$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer (raw, json) Hash identifier: F5Z5NghRytrvU/c91h1uPbUO11nNc7lDncIaIA9mNFw= Subject key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 09FA723FAC8B64D28CAFCDFC25D0C6D5AA4E0F36 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 12 Apr 2025 14:01:35 +0000 Certificate not after: Sat 11 Apr 2026 14:06:35 +0000 Subordinate resources: IP: 2a0b:4e07:6000::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fa:72:3f:ac:8b:64:d2:8c:af:cd:fc:25:d0:c6:d5:aa:4e:0f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Apr 12 14:01:35 2025 GMT Not After : Apr 11 14:06:35 2026 GMT Subject: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:54:23:8a:f0:06:02:ca:07:11:6d:e8:e5: 75:7f:ce:da:ea:1f:3c:e6:34:f8:04:3c:ee:54:ae: 47:fe:72:07:fd:c2:ce:2c:c5:c2:f9:91:79:f9:8b: 36:d6:f7:02:d8:50:11:0a:fd:aa:69:b0:a0:1d:82: a7:81:d4:6d:88:c7:bc:82:56:bd:87:92:1c:24:fd: a5:f5:9e:93:50:ff:16:35:66:6d:dd:9a:da:a9:63: bc:04:3c:a5:93:47:c9:1f:54:2f:08:25:60:ea:00: cf:60:ae:f9:93:94:6e:e3:55:04:9d:a2:f3:1f:70: 95:5f:ab:4b:20:c7:52:b5:20:9a:bf:5f:b9:8a:d5: 25:fb:b8:75:1c:0c:55:e9:19:a6:13:10:27:77:e7: 2e:5f:11:50:f7:a0:4f:83:af:26:44:97:5f:2f:77: 73:d3:8e:b6:ec:27:90:a7:eb:c0:d2:1e:6b:c8:c8: 7a:ae:62:bd:d2:1d:64:7f:6e:fc:26:5d:4e:87:cd: 7b:29:cd:8a:19:7d:90:21:62:fa:1e:34:0c:ad:eb: 80:19:a3:c6:9d:1b:54:b1:83:61:ed:70:e6:8f:95: d7:10:da:d6:c5:20:d1:35:ff:69:32:43:fa:3a:02: d1:a6:70:2e:c0:07:44:56:76:c5:36:22:08:20:5d: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6000::/40 Signature Algorithm: sha256WithRSAEncryption 94:ec:d3:d9:98:54:a6:23:c1:af:f1:54:e1:8e:25:d8:46:70: e4:b0:2d:b4:37:16:45:4c:0b:ba:5c:9d:61:35:70:cf:92:16: 1d:6a:b7:d9:e4:80:71:5c:6a:9a:8f:06:41:f9:f9:6d:0a:7d: 97:65:06:d8:d5:d5:ae:f3:5d:35:7a:53:2e:bb:41:21:b9:51: da:d7:f7:d8:2c:d2:34:eb:96:bd:66:eb:88:01:81:64:0d:f6: 96:e8:d7:36:ce:ca:7f:89:07:53:44:ee:ee:40:ef:f0:3c:aa: 78:89:ce:00:98:1b:39:8e:d8:46:69:ad:a9:1b:ab:c1:bf:7d: ef:7c:75:18:2a:9d:82:61:12:e5:f3:64:19:98:d5:5d:b5:d1: a7:41:1c:9b:db:c5:f7:c2:43:29:d4:66:ce:db:8d:de:5b:08: 22:a6:7a:e2:02:27:3b:a5:aa:1f:63:0d:f0:0d:c2:d4:d9:0e: e9:69:e7:0b:f1:3b:a1:27:18:cc:20:06:62:c6:61:01:08:95: 7a:17:3f:c6:dc:47:a9:39:ba:52:ac:f0:b8:ee:c7:51:3b:42: 22:ef:5e:99:08:7c:d8:6e:ed:e2:e5:ca:f9:f4:87:96:38:5a: 89:e4:aa:db:c8:54:86:b4:f7:de:ea:99:00:b5:6f:c1:25:08: 65:85:60:cc -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUCfpyP6yLZNKMr838JdDG1apODzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA0MTIxNDAxMzVaFw0yNjA0MTExNDA2MzVaMDMxMTAvBgNV BAMTKEREQzI1QUQyRjFBNDg5MjQ3NzEzRUUzOUIxQzAzRUEyRkREQTQxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyFQjivAGAsoHEW3o5XV/ztrq HzzmNPgEPO5Urkf+cgf9ws4sxcL5kXn5izbW9wLYUBEK/appsKAdgqeB1G2Ix7yC Vr2Hkhwk/aX1npNQ/xY1Zm3dmtqpY7wEPKWTR8kfVC8IJWDqAM9grvmTlG7jVQSd ovMfcJVfq0sgx1K1IJq/X7mK1SX7uHUcDFXpGaYTECd35y5fEVD3oE+DryZEl18v d3PTjrbsJ5Cn68DSHmvIyHquYr3SHWR/bvwmXU6HzXspzYoZfZAhYvoeNAyt64AZ o8adG1Sxg2HtcOaPldcQ2tbFINE1/2kyQ/o6AtGmcC7AB0RWdsU2IgggXeNxAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdwlrS8aSJJHcT 7jmxwD6i/dpBGDAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2JlYWQyZGNmLWVhZDUtNDk1NC1hZDg0LTY1ODBjZDJhOWM1MC8zLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5YzUwLzMvRERD MjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOB2AwDQYJKoZIhvcNAQELBQADggEBAJTs09mYVKYj wa/xVOGOJdhGcOSwLbQ3FkVMC7pcnWE1cM+SFh1qt9nkgHFcapqPBkH5+W0KfZdl BtjV1a7zXTV6Uy67QSG5UdrX99gs0jTrlr1m64gBgWQN9pbo1zbOyn+JB1NE7u5A 7/A8qniJzgCYGzmO2EZprakbq8G/fe98dRgqnYJhEuXzZBmY1V210adBHJvbxffC QynUZs7bjd5bCCKmeuICJzulqh9jDfANwtTZDulp5wvxO6EnGMwgBmLGYQEIlXoX P8bcR6k5ulKs8Ljux1E7QiLvXpkIfNhu7eLlyvn0h5Y4WonkqtvIVIa0997qmQC1 b8ElCGWFYMw= -----END CERTIFICATE-----Generated at Wed Apr 16 02:19:59 2025 by rpki-client