$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/490E689AC197A1AB208278A458529332E12E9146.cer File: 490E689AC197A1AB208278A458529332E12E9146.cer (raw, json) Hash identifier: ULCn4O/VM1LC//2pJGKL+ILpZ2v5cXb/Spe1iPUM6Po= Subject key identifier: 49:0E:68:9A:C1:97:A1:AB:20:82:78:A4:58:52:93:32:E1:2E:91:46 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 301BE98CA84082A5405B8BB1A88D5E99A5E432BD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.proxy-arp.network/repo/proxy-arp/1/490E689AC197A1AB208278A458529332E12E9146.mft caRepository: rsync://rsync.proxy-arp.network/repo/proxy-arp/1/ Notify URL: https://krill.proxy-arp.network/rrdp/notification.xml Certificate not before: Fri 23 Oct 2026 14:54:12 +0000 Certificate not after: Fri 22 Oct 2027 14:59:12 +0000 Subordinate resources: IP: 2a0b:4e07:270::/44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 17:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1b:e9:8c:a8:40:82:a5:40:5b:8b:b1:a8:8d:5e:99:a5:e4:32:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 23 14:54:12 2026 GMT Not After : Oct 22 14:59:12 2027 GMT Subject: CN=490E689AC197A1AB208278A458529332E12E9146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:e8:53:ba:dc:14:a9:67:af:9c:59:f1:a7: 3a:bf:56:6c:7d:87:78:61:37:c6:dc:90:54:d6:6c: 0a:b4:09:85:8a:bc:2a:e7:7f:60:b9:6a:2f:64:f8: ac:19:98:9b:fb:09:d3:86:c5:29:d7:e7:09:fe:3a: ed:15:73:8e:d2:74:74:a6:7f:f7:12:5e:55:30:e0: 90:a2:6a:d2:ac:61:f9:fc:f5:66:4a:12:cd:af:d2: 03:ce:46:6c:b9:24:75:1b:3a:6e:4d:41:74:c6:fa: cc:2f:e0:7c:ce:47:80:29:36:1c:31:20:b8:4c:cc: 18:0e:ce:7f:15:5d:44:d1:da:e3:97:5f:90:14:81: 2a:8a:bd:87:7c:85:9e:71:49:0c:21:06:d1:ae:f5: be:24:ca:9b:00:43:0b:52:51:05:8a:aa:c1:50:7b: 35:5c:5d:e9:f4:7d:d8:fa:cd:f5:54:8a:75:dc:05: 18:5d:f4:e7:65:96:00:7f:52:06:ae:95:3f:65:fb: 0c:1c:54:58:6f:77:a0:33:21:07:55:18:1b:7a:8d: 1e:e1:41:50:7d:81:c4:8e:29:29:f4:72:33:ce:28: 8a:be:a2:8d:a3:e8:2f:3e:39:69:aa:d1:99:70:d1: 59:cf:18:50:04:dd:2f:b5:9a:14:70:7c:fe:aa:51: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:0E:68:9A:C1:97:A1:AB:20:82:78:A4:58:52:93:32:E1:2E:91:46 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.proxy-arp.network/repo/proxy-arp/1/ RPKI Manifest - URI:rsync://rsync.proxy-arp.network/repo/proxy-arp/1/490E689AC197A1AB208278A458529332E12E9146.mft RPKI Notify - URI:https://krill.proxy-arp.network/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:270::/44 Signature Algorithm: sha256WithRSAEncryption 93:52:7e:94:eb:e4:f6:52:3b:3b:c9:b1:07:8d:56:b7:47:de: 14:ab:e1:2e:c3:be:ca:8a:3f:35:d0:8d:26:f8:65:ec:98:3c: a8:a0:ad:32:50:03:5c:2d:67:0a:d4:b9:81:2e:6e:8c:8c:f9: 52:07:cb:d7:fd:03:8f:8b:c3:ea:ea:b1:1b:65:14:5c:fa:55: 61:c6:98:94:01:0e:c6:97:2a:1f:02:f8:52:e6:70:f4:34:e4: 66:a4:7b:08:64:d8:8a:75:87:18:d2:dd:b3:d8:54:3d:4b:e4: 0c:ad:ba:c4:6e:73:2e:24:b5:7f:e5:0e:96:54:46:bb:44:98: 70:32:94:d9:ed:15:b7:5d:bb:49:7b:6c:ff:a3:8a:d8:1a:18: 34:21:30:55:1d:61:be:4b:b2:9f:8d:05:ff:5b:d4:0d:25:3d: f6:aa:b2:ed:f7:0b:72:00:02:23:ea:d9:af:e5:ea:54:53:d1: 95:32:e9:03:e5:18:e9:bc:54:44:2e:f3:96:3e:9a:e6:27:7e: 7e:5f:57:7f:85:0b:d7:5f:a2:92:cd:2c:a0:de:72:79:1d:b5: d3:c8:25:e2:fb:51:4f:33:07:9d:40:e0:e3:86:f2:0f:9a:54: c0:47:de:c7:5b:95:1a:9e:e2:a9:f8:29:64:31:1e:b3:6b:1a: 36:a3:31:53 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUMBvpjKhAgqVAW4uxqI1emaXkMr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMjMxNDU0MTJaFw0yNzEwMjIxNDU5MTJaMDMxMTAvBgNV BAMTKDQ5MEU2ODlBQzE5N0ExQUIyMDgyNzhBNDU4NTI5MzMyRTEyRTkxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sOhTutwUqWevnFnxpzq/Vmx9 h3hhN8bckFTWbAq0CYWKvCrnf2C5ai9k+KwZmJv7CdOGxSnX5wn+Ou0Vc47SdHSm f/cSXlUw4JCiatKsYfn89WZKEs2v0gPORmy5JHUbOm5NQXTG+swv4HzOR4ApNhwx ILhMzBgOzn8VXUTR2uOXX5AUgSqKvYd8hZ5xSQwhBtGu9b4kypsAQwtSUQWKqsFQ ezVcXen0fdj6zfVUinXcBRhd9OdllgB/UgaulT9l+wwcVFhvd6AzIQdVGBt6jR7h QVB9gcSOKSn0cjPOKIq+oo2j6C8+OWmq0Zlw0VnPGFAE3S+1mhRwfP6qUf35AgMB AAGjggLMMIICyDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJDmiawZehqyCC eKRYUpMy4S6RRjAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwgf0GCCsGAQUFBwELBIHwMIHtMD0GCCsGAQUF BzAFhjFyc3luYzovL3JzeW5jLnByb3h5LWFycC5uZXR3b3JrL3JlcG8vcHJveHkt YXJwLzEvMGkGCCsGAQUFBzAKhl1yc3luYzovL3JzeW5jLnByb3h5LWFycC5uZXR3 b3JrL3JlcG8vcHJveHktYXJwLzEvNDkwRTY4OUFDMTk3QTFBQjIwODI3OEE0NTg1 MjkzMzJFMTJFOTE0Ni5tZnQwQQYIKwYBBQUHMA2GNWh0dHBzOi8va3JpbGwucHJv eHktYXJwLm5ldHdvcmsvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04H AnAwDQYJKoZIhvcNAQELBQADggEBAJNSfpTr5PZSOzvJsQeNVrdH3hSr4S7DvsqK PzXQjSb4ZeyYPKigrTJQA1wtZwrUuYEuboyM+VIHy9f9A4+Lw+rqsRtlFFz6VWHG mJQBDsaXKh8C+FLmcPQ05Gakewhk2Ip1hxjS3bPYVD1L5AytusRucy4ktX/lDpZU RrtEmHAylNntFbddu0l7bP+jitgaGDQhMFUdYb5Lsp+NBf9b1A0lPfaqsu33C3IA AiPq2a/l6lRT0ZUy6QPlGOm8VEQu85Y+muYnfn5fV3+FC9dfopLNLKDecnkdtdPI JeL7UU8zB51A4OOG8g+aVMBH3sdblRqe4qn4KWQxHrNrGjajMVM= -----END CERTIFICATE-----Generated at Sun Oct 25 06:47:23 2026 by rpki-client