-fra.rpki-client.org