$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer File: 379234C5E71F2624C3A35F324BC6732473DEF7D4.cer (raw, json) Hash identifier: lHNJdlNt28QF2GoDKpXivK9UmZJHoJ85keWCQLukAww= Subject key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1874A9ADC9B219D914F91373779B74BB39A907CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 02 Sep 2026 21:27:11 +0000 Certificate not after: Wed 01 Sep 2027 21:32:11 +0000 Subordinate resources: IP: 2a0b:4e07:2b00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:74:a9:ad:c9:b2:19:d9:14:f9:13:73:77:9b:74:bb:39:a9:07:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Sep 2 21:27:11 2026 GMT Not After : Sep 1 21:32:11 2027 GMT Subject: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:e5:64:0a:4f:3c:6a:53:76:08:ec:5b:4a: 24:3e:15:d7:10:7b:14:02:e5:0f:75:72:d5:e5:5d: 6c:e7:0c:86:2b:79:70:04:5e:57:a7:86:d3:9c:6a: ce:44:41:76:fb:87:52:72:81:e9:0c:05:b8:96:d5: 95:29:a6:5d:cb:6f:dd:bd:28:52:ec:ed:ba:81:59: 29:e4:96:27:54:0b:d2:d1:74:c7:8d:b0:6d:9b:e2: af:bb:13:21:4f:48:8d:ad:9d:81:87:61:3c:08:3f: 0c:18:71:ed:7b:2c:6b:b2:b5:05:dc:2b:f7:60:04: 8c:63:21:1a:96:fc:ba:51:4b:8e:1a:dd:05:87:c2: 85:2f:80:81:32:f9:e1:6d:76:9a:a2:9c:7f:b6:8b: 53:a6:2f:cc:cb:9e:25:a4:a5:7d:78:12:b7:40:d1: bd:79:fe:94:1b:f2:38:b2:1f:fd:c1:6a:7c:30:34: dc:b8:8f:54:f7:f7:ef:22:05:15:9a:30:ae:39:96: cd:69:44:04:ff:70:c1:cb:84:ec:55:0f:e9:b0:cd: 52:56:5a:43:9b:dd:29:c7:30:c1:81:e6:55:e6:f6: 09:7a:57:2f:22:4d:d2:24:80:80:63:10:72:71:c2: b0:af:dc:78:c3:fb:58:21:54:ca:2e:1c:f1:57:43: 64:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2b00::/40 Signature Algorithm: sha256WithRSAEncryption 5c:5c:2b:f7:39:d7:1f:8c:9f:1c:26:ab:32:fb:57:39:aa:ad: 09:a8:d7:a2:98:43:cd:99:91:92:f5:06:8d:34:c0:33:57:53: 57:14:61:27:f1:4d:02:5b:7c:f8:0c:89:9a:ad:ee:be:5b:c1: ee:f7:5c:84:ef:4d:d7:93:b7:b3:97:a0:aa:6c:15:e4:97:84: 11:96:12:38:88:9e:ea:fb:86:ec:83:97:22:92:86:2e:81:c2: 54:bb:b9:f9:1c:b0:c1:ad:d4:fd:1b:e3:d8:fb:04:fa:22:d6: 00:25:21:2f:98:01:25:cb:34:50:a1:8f:82:cf:b0:64:6a:b5: 6b:02:98:be:5c:b7:c5:e5:7b:82:ab:9d:73:db:37:a8:5f:02: e9:cb:1d:74:55:59:fc:6e:97:f2:0d:85:07:d2:66:4b:8d:dd: 47:a6:62:b2:57:b3:a2:f7:fb:72:73:4e:41:83:91:dd:e2:36: 79:66:cd:a0:71:31:df:70:73:01:c1:d9:f1:92:6e:9d:12:b8: e8:81:35:0b:c4:74:97:10:2d:75:e5:b7:e7:cc:f7:d5:3b:ff: 7b:fc:65:fe:b3:6f:9e:7e:9c:29:e5:27:63:07:b7:ae:48:4c: 70:69:ca:b1:f9:ea:a3:e4:dd:3d:7c:06:5a:b3:0d:f9:a6:18: a0:cc:45:e4 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUGHSprcmyGdkU+RNzd5t0uzmpB8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA5MDIyMTI3MTFaFw0yNzA5MDEyMTMyMTFaMDMxMTAvBgNV BAMTKDM3OTIzNEM1RTcxRjI2MjRDM0EzNUYzMjRCQzY3MzI0NzNERUY3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS7OVkCk88alN2COxbSiQ+FdcQ exQC5Q91ctXlXWznDIYreXAEXlenhtOcas5EQXb7h1JygekMBbiW1ZUppl3Lb929 KFLs7bqBWSnklidUC9LRdMeNsG2b4q+7EyFPSI2tnYGHYTwIPwwYce17LGuytQXc K/dgBIxjIRqW/LpRS44a3QWHwoUvgIEy+eFtdpqinH+2i1OmL8zLniWkpX14ErdA 0b15/pQb8jiyH/3BanwwNNy4j1T39+8iBRWaMK45ls1pRAT/cMHLhOxVD+mwzVJW WkOb3SnHMMGB5lXm9gl6Vy8iTdIkgIBjEHJxwrCv3HjD+1ghVMouHPFXQ2RZAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3kjTF5x8mJMOj XzJLxnMkc9731DAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RmOTAwM2VjLWZhMzUtNDk3OS05YWM4LWUzMGJlMDA1MjE2My8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUyMTYzLzEvMzc5 MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOByswDQYJKoZIhvcNAQELBQADggEBAFxcK/c51x+M nxwmqzL7VzmqrQmo16KYQ82ZkZL1Bo00wDNXU1cUYSfxTQJbfPgMiZqt7r5bwe73 XITvTdeTt7OXoKpsFeSXhBGWEjiInur7huyDlyKShi6BwlS7ufkcsMGt1P0b49j7 BPoi1gAlIS+YASXLNFChj4LPsGRqtWsCmL5ct8Xle4KrnXPbN6hfAunLHXRVWfxu l/INhQfSZkuN3UemYrJXs6L3+3JzTkGDkd3iNnlmzaBxMd9wcwHB2fGSbp0SuOiB NQvEdJcQLXXlt+fM99U7/3v8Zf6zb55+nCnlJ2MHt65ITHBpyrH56qPk3T18Blqz DfmmGKDMReQ= -----END CERTIFICATE-----Generated at Fri Sep 4 22:48:50 2026 by rpki-client