$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer (raw, json) Hash identifier: ZzJGDKABJNXiFlQEFURyyp+Lr/iriVq5CRC0YkfOlMI= Subject key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 67CD7EF83E1234C02345BD64808069178C86F7A7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 25 Jun 2026 22:38:29 +0000 Certificate not after: Thu 24 Jun 2027 22:43:29 +0000 Subordinate resources: IP: 2a0b:4e07:1c00::/38 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cd:7e:f8:3e:12:34:c0:23:45:bd:64:80:80:69:17:8c:86:f7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jun 25 22:38:29 2026 GMT Not After : Jun 24 22:43:29 2027 GMT Subject: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:89:22:8a:58:78:9d:67:15:f5:5e:b1:4c: 56:5b:c1:24:71:3a:7f:73:4e:d7:9e:ef:6a:35:36: 1e:a0:83:62:53:45:b4:8d:c3:18:42:fd:13:4f:05: 72:c2:67:6a:a8:a8:02:69:5b:73:25:6b:89:53:c2: 91:19:8b:4d:24:42:41:c0:de:08:19:6c:39:c3:26: a5:29:2a:eb:e9:54:bf:32:b9:23:3d:fe:53:ce:e5: d0:57:e9:e0:42:b1:58:3f:89:c0:57:23:8e:c2:c6: 8b:f3:10:06:06:a6:16:1b:fe:fb:3d:45:45:1b:ef: f9:8e:6a:08:2e:6b:21:f9:98:06:54:ee:1d:16:5f: 17:39:e0:2d:7f:10:33:0d:11:de:b3:6d:cd:d1:00: 60:d2:eb:a8:40:0d:56:0b:38:9c:25:b9:a7:a5:52: 80:f4:53:6b:b8:88:cb:60:f9:72:a9:1a:87:83:69: 4e:24:71:9e:ac:7c:e8:08:06:fa:e9:9e:b1:ae:39: a1:09:93:34:3a:d5:20:d7:89:44:ff:f5:66:13:60: 39:15:3e:dc:b1:61:7a:4a:84:b2:2d:f7:71:31:48: 40:85:5a:ae:ca:8b:4b:a1:9a:c8:c9:23:32:79:bf: d3:58:d0:76:58:a3:d0:58:b9:e1:ba:5f:d8:cf:a2: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c00::/38 Signature Algorithm: sha256WithRSAEncryption 33:45:8a:a2:95:0a:9b:08:28:7c:db:50:93:28:be:42:f0:a1: b5:94:f6:98:6c:18:7e:d7:e8:56:b7:e3:e5:36:9c:9d:61:4b: 5c:2e:df:bb:ad:f5:a3:d0:13:5d:6a:12:d6:e9:b4:b7:94:77: 45:76:0e:2a:05:7c:3c:ef:85:8a:a0:a5:68:c8:7f:44:fc:04: f9:93:e4:57:9e:6e:50:f3:8e:f2:42:1b:f4:a0:52:6e:aa:39: ca:9d:a9:e1:42:8d:97:61:24:70:67:30:c1:77:3c:6c:87:3d: 1c:0a:f2:29:6f:e9:9c:f6:2e:44:66:29:73:bd:51:a2:d8:0b: cc:12:cf:90:db:6f:b1:6c:e9:f9:69:71:16:77:c2:80:d7:07: a0:27:d5:e3:ab:ed:1c:13:c5:0e:70:31:5d:a6:c5:30:8a:d1: 39:04:ad:48:55:b3:7e:cc:09:3e:ce:51:a0:bd:b9:5f:84:7f: c4:42:4d:61:b5:92:1e:81:a3:71:fb:19:62:bb:e0:db:3b:c6: 04:ab:86:92:21:ed:a0:28:87:2e:3a:33:23:d0:d8:95:bd:06: 0b:b0:ea:2f:13:03:11:61:ad:cf:35:cb:8e:05:0d:96:34:54: d8:65:7a:51:bf:55:ed:77:16:7b:ed:68:ba:3a:3f:43:19:9d: 92:58:cb:99 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUZ81++D4SNMAjRb1kgIBpF4yG96cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA2MjUyMjM4MjlaFw0yNzA2MjQyMjQzMjlaMDMxMTAvBgNV BAMTKDBCQzZEMjI1RjBDRTNFNjA3NzEyQTlBOThDNDU2MTkxMkYzNDMyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOIkiilh4nWcV9V6xTFZbwSRx On9zTtee72o1Nh6gg2JTRbSNwxhC/RNPBXLCZ2qoqAJpW3Mla4lTwpEZi00kQkHA 3ggZbDnDJqUpKuvpVL8yuSM9/lPO5dBX6eBCsVg/icBXI47CxovzEAYGphYb/vs9 RUUb7/mOagguayH5mAZU7h0WXxc54C1/EDMNEd6zbc3RAGDS66hADVYLOJwluael UoD0U2u4iMtg+XKpGoeDaU4kcZ6sfOgIBvrpnrGuOaEJkzQ61SDXiUT/9WYTYDkV PtyxYXpKhLIt93ExSECFWq7Ki0uhmsjJIzJ5v9NY0HZYo9BYueG6X9jPokOvAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLxtIl8M4+YHcS qamMRWGRLzQytjAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzUzMWU5NzIwLTBiNjItNDNhOC04ZTFmLTIzMDY4NGVhZjlhZi8zLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMEJD NkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYCKgtOBxwwDQYJKoZIhvcNAQELBQADggEBADNFiqKVCpsI KHzbUJMovkLwobWU9phsGH7X6Fa34+U2nJ1hS1wu37ut9aPQE11qEtbptLeUd0V2 DioFfDzvhYqgpWjIf0T8BPmT5FeeblDzjvJCG/SgUm6qOcqdqeFCjZdhJHBnMMF3 PGyHPRwK8ilv6Zz2LkRmKXO9UaLYC8wSz5Dbb7Fs6flpcRZ3woDXB6An1eOr7RwT xQ5wMV2mxTCK0TkErUhVs37MCT7OUaC9uV+Ef8RCTWG1kh6Bo3H7GWK74Ns7xgSr hpIh7aAohy46MyPQ2JW9Bguw6i8TAxFhrc81y44FDZY0VNhlelG/Ve13FnvtaLo6 P0MZnZJYy5k= -----END CERTIFICATE-----Generated at Tue Jul 21 20:44:45 2026 by rpki-client