$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer (raw, json) Hash identifier: X7wrsJAtaUKK+8+amJ5SoR63wIq97gP6SlJp5Q+bQaI= Subject key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1A21E2A9461DF88F5C5FCE78BAC331D7D89C1DA6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 03 Jul 2026 20:21:27 +0000 Certificate not after: Fri 02 Jul 2027 20:26:27 +0000 Subordinate resources: IP: 2a0b:4e07:2900::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:21:e2:a9:46:1d:f8:8f:5c:5f:ce:78:ba:c3:31:d7:d8:9c:1d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jul 3 20:21:27 2026 GMT Not After : Jul 2 20:26:27 2027 GMT Subject: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:4f:44:20:15:2c:e2:f7:8b:5d:9d:77:54: bb:25:ce:78:60:de:a8:0f:b5:35:30:41:52:b6:ff: a3:d8:a3:a8:3a:5f:77:27:e2:c4:18:8e:1a:82:64: 54:4c:5f:9e:66:c4:d5:48:bf:c5:76:60:22:f3:29: 46:9e:37:8d:1d:03:f8:c9:56:92:05:a7:38:54:a8: 1f:41:b4:5e:ff:6c:ff:77:bd:ea:14:d7:d7:b7:ab: 48:ef:6a:fe:c9:e2:92:a2:e7:3b:d1:92:ef:d0:66: 42:db:ed:dd:92:da:db:df:6d:29:5d:5b:4b:d6:06: 38:92:12:ec:e2:44:e7:66:22:c7:eb:25:a6:1c:30: 67:6e:7e:1a:8e:65:21:36:00:93:5d:d1:f4:84:ed: db:5d:fc:0d:83:4d:7f:c7:80:cb:b0:27:85:8d:b7: e5:17:c7:13:78:1c:81:fb:04:8c:6e:33:78:ce:27: 42:a5:39:f3:06:95:24:04:d6:30:ce:60:3c:e1:fd: 46:bb:e8:03:57:00:cb:cb:b0:02:c7:0e:67:cb:8f: 05:d5:65:91:17:ce:b1:8f:15:60:16:79:c6:de:d8: 4b:18:92:28:6b:92:b5:b6:ad:10:f5:28:33:0f:8d: 69:38:1f:dd:c5:6a:d3:88:41:2f:f6:ac:f8:ae:17: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2900::/40 Signature Algorithm: sha256WithRSAEncryption 5a:f5:05:58:d5:8c:4c:43:fc:0d:0c:00:03:2d:69:d6:b6:2a: 96:78:4f:a3:47:60:29:81:ec:d7:88:73:1d:8f:9a:6d:9a:72: 4f:98:3e:ed:af:5e:1a:25:bf:58:76:31:57:4a:c4:a1:99:c9: f1:f6:39:7c:5a:f7:de:a3:a9:c3:98:11:15:5b:39:9b:c9:33: 2c:9a:5b:24:34:6f:60:28:38:bb:7c:7a:0a:48:b2:d3:3b:07: c5:84:41:74:dc:2d:5b:dd:90:f9:3d:64:ee:9a:d1:6e:02:35: 10:31:55:d5:d6:aa:8e:a7:88:50:b0:51:28:26:cd:18:4d:59: 39:c2:ce:ed:95:ef:56:8c:90:47:50:10:d6:54:23:a7:4a:90: 3d:4a:17:d3:84:8f:10:97:d2:67:a9:63:32:96:9a:58:08:9f: f2:99:eb:a4:20:a1:2a:79:49:e5:94:ed:61:9d:83:c7:94:56: 26:69:6d:17:30:37:ef:c7:bb:f5:cf:ca:6b:47:99:df:d9:32: 16:b9:ac:76:2e:fa:76:da:93:30:5a:4e:37:75:2d:a9:f9:83: dd:9d:09:bc:5a:37:37:8b:72:35:6e:42:5f:67:bc:75:fb:42: 90:7d:b6:30:9f:85:0d:d5:b7:bd:cc:23:4d:63:fd:8d:43:d6: d5:ae:fa:51 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUGiHiqUYd+I9cX854usMx19icHaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjA3MDMyMDIxMjdaFw0yNzA3MDIyMDI2MjdaMDMxMTAvBgNV BAMTKEVGQjVERjA3NkNERjA2MjI5NEIxMkMzMDJFNzVENTdFRkNEN0Y3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLu09EIBUs4veLXZ13VLslznhg 3qgPtTUwQVK2/6PYo6g6X3cn4sQYjhqCZFRMX55mxNVIv8V2YCLzKUaeN40dA/jJ VpIFpzhUqB9BtF7/bP93veoU19e3q0jvav7J4pKi5zvRku/QZkLb7d2S2tvfbSld W0vWBjiSEuziROdmIsfrJaYcMGdufhqOZSE2AJNd0fSE7dtd/A2DTX/HgMuwJ4WN t+UXxxN4HIH7BIxuM3jOJ0KlOfMGlSQE1jDOYDzh/Ua76ANXAMvLsALHDmfLjwXV ZZEXzrGPFWAWecbe2EsYkihrkrW2rRD1KDMPjWk4H93FatOIQS/2rPiuF2I9AgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvtd8HbN8GIpSx LDAuddV+/Nf3zjAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2FmMWI0MWNiLWEzN2YtNGQ5My04ODU2LTQwOTJhZmIyMmIxNy8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIyYjE3LzEvRUZC NURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOBykwDQYJKoZIhvcNAQELBQADggEBAFr1BVjVjExD /A0MAAMtada2KpZ4T6NHYCmB7NeIcx2Pmm2ack+YPu2vXholv1h2MVdKxKGZyfH2 OXxa996jqcOYERVbOZvJMyyaWyQ0b2AoOLt8egpIstM7B8WEQXTcLVvdkPk9ZO6a 0W4CNRAxVdXWqo6niFCwUSgmzRhNWTnCzu2V71aMkEdQENZUI6dKkD1KF9OEjxCX 0mepYzKWmlgIn/KZ66QgoSp5SeWU7WGdg8eUViZpbRcwN+/Hu/XPymtHmd/ZMha5 rHYu+nbakzBaTjd1Lan5g92dCbxaNzeLcjVuQl9nvHX7QpB9tjCfhQ3Vt73MI01j /Y1D1tWu+lE= -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:13 2026 by rpki-client