$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer File: 1F65F1D375662B71E99A607509E1EE167C6058E9.cer (raw, json) Hash identifier: azVefN4AXrcAdLejihjUIjSftjO4jN4EXTBFDpG71RY= Subject key identifier: 1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4884DAFF34A1416A278203EDF9E66EE9D20DBD33 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 09 Sep 2025 15:10:30 +0000 Certificate not after: Tue 08 Sep 2026 15:15:30 +0000 Subordinate resources: IP: 2a0b:4e07:a00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 18:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:84:da:ff:34:a1:41:6a:27:82:03:ed:f9:e6:6e:e9:d2:0d:bd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 9 15:10:30 2025 GMT Not After : Sep 8 15:15:30 2026 GMT Subject: CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:c1:6e:fa:e7:9f:c2:69:c8:97:17:a2:1b: 2f:d0:0f:cc:7d:99:88:fd:5c:16:4d:da:f9:de:d5: ed:4d:fa:a9:cc:40:c9:4e:6a:30:51:d1:a2:04:73: 9a:fa:bf:73:33:f0:af:7f:7e:11:44:c4:7b:c0:14: 5a:0b:cb:1b:70:6b:47:ae:d5:55:40:b8:d7:0b:a7: 25:f5:2a:c5:d6:50:da:01:00:ee:6c:c4:90:20:17: ed:8c:3d:9e:7f:90:bb:2e:b6:4d:ea:6c:91:98:d2: e9:3b:88:64:43:ab:22:06:81:bc:2d:98:c9:ad:11: 0b:3d:67:23:51:08:b4:9a:c6:21:7e:25:be:43:83: 7b:a8:9b:9a:ee:c3:2e:29:3f:33:a2:58:85:55:39: d2:b1:a7:51:25:7c:cc:a4:37:09:49:d6:99:70:cf: 33:32:fc:8e:56:55:ed:50:86:46:7e:ef:63:2a:9a: 34:63:54:3e:aa:75:50:85:03:c6:97:34:28:a7:bd: 10:53:07:9f:14:0d:76:b8:19:2a:04:ef:25:a6:4f: d9:2f:f8:ce:a3:ba:7b:56:de:77:bd:03:7e:a5:2a: b4:e8:af:e0:2a:9e:5e:b0:9b:98:1e:ed:23:69:33: e8:85:8e:85:a5:b2:b2:e9:a6:c9:3c:20:d0:1a:a2: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a00::/40 Signature Algorithm: sha256WithRSAEncryption 7d:06:3e:7c:5e:13:f0:e4:06:3c:b8:02:ea:c2:bb:00:18:56: aa:08:b8:a6:45:48:bd:e4:ae:19:1a:f7:ec:3f:14:df:f9:60: 3d:8a:02:d8:3a:14:7c:ec:6f:af:cd:71:1d:2e:80:99:6e:06: 1a:93:29:33:2a:f7:10:09:bb:f9:66:ef:47:2f:6b:fa:ae:cc: fb:0f:0a:6e:9c:33:19:ae:e9:94:0f:ba:de:ef:65:34:e4:a7: 4c:77:fa:7b:fa:c7:ab:27:74:6d:5b:7d:77:10:00:95:38:40: d0:8a:45:f7:8e:fd:bd:90:f5:32:d2:fb:12:b7:e6:f1:55:88: a8:04:21:71:1c:e4:7b:c4:d3:76:61:b3:c5:fa:c4:c1:a3:4b: 47:3d:44:e9:44:22:80:19:68:bc:aa:c0:9c:6a:14:f8:41:cf: 36:73:70:47:ea:bc:d4:50:16:ad:c5:5c:6d:a8:c9:bd:81:97: f5:fe:da:6f:ff:6a:e7:19:fc:c2:ad:c2:3f:aa:e9:64:5d:28: b9:01:02:20:8d:f4:e8:fd:a1:2b:02:b6:dc:1b:3d:66:b2:a2: 12:f2:ab:7b:8d:ca:9e:fc:26:39:b8:66:08:b6:ec:b8:6c:a6: a3:02:a7:7e:88:a1:df:fa:53:95:34:a3:03:26:79:16:eb:6e: 35:dd:7f:67 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUSITa/zShQWonggPt+eZu6dINvTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA5MDkxNTEwMzBaFw0yNjA5MDgxNTE1MzBaMDMxMTAvBgNV BAMTKDFGNjVGMUQzNzU2NjJCNzFFOTlBNjA3NTA5RTFFRTE2N0M2MDU4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjosFu+uefwmnIlxeiGy/QD8x9 mYj9XBZN2vne1e1N+qnMQMlOajBR0aIEc5r6v3Mz8K9/fhFExHvAFFoLyxtwa0eu 1VVAuNcLpyX1KsXWUNoBAO5sxJAgF+2MPZ5/kLsutk3qbJGY0uk7iGRDqyIGgbwt mMmtEQs9ZyNRCLSaxiF+Jb5Dg3uom5ruwy4pPzOiWIVVOdKxp1ElfMykNwlJ1plw zzMy/I5WVe1QhkZ+72MqmjRjVD6qdVCFA8aXNCinvRBTB58UDXa4GSoE7yWmT9kv +M6juntW3ne9A36lKrTor+Aqnl6wm5ge7SNpM+iFjoWlsrLppsk8INAaoktBAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfZfHTdWYrcema YHUJ4e4WfGBY6TAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzQwZDY2ZDRkLTVjZDQtNDMzNy04NjE1LTViMjc3ZjQxZDg4Zi8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvNDBkNjZkNGQtNWNkNC00MzM3LTg2MTUtNWIyNzdmNDFkODhmLzEvMUY2 NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYwNThFOS5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOBwowDQYJKoZIhvcNAQELBQADggEBAH0GPnxeE/Dk Bjy4AurCuwAYVqoIuKZFSL3krhka9+w/FN/5YD2KAtg6FHzsb6/NcR0ugJluBhqT KTMq9xAJu/lm70cva/quzPsPCm6cMxmu6ZQPut7vZTTkp0x3+nv6x6sndG1bfXcQ AJU4QNCKRfeO/b2Q9TLS+xK35vFViKgEIXEc5HvE03Zhs8X6xMGjS0c9ROlEIoAZ aLyqwJxqFPhBzzZzcEfqvNRQFq3FXG2oyb2Bl/X+2m//aucZ/MKtwj+q6WRdKLkB AiCN9Oj9oSsCttwbPWayohLyq3uNyp78Jjm4Zgi27LhspqMCp36Iod/6U5U0owMm eRbrbjXdf2c= -----END CERTIFICATE-----Generated at Thu Oct 9 10:37:25 2025 by rpki-client