$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer File: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer (raw, json) Hash identifier: tZWMv88MsvaPsKG5kRBNZf9w0vGodWuGvEWHodCqQTg= Subject key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4F7732F97E846F8DFE84DCFA33FF91024FAD27B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 14 Apr 2025 21:19:11 +0000 Certificate not after: Mon 13 Apr 2026 21:24:11 +0000 Subordinate resources: IP: 2a0b:4e07:1c00::/38 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:77:32:f9:7e:84:6f:8d:fe:84:dc:fa:33:ff:91:02:4f:ad:27:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 14 21:19:11 2025 GMT Not After : Apr 13 21:24:11 2026 GMT Subject: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:26:d4:ed:a5:3a:00:57:32:eb:bf:d2:9d: 5c:1a:d2:01:b2:cc:b7:b7:3c:1a:e6:4d:23:a5:bf: d5:63:93:2c:cf:09:96:7c:a5:c2:d9:e7:57:e1:e4: 45:83:57:1b:82:5c:b5:e6:23:81:44:b2:3a:6c:42: 77:9b:67:d4:ae:97:4d:b2:f3:53:5a:b1:78:a2:b4: 72:2a:57:cd:a2:75:6b:70:2d:57:40:9d:d5:1e:5e: d6:14:28:88:3b:2c:c2:67:97:45:6c:fa:c8:a6:6a: af:75:63:64:49:28:48:be:f5:0f:4a:b4:99:3a:30: 06:3a:e5:38:7e:d2:dc:33:0a:20:9c:d3:39:93:67: 0e:fa:cf:3b:bf:f7:87:9a:8d:ec:24:49:6f:28:0a: 06:89:9b:90:da:df:8b:94:07:e5:d9:08:f0:bf:dc: dd:43:6e:ef:44:2a:6b:30:83:7a:a5:96:9e:42:96: 43:7b:74:50:d0:13:de:7e:9b:0d:f7:20:41:9b:7b: 48:2d:5f:f9:0d:55:1f:90:b7:19:c1:d9:9f:73:2c: fb:38:5f:56:c5:56:2d:93:88:22:4a:6c:a9:b2:aa: d2:ef:38:33:b3:5d:6b:f1:0a:f9:ea:6f:14:48:c3: 3e:73:ba:49:1d:ca:80:ec:90:02:6c:89:7c:d8:9b: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c00::/38 Signature Algorithm: sha256WithRSAEncryption 7a:11:82:ce:72:db:60:66:53:0a:e1:c3:f1:e8:b6:e1:59:b7: a8:01:55:8c:b4:e6:10:04:62:f6:6d:7a:c2:b0:a9:99:2a:49: 48:4b:3e:f4:72:f8:60:80:5e:4e:8b:8c:a8:95:fa:78:6b:90: 20:24:ed:40:b9:cb:e8:19:f9:3b:c6:a9:4c:b8:b3:34:03:62: 59:c9:a9:59:ee:8b:89:45:d1:f8:ad:1a:5d:a8:bc:7e:99:51: 45:3b:c2:9a:4d:18:a5:19:ce:33:40:73:10:14:9c:ee:a0:17: 44:5e:1a:3e:09:97:86:d2:94:a6:d8:50:51:23:e2:33:56:48: a8:24:16:7c:dd:fd:52:00:d3:e7:e0:06:a3:8b:0d:57:79:e1: 15:cf:a3:d4:a6:00:b9:1c:f5:8f:81:42:51:60:d5:ab:24:13: 21:96:bf:62:a8:95:24:8e:e1:49:6a:a4:3e:e9:87:9a:15:8a: 6d:de:0e:c3:8d:b1:d5:ed:c3:86:1f:ba:c8:f8:49:62:3f:8f: a9:44:fd:17:4f:6d:6a:51:9f:32:d0:25:19:cc:ed:02:03:36: 4c:c5:8f:c7:2f:3e:30:1a:ab:19:0b:3e:6b:15:4f:30:3f:ef: d7:2b:23:b8:a0:52:ec:53:88:37:7d:69:88:2e:08:f2:c5:01: cf:ed:ad:66 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUT3cy+X6Eb43+hNz6M/+RAk+tJ7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTQyMTE5MTFaFw0yNjA0MTMyMTI0MTFaMDMxMTAvBgNV BAMTKDVGOTU4NTQ1MEE3RjkyMUFCM0I4NDVENDREN0VDRjU1RUNEREY3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUsybU7aU6AFcy67/SnVwa0gGy zLe3PBrmTSOlv9VjkyzPCZZ8pcLZ51fh5EWDVxuCXLXmI4FEsjpsQnebZ9Sul02y 81NasXiitHIqV82idWtwLVdAndUeXtYUKIg7LMJnl0Vs+simaq91Y2RJKEi+9Q9K tJk6MAY65Th+0twzCiCc0zmTZw76zzu/94eajewkSW8oCgaJm5Da34uUB+XZCPC/ 3N1Dbu9EKmswg3qllp5ClkN7dFDQE95+mw33IEGbe0gtX/kNVR+QtxnB2Z9zLPs4 X1bFVi2TiCJKbKmyqtLvODOzXWvxCvnqbxRIwz5zukkdyoDskAJsiXzYmy9hAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRflYVFCn+SGrO4 RdRNfs9V7N33qTAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzUzMWU5NzIwLTBiNjItNDNhOC04ZTFmLTIzMDY4NGVhZjlhZi8yLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzIvNUY5 NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RERjdBOS5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYCKgtOBxwwDQYJKoZIhvcNAQELBQADggEBAHoRgs5y22Bm Uwrhw/HotuFZt6gBVYy05hAEYvZtesKwqZkqSUhLPvRy+GCAXk6LjKiV+nhrkCAk 7UC5y+gZ+TvGqUy4szQDYlnJqVnui4lF0fitGl2ovH6ZUUU7wppNGKUZzjNAcxAU nO6gF0ReGj4Jl4bSlKbYUFEj4jNWSKgkFnzd/VIA0+fgBqOLDVd54RXPo9SmALkc 9Y+BQlFg1askEyGWv2KolSSO4UlqpD7ph5oVim3eDsONsdXtw4Yfusj4SWI/j6lE /RdPbWpRnzLQJRnM7QIDNkzFj8cvPjAaqxkLPmsVTzA/79crI7igUuxTiDd9aYgu CPLFAc/trWY= -----END CERTIFICATE-----Generated at Wed Apr 16 02:31:09 2025 by rpki-client