Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
File:                     5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer (raw, json)
Hash identifier:          BUtLWebSrN9qok7SulnM6Tx5WUCg9m/pNEbEsn0Scpk=
Subject key identifier:   5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       5948940F08C494ACD7B48F0E6DF7172C9F0B84B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Mon 27 Apr 2026 02:29:38 +0000
Certificate not after:    Mon 26 Apr 2027 02:34:38 +0000
Subordinate resources:    IP: 2602:fba1:9a0::/44
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 03:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:48:94:0f:08:c4:94:ac:d7:b4:8f:0e:6d:f7:17:2c:9f:0b:84:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Apr 27 02:29:38 2026 GMT
            Not After : Apr 26 02:34:38 2027 GMT
        Subject: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:77:a8:b7:74:17:5d:22:80:bc:4c:e3:87:
                    2a:e9:f6:bf:75:b4:1d:7f:96:2f:e9:a8:e1:c3:e2:
                    bd:0c:08:ea:c3:9c:2a:9d:8c:60:42:4c:f6:4f:ee:
                    90:9b:c5:1a:37:9b:3d:5e:a4:d6:72:f5:c1:3c:16:
                    db:b6:9e:d0:57:26:c3:3b:1b:2e:de:e9:ea:df:39:
                    00:20:0b:ba:37:66:74:d8:51:2b:2d:39:05:20:db:
                    d5:a6:bb:73:2f:78:b0:64:ae:d3:bd:46:07:72:80:
                    b5:dd:8c:b6:64:71:d6:65:b7:9d:3e:4c:fd:a3:35:
                    65:87:d4:be:69:6c:3d:ed:6c:ad:2f:32:5a:bc:a1:
                    0c:b7:e2:a1:ce:3e:93:6e:13:e5:f8:1e:c8:63:32:
                    e0:71:99:06:11:b1:0e:41:02:5a:84:a1:9b:48:9b:
                    5c:aa:b8:2f:7b:fa:d6:b5:64:70:75:6c:f4:47:2f:
                    c0:73:ac:07:85:8c:74:15:f9:1e:ac:6e:17:09:dd:
                    20:25:46:77:38:5d:f3:76:44:c7:b4:80:3b:a1:31:
                    b5:27:20:8c:42:53:b7:dd:64:80:23:31:16:97:48:
                    81:22:49:94:91:b5:64:52:21:e3:e6:2a:00:27:2f:
                    57:e1:c4:39:81:83:12:02:13:c6:c1:ff:b2:cf:f1:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:db:11:d2:77:37:98:4a:90:43:0c:cf:90:1a:47:fd:e4:
         42:d7:44:ae:51:ea:37:6f:5a:8e:e0:a6:ac:87:44:c1:e6:31:
         30:27:b2:a3:77:e0:fd:ef:e4:5b:0c:ac:34:e3:b3:ca:bc:de:
         18:01:4f:68:5e:9f:f4:47:6b:0d:77:eb:97:33:1e:c1:63:be:
         4b:3b:49:d3:dd:d2:46:59:fb:34:08:6f:92:ea:db:bc:1e:57:
         8d:f5:69:00:a3:32:1e:40:d4:4b:69:b5:fa:b0:1f:9b:0c:08:
         94:84:1d:7d:2d:0b:0f:60:49:95:0e:83:7b:be:2b:ac:99:45:
         da:bf:1e:db:df:c4:69:d6:3f:6c:88:16:cb:34:ba:34:44:dc:
         1d:ef:16:e3:12:3e:94:d4:96:64:4b:d0:54:2d:82:5f:54:be:
         34:57:27:e7:7c:88:1c:c5:d2:96:8f:17:ae:89:08:28:0b:8f:
         ce:0b:3a:ce:9d:af:06:35:43:44:6a:d5:69:b0:31:c5:c6:d0:
         10:8d:b7:f1:05:17:8b:e1:07:58:e0:37:18:9f:99:73:d2:2c:
         e0:12:4c:50:b4:77:8c:d7:b2:db:4d:31:c9:9f:16:1d:7c:1e:
         f2:7a:50:ca:79:67:08:51:f9:cf:82:e6:17:4d:4a:ad:56:e2:
         d7:a5:83:df
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIUWUiUDwjElKzXtI8ObfcXLJ8LhLEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjYwNDI3MDIyOTM4WhcNMjcwNDI2MDIzNDM4
WjAzMTEwLwYDVQQDEyg1QTk2Qjg5ODVBOEU2MkZCMTA5NDI0OEQzQjVCNEEzQkIy
NDM2OUVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzId3qLd0F10i
gLxM44cq6fa/dbQdf5Yv6ajhw+K9DAjqw5wqnYxgQkz2T+6Qm8UaN5s9XqTWcvXB
PBbbtp7QVybDOxsu3unq3zkAIAu6N2Z02FErLTkFINvVprtzL3iwZK7TvUYHcoC1
3Yy2ZHHWZbedPkz9ozVlh9S+aWw97WytLzJavKEMt+Khzj6TbhPl+B7IYzLgcZkG
EbEOQQJahKGbSJtcqrgve/rWtWRwdWz0Ry/Ac6wHhYx0FfkerG4XCd0gJUZ3OF3z
dkTHtIA7oTG1JyCMQlO33WSAIzEWl0iBIkmUkbVkUiHj5ioAJy9X4cQ5gYMSAhPG
wf+yz/H7ewIDAQABo4IDBDCCAwAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
Wpa4mFqOYvsQlCSNO1tKO7JDaewwHwYDVR0jBBgwFoAUa+wa7WUIuwdRGwGxd1UX
ktrrLJAwDgYDVR0PAQH/BAQDAgEGMG8GA1UdHwRoMGYwZKBioGCGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzIvNkJFQzFB
RUQ2NTA4QkIwNzUxMUIwMUIxNzc1NTE3OTJEQUVCMkM5MC5jcmwwgfMGCCsGAQUF
BwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9y
ZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0y
MTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1
L2MxMzAzNWNkLWM0NmQtNDIxYy1iOWUwLWU2ZDRkZDMzNmQyMS9jYmVjNjM0YjA3
ZjUwZjNlODA0MjNhN2MxMTFhZTkyMTNiNTA2Yjc4YmY5OTI0YWQ0Mi5jZXIwgfcG
CCsGAQUFBwELBIHqMIHnMD0GCCsGAQUFBzAFhjFyc3luYzovL3Jwa2ktMDEucGR4
bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzUvMGkGCCsGAQUFBzAKhl1yc3lu
YzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzUvNUE5
NkI4OTg1QThFNjJGQjEwOTQyNDhEM0I1QjRBM0JCMjQzNjlFQy5tZnQwOwYIKwYB
BQUHMA2GL2h0dHBzOi8vcnBraS0wMS5wZHhuZXQudWsvcnJkcC9ub3RpZmljYXRp
b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvuhCaAwDQYJKoZIhvcNAQELBQADggEBAEDc2xHSdzeY
SpBDDM+QGkf95ELXRK5R6jdvWo7gpqyHRMHmMTAnsqN34P3v5FsMrDTjs8q83hgB
T2hen/RHaw1365czHsFjvks7SdPd0kZZ+zQIb5Lq27weV431aQCjMh5A1Etptfqw
H5sMCJSEHX0tCw9gSZUOg3u+K6yZRdq/HtvfxGnWP2yIFss0ujRE3B3vFuMSPpTU
lmRL0FQtgl9UvjRXJ+d8iBzF0paPF66JCCgLj84LOs6drwY1Q0Rq1WmwMcXG0BCN
t/EFF4vhB1jgNxifmXPSLOASTFC0d4zXsttNMcmfFh18HvJ6UMp5ZwhR+c+C5hdN
Sq1W4telg98=
-----END CERTIFICATE-----
Generated at Mon Apr 27 05:51:53 2026 by rpki-client