$ rpki-client -vvf rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/1681BE1696F469A56F60C82B2BCC25661BC29C58.cer File: 1681BE1696F469A56F60C82B2BCC25661BC29C58.cer (raw, json) Hash identifier: hQdxz1xrlSwcCar4jmGGKkufz9smgRkfY48MZmaesYY= Subject key identifier: 16:81:BE:16:96:F4:69:A5:6F:60:C8:2B:2B:CC:25:66:1B:C2:9C:58 Authority key identifier: 32:56:29:5B:AE:B7:21:74:BD:12:23:0A:9B:59:25:1E:78:AC:EE:2C Certificate issuer: /CN=8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464 Certificate serial: 4BF586A80C60A95775F55ECC2D75ED7FC39A98EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/3/1681BE1696F469A56F60C82B2BCC25661BC29C58.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 28 Apr 2026 03:57:25 +0000 Certificate not after: Tue 27 Apr 2027 04:02:25 +0000 Subordinate resources: IP: 142.249.174.0/24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/3256295BAEB72174BD12230A9B59251E78ACEE2C.crl rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/3256295BAEB72174BD12230A9B59251E78ACEE2C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/6d4f8857-fb8e-408f-a909-48a6df4a5a51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/6d4f8857-fb8e-408f-a909-48a6df4a5a51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 02:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f5:86:a8:0c:60:a9:57:75:f5:5e:cc:2d:75:ed:7f:c3:9a:98:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464 Validity Not Before: Apr 28 03:57:25 2026 GMT Not After : Apr 27 04:02:25 2027 GMT Subject: CN=1681BE1696F469A56F60C82B2BCC25661BC29C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ad:c4:e2:cf:82:08:6b:25:26:78:1a:08:d2: af:92:df:98:c4:f0:82:2a:f7:43:9e:87:58:dd:36: 35:da:66:68:bd:0c:1f:b3:7f:b3:74:9e:eb:e6:56: 4a:b7:bc:f5:d1:17:2a:7c:04:4f:cf:48:6a:87:76: 7c:e0:ec:c1:c2:20:3a:dd:fd:4b:f9:45:1e:1c:40: 4e:f0:2a:11:87:de:63:9e:4b:6d:32:d3:03:4a:de: 0d:20:9a:2d:9c:88:11:a5:95:1c:a2:e6:70:78:8d: d6:1a:2d:05:62:1f:17:ee:17:90:ac:6c:a2:be:9e: b4:6f:a2:96:3e:5e:72:01:c3:c9:95:2e:13:43:07: d4:58:cd:f5:5c:62:8e:7b:13:c3:35:2d:f3:bc:da: 44:00:af:a7:94:fd:31:15:aa:9c:13:0b:23:82:df: e2:5a:58:59:3a:d0:f3:78:3c:62:0e:33:ff:b6:e9: 6a:5b:1c:66:c2:df:81:9e:52:31:e1:1e:c9:a5:35: ac:bd:fd:b7:28:0a:76:59:7e:82:e2:f9:74:d9:45: 54:5b:b9:90:8a:5a:7a:3e:52:81:76:cf:5e:d0:11: 9b:74:0c:d4:bc:63:a8:4d:46:40:cd:6b:d4:3c:95: 07:0c:b1:57:b0:03:84:cb:de:4d:e8:ae:19:4b:9b: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:81:BE:16:96:F4:69:A5:6F:60:C8:2B:2B:CC:25:66:1B:C2:9C:58 X509v3 Authority Key Identifier: keyid:32:56:29:5B:AE:B7:21:74:BD:12:23:0A:9B:59:25:1E:78:AC:EE:2C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/3256295BAEB72174BD12230A9B59251E78ACEE2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/3/1681BE1696F469A56F60C82B2BCC25661BC29C58.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.249.174.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:24:f4:22:18:50:62:8f:a5:5f:e6:6b:6d:ec:e4:d9:c4:44: a1:4c:24:9b:d0:1a:8f:52:3e:0d:a9:d4:d6:07:2e:15:0c:b2: c3:41:88:84:fd:67:69:66:9e:d3:17:d0:09:e1:85:ed:ee:4a: d0:d9:8c:b7:59:6b:fe:77:79:44:6b:0e:b3:00:6f:56:40:1c: e5:52:7c:cc:73:ec:13:1c:7b:c9:dc:d8:01:ae:fc:80:57:88: 12:82:c9:91:23:72:be:09:a9:14:2f:1d:fa:8b:11:8d:f4:10: 78:da:fc:92:dd:aa:41:4b:8f:0f:e1:43:02:b2:c9:43:08:b9: e4:ed:1e:ad:e6:af:44:76:db:54:32:5a:99:51:a1:4b:c9:1d: fd:53:35:c5:d6:98:d7:87:ac:7c:d3:58:ae:f7:d4:60:b8:f3: 7b:88:42:c9:4d:d1:7f:7e:e2:56:8d:c6:81:fd:8c:89:e0:d6: 87:6e:58:aa:57:76:0d:98:0d:33:b1:91:95:fe:3d:d6:81:28: a9:b1:b0:80:86:b1:56:1a:5a:9e:a3:cb:46:ae:de:64:8d:65: 54:ae:44:c4:c5:00:04:c3:59:17:94:16:fe:76:27:96:b0:2b: 5b:92:36:1a:15:ea:c3:e9:15:dd:1e:32:ec:e5:c1:e8:f4:de: 78:95:e8:88 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUS/WGqAxgqVd19V7MLXXtf8OamO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOGQzNmFkOWIzZGNkMTE3OTk1MWI2NGMyMDIzYjlmNTkz YzNhNTc3MGUxZTVjNDI0NjQwHhcNMjYwNDI4MDM1NzI1WhcNMjcwNDI3MDQwMjI1 WjAzMTEwLwYDVQQDEygxNjgxQkUxNjk2RjQ2OUE1NkY2MEM4MkIyQkNDMjU2NjFC QzI5QzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh63E4s+CCGsl JngaCNKvkt+YxPCCKvdDnodY3TY12mZovQwfs3+zdJ7r5lZKt7z10RcqfARPz0hq h3Z84OzBwiA63f1L+UUeHEBO8CoRh95jnkttMtMDSt4NIJotnIgRpZUcouZweI3W Gi0FYh8X7heQrGyivp60b6KWPl5yAcPJlS4TQwfUWM31XGKOexPDNS3zvNpEAK+n lP0xFaqcEwsjgt/iWlhZOtDzeDxiDjP/tulqWxxmwt+BnlIx4R7JpTWsvf23KAp2 WX6C4vl02UVUW7mQilp6PlKBds9e0BGbdAzUvGOoTUZAzWvUPJUHDLFXsAOEy95N 6K4ZS5sKNwIDAQABo4IDYTCCA10wDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU FoG+Fpb0aaVvYMgrK8wlZhvCnFgwHwYDVR0jBBgwFoAUMlYpW663IXS9EiMKm1kl Hnis7iwwDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvNTQ1YjZjOGIyNmQyNGM5Yjg0 MGNkMDQ1YWFkYWRjMWEvMC8zMjU2Mjk1QkFFQjcyMTc0QkQxMjIzMEE5QjU5MjUx RTc4QUNFRTJDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFm LTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmQ0Zjg4NTctZmI4ZS00MDhmLWE5MDkt NDhhNmRmNGE1YTUxLzhkMzZhZDliM2RjZDExNzk5NTFiNjRjMjAyM2I5ZjU5M2Mz YTU3NzBlMWU1YzQyNDY0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYB BQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5NzVjLzMvMIGLBggr BgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMy8xNjgx QkUxNjk2RjQ2OUE1NkY2MEM4MkIyQkNDMjU2NjFCQzI5QzU4Lm1mdDA8BggrBgEF BQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACO+a4wDQYJKoZIhvcNAQELBQADggEBAC8k9CIYUGKPpV/m a23s5NnERKFMJJvQGo9SPg2p1NYHLhUMssNBiIT9Z2lmntMX0Anhhe3uStDZjLdZ a/53eURrDrMAb1ZAHOVSfMxz7BMce8nc2AGu/IBXiBKCyZEjcr4JqRQvHfqLEY30 EHja/JLdqkFLjw/hQwKyyUMIueTtHq3mr0R221QyWplRoUvJHf1TNcXWmNeHrHzT WK731GC483uIQslN0X9+4laNxoH9jIng1oduWKpXdg2YDTOxkZX+PdaBKKmxsICG sVYaWp6jy0au3mSNZVSuRMTFAATDWReUFv52J5awK1uSNhoV6sPpFd0eMuzlwej0 3niV6Ig= -----END CERTIFICATE-----Generated at Thu Apr 30 13:28:44 2026 by rpki-client