$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/F29518F0861C6F343369FDEC84F16D00667B5421.cer File: F29518F0861C6F343369FDEC84F16D00667B5421.cer (raw, json) Hash identifier: 4YggpbK/gSswrClODP8QiSY1f/GnFXgVh1yVLotT+Tg= Subject key identifier: F2:95:18:F0:86:1C:6F:34:33:69:FD:EC:84:F1:6D:00:66:7B:54:21 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3A33F5A5D604F03E4DB3D2432098857658511EDC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/F29518F0861C6F343369FDEC84F16D00667B5421.mft caRepository: rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/ Notify URL: https://krill.proxy-arp.network/rrdp/notification.xml Certificate not before: Thu 29 Oct 2026 09:41:35 +0000 Certificate not after: Thu 28 Oct 2027 09:46:35 +0000 Subordinate resources: IP: 2a0b:4e07:270::/44 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 07:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:33:f5:a5:d6:04:f0:3e:4d:b3:d2:43:20:98:85:76:58:51:1e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 29 09:41:35 2026 GMT Not After : Oct 28 09:46:35 2027 GMT Subject: CN=F29518F0861C6F343369FDEC84F16D00667B5421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:a0:81:70:74:14:1d:12:68:1a:38:72:22: 91:e4:99:2e:c7:f3:f0:4c:97:c3:08:d6:32:39:5a: 3e:d9:39:b2:95:83:b9:6f:30:e1:e9:47:e5:52:ee: f4:cc:eb:17:18:44:9a:13:b1:88:bd:41:34:14:fa: 6c:1a:9a:18:49:8a:2b:c4:df:88:9d:8b:a4:4b:99: 97:b1:df:ca:17:c6:d8:e3:03:7e:3b:0d:22:7e:f8: 5b:ab:20:c9:87:a2:e1:c6:2f:1a:0a:40:d5:9a:82: 2e:f8:dc:04:a0:2a:cf:da:5a:64:9f:a1:09:ab:29: db:6a:42:ab:6a:ae:6b:93:c7:0f:9c:29:3d:03:be: a7:f0:de:a9:1b:be:99:8d:06:b7:28:99:04:dc:c6: a4:63:3d:66:14:af:16:d4:26:13:70:6e:55:79:ae: a9:f7:0d:df:0c:cf:b0:68:cc:ab:6c:cd:2f:06:4c: b4:70:f4:fb:8c:d6:97:85:69:f8:fb:30:7e:7c:c1: 1a:28:c3:8d:51:cb:fb:29:90:49:03:09:b9:8b:da: 6a:29:3f:3b:c3:1d:c8:c1:3e:5e:24:ef:c1:72:02: c0:2f:01:a9:d4:4d:70:a3:b2:b3:1b:78:8d:63:f9: c9:d6:fd:06:39:33:8f:d9:9a:2a:0a:51:b6:22:25: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:95:18:F0:86:1C:6F:34:33:69:FD:EC:84:F1:6D:00:66:7B:54:21 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/ RPKI Manifest - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/F29518F0861C6F343369FDEC84F16D00667B5421.mft RPKI Notify - URI:https://krill.proxy-arp.network/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:270::/44 Signature Algorithm: sha256WithRSAEncryption 3b:5a:e6:81:95:83:a6:cc:8e:dc:08:9a:83:dd:8e:a6:28:f3: 82:9b:c9:2a:70:a0:ef:37:55:6b:a7:8c:80:d1:49:33:6d:88: 55:bd:00:5d:b8:8d:a5:93:9b:34:ee:bc:60:ae:a9:54:b9:8b: e7:b2:d5:2f:46:61:ff:f3:86:43:de:14:87:a8:b1:14:b9:20: 38:93:95:6f:08:ed:18:67:40:85:28:33:d6:c5:02:74:4d:36: 43:14:d7:e2:1e:e6:50:87:41:4c:5b:26:fa:5c:ef:22:71:79: f5:cb:14:71:ce:32:5d:4c:c4:bc:4d:e9:bb:44:59:20:e9:ce: 63:e3:59:35:ad:04:32:ca:e8:4c:ea:e2:a3:1a:e5:8c:91:8e: 2c:dc:89:d4:0e:73:38:56:1f:c1:cc:4c:d4:62:a2:f3:83:98: 8b:f7:38:17:c9:62:90:85:a2:aa:aa:21:1a:14:f4:d8:4e:84: 4c:da:2f:fd:05:76:68:1c:d6:20:c0:62:c0:ec:93:4f:84:03: d0:eb:7f:45:97:80:1c:d0:22:4a:38:67:fa:b1:2c:6e:6c:da: 72:47:d8:23:3b:a2:54:75:8d:ba:bf:f1:71:e4:30:0f:85:b5: 55:2a:75:b7:fd:af:20:93:32:e6:7e:d9:38:1a:c3:3e:0e:3c: c0:b5:d1:c2 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUOjP1pdYE8D5Ns9JDIJiFdlhRHtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjEwMjkwOTQxMzVaFw0yNzEwMjgwOTQ2MzVaMDMxMTAvBgNV BAMTKEYyOTUxOEYwODYxQzZGMzQzMzY5RkRFQzg0RjE2RDAwNjY3QjU0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oqCBcHQUHRJoGjhyIpHkmS7H 8/BMl8MI1jI5Wj7ZObKVg7lvMOHpR+VS7vTM6xcYRJoTsYi9QTQU+mwamhhJiivE 34idi6RLmZex38oXxtjjA347DSJ++FurIMmHouHGLxoKQNWagi743ASgKs/aWmSf oQmrKdtqQqtqrmuTxw+cKT0Dvqfw3qkbvpmNBrcomQTcxqRjPWYUrxbUJhNwblV5 rqn3Dd8Mz7BozKtszS8GTLRw9PuM1peFafj7MH58wRoow41Ry/spkEkDCbmL2mop PzvDHcjBPl4k78FyAsAvAanUTXCjsrMbeI1j+cnW/QY5M4/ZmioKUbYiJQOXAgMB AAGjggLnMIIC4zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTylRjwhhxvNDNp /eyE8W0AZntUITAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggEXBggrBgEFBQcBCwSCAQkwggEFMEkGCCsG AQUFBzAFhj1yc3luYzovL3JzeW5jLnByb3h5LWFycC5uZXR3b3JrL3JlcG8vYmdw NDMtdTMxLXA2ZThkZjYzYzRjLzIvMHUGCCsGAQUFBzAKhmlyc3luYzovL3JzeW5j LnByb3h5LWFycC5uZXR3b3JrL3JlcG8vYmdwNDMtdTMxLXA2ZThkZjYzYzRjLzIv RjI5NTE4RjA4NjFDNkYzNDMzNjlGREVDODRGMTZEMDA2NjdCNTQyMS5tZnQwQQYI KwYBBQUHMA2GNWh0dHBzOi8va3JpbGwucHJveHktYXJwLm5ldHdvcmsvcnJkcC9u b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC04HAnAwDQYJKoZIhvcNAQELBQADggEB ADta5oGVg6bMjtwImoPdjqYo84KbySpwoO83VWunjIDRSTNtiFW9AF24jaWTmzTu vGCuqVS5i+ey1S9GYf/zhkPeFIeosRS5IDiTlW8I7RhnQIUoM9bFAnRNNkMU1+Ie 5lCHQUxbJvpc7yJxefXLFHHOMl1MxLxN6btEWSDpzmPjWTWtBDLK6Ezq4qMa5YyR jizcidQOczhWH8HMTNRiovODmIv3OBfJYpCFoqqqIRoU9NhOhEzaL/0Fdmgc1iDA YsDsk0+EA9Drf0WXgBzQIko4Z/qxLG5s2nJH2CM7olR1jbq/8XHkMA+FtVUqdbf9 ryCTMuZ+2Tgawz4OPMC10cI= -----END CERTIFICATE-----Generated at Sat Oct 31 21:31:43 2026 by rpki-client