$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer File: EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer (raw, json) Hash identifier: adfSXaGFr2c9xk6xbWWCcVFlSp5PDOPR+qUXa12/Gk4= Subject key identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 69B441E4AFD176D3B5D728932C4F7092F191C057 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 03 Aug 2026 21:33:10 +0000 Certificate not after: Mon 02 Aug 2027 21:38:10 +0000 Subordinate resources: IP: 2a0b:4e07:b0::/46 IP: 2a0b:4e07:2000::/37 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 15:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b4:41:e4:af:d1:76:d3:b5:d7:28:93:2c:4f:70:92:f1:91:c0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Aug 3 21:33:10 2026 GMT Not After : Aug 2 21:38:10 2027 GMT Subject: CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:9d:1b:4e:22:1d:7c:2b:de:a0:c8:6a:54: 09:79:3c:79:c7:38:9e:0c:13:3d:6e:74:17:30:38: 66:7a:7a:3d:b0:08:ed:8c:9a:cb:68:94:17:5a:f6: 9b:3b:5f:c9:48:d0:43:ad:dd:cc:90:bc:2b:b8:13: ed:88:47:1a:83:b7:81:1e:c4:a2:a8:73:5f:a1:65: 03:85:52:79:bf:ff:46:75:f4:50:fb:4d:7b:bb:9b: 93:07:57:1f:f9:13:ff:90:a1:3c:12:d7:e0:ce:e5: e2:a7:1f:fe:d0:c9:7b:be:a6:75:6b:86:51:e5:82: 3c:90:5d:d9:69:58:0a:31:cd:1f:73:5a:f7:89:a4: 6a:ce:23:7e:79:64:09:53:5c:df:90:2b:80:07:8b: 84:36:23:5f:c3:82:ea:47:51:bf:08:58:09:73:fd: 10:e1:0e:2e:f5:80:ff:3b:e4:82:4a:92:7e:03:b4: f1:19:ab:b6:38:fe:46:24:32:d4:c9:ff:93:53:c6: 1e:aa:e8:41:19:c1:68:23:68:5c:9d:2e:6d:d9:7b: 76:c1:c6:39:eb:3b:ab:53:29:75:ca:c9:04:a4:e6: fc:d1:79:59:89:8f:7a:f2:19:ae:58:5a:9c:16:72: 08:81:84:8b:2f:3f:73:93:6e:42:85:cd:75:1d:f0: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b0::/46 2a0b:4e07:2000::/37 Signature Algorithm: sha256WithRSAEncryption 9d:63:6f:8a:b4:0a:82:a3:86:95:02:43:07:08:65:bb:96:40: 74:b1:04:0a:b4:4f:11:ea:82:22:12:ce:e5:9c:06:48:97:40: ee:2e:7e:f5:b2:84:10:fd:51:b6:94:86:57:27:06:1d:e7:4c: b4:b7:f3:5f:3f:7d:fa:7b:12:ea:80:46:fe:a6:6b:3c:51:c9: d2:bd:6a:d5:f6:d8:f1:b7:dd:3c:38:a8:2e:a5:69:0a:78:9b: b4:bb:b4:10:e2:fa:f5:2e:45:f1:3e:86:ed:c2:a3:92:08:1f: 58:72:3f:db:7d:75:ca:1c:ea:eb:72:6b:2d:da:3f:b4:8f:0e: 8b:38:2c:2e:36:e1:9c:90:5d:3b:c9:59:0c:95:3c:5b:52:d4: 8d:8b:a0:b1:8f:ec:27:ce:d3:51:29:a0:da:49:0d:c0:85:e8: bb:47:a5:a6:a8:34:fa:ea:76:b8:85:e7:21:be:a9:b5:af:b9: 76:08:51:3f:5b:01:8d:d1:28:3d:d5:69:f2:39:fd:8c:63:b5: 30:7f:9e:14:44:db:af:14:e6:17:00:64:05:84:48:e6:c1:27: 14:c2:39:7e:08:3f:d0:db:6b:35:3e:ff:9e:d1:b1:aa:f9:7a: 6e:a7:7b:c8:e1:2e:db:e9:dd:5a:1f:43:98:d2:db:3f:8e:65: 4f:d4:d2:ce -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIUabRB5K/RdtO11yiTLE9wkvGRwFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA4MDMyMTMzMTBaFw0yNzA4MDIyMTM4MTBaMDMxMTAvBgNV BAMTKEVBRUU0QTAyRTU0NUMwMkMyQzVBMjU1NkUxRTQ0NkYxQzk0RTUyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1Z0bTiIdfCveoMhqVAl5PHnH OJ4MEz1udBcwOGZ6ej2wCO2MmstolBda9ps7X8lI0EOt3cyQvCu4E+2IRxqDt4Ee xKKoc1+hZQOFUnm//0Z19FD7TXu7m5MHVx/5E/+QoTwS1+DO5eKnH/7QyXu+pnVr hlHlgjyQXdlpWAoxzR9zWveJpGrOI355ZAlTXN+QK4AHi4Q2I1/DgupHUb8IWAlz /RDhDi71gP875IJKkn4DtPEZq7Y4/kYkMtTJ/5NTxh6q6EEZwWgjaFydLm3Ze3bB xjnrO6tTKXXKyQSk5vzReVmJj3ryGa5YWpwWcgiBhIsvP3OTbkKFzXUd8Hz9AgMB AAGjggMXMIIDEzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTq7koC5UXALCxa JVbh5EbxyU5SIjAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzZjZmQ5YTJjLTg3ZjEtNDhhOS1iNmVhLTI4YWQwOTdiNzVkMy8yLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvNmNmZDlhMmMtODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3NWQzLzIvRUFF RTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRFNTIyMi5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/ BBswGTAXBAIAAjARAwcCKgtOBwCwAwYDKgtOByAwDQYJKoZIhvcNAQELBQADggEB AJ1jb4q0CoKjhpUCQwcIZbuWQHSxBAq0TxHqgiISzuWcBkiXQO4ufvWyhBD9UbaU hlcnBh3nTLS3818/ffp7EuqARv6mazxRydK9atX22PG33Tw4qC6laQp4m7S7tBDi +vUuRfE+hu3Co5IIH1hyP9t9dcoc6utyay3aP7SPDos4LC424ZyQXTvJWQyVPFtS 1I2LoLGP7CfO01EpoNpJDcCF6LtHpaaoNPrqdriF5yG+qbWvuXYIUT9bAY3RKD3V afI5/YxjtTB/nhRE268U5hcAZAWESObBJxTCOX4IP9DbazU+/57Rsar5em6ne8jh Ltvp3VofQ5jS2z+OZU/U0s4= -----END CERTIFICATE-----Generated at Wed Aug 26 08:38:47 2026 by rpki-client