Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
File: 0AAD221E4070989D4939FACA0F0981AB26E93895.cer (raw, json)
Hash identifier: 23TPB+2Ynwt0s3O9o1yHFjteeGufuLRFaixcg0DGBCQ=
Subject key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2B4060EF3CB7A0B075B20A6F256D823055D9A407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
caRepository: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
Notify URL: https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before: Sat 31 May 2025 02:38:42 +0000
Certificate not after: Sat 30 May 2026 02:43:42 +0000
Subordinate resources: IP: 2a05:dfc4::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:40:60:ef:3c:b7:a0:b0:75:b2:0a:6f:25:6d:82:30:55:d9:a4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 31 02:38:42 2025 GMT
Not After : May 30 02:43:42 2026 GMT
Subject: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:44:14:41:09:d5:8e:4d:a7:c9:3f:70:e8:
1c:e2:ba:07:bb:47:8c:11:5d:2a:7b:0e:a0:bf:bb:
8c:52:e4:ac:38:84:c6:0a:9c:72:11:d7:6a:c4:8d:
52:c7:aa:e1:12:27:16:a3:15:d8:28:90:c3:a5:9f:
4b:ce:b8:77:85:58:ac:33:46:f6:92:ee:f8:9e:ab:
31:fc:71:8f:d4:13:14:4d:ec:77:20:71:d4:61:4b:
0f:f9:31:d5:28:02:66:49:78:67:92:10:f9:19:91:
27:d2:d4:d8:e5:45:e4:74:8f:49:d9:ac:ac:04:0d:
c0:f3:1a:6c:2c:29:89:a7:a6:36:63:d6:8d:f5:77:
56:28:dd:b8:af:a7:67:74:1f:29:7d:f4:4e:c5:55:
bf:3a:3f:11:98:c8:96:8e:9e:16:3f:68:af:2e:0c:
ff:2a:95:12:43:45:06:6c:37:e6:3e:51:37:9a:0b:
01:39:71:7a:09:57:0d:70:c8:7b:a6:59:2f:77:eb:
23:70:c0:86:85:5f:9a:32:c2:77:3d:16:b9:30:89:
77:1f:b5:f5:24:8a:97:51:21:75:b4:c0:f2:fa:ef:
ea:a1:4c:f7:31:bf:10:ef:63:96:37:eb:fb:5c:b2:
fc:60:92:76:ea:c2:9f:ee:73:e7:cf:9b:bc:2a:ac:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4::/32
Signature Algorithm: sha256WithRSAEncryption
76:08:02:42:c0:15:d0:3e:c6:f6:95:2c:12:a1:55:14:fd:3c:
67:1e:c9:3a:37:06:87:c7:22:e2:77:6f:10:2b:23:c5:d5:1f:
ac:97:cd:3d:18:77:72:03:3f:b7:c3:f3:e7:ab:bb:3e:e6:45:
a9:5f:b4:83:5c:29:7f:f8:81:d8:2b:ab:11:19:de:38:31:3e:
3b:d4:cc:0a:fa:55:ee:a0:39:24:95:51:24:32:53:5e:13:d7:
65:a9:dc:d9:1f:b3:77:b2:54:3b:8d:3d:fe:87:84:94:a3:c2:
c1:93:ca:d6:8f:60:84:03:21:6a:1d:a4:16:28:3e:4e:a5:ec:
21:1f:0d:08:15:c5:9c:cf:e9:bc:d7:92:f4:5c:df:4a:28:39:
4f:80:e7:90:9e:75:c2:92:0d:fb:8f:92:f6:f3:ae:1c:58:3d:
db:fd:aa:1c:0c:7e:c5:75:bb:66:68:fc:b5:89:13:1d:c1:85:
dc:4a:6d:77:e9:61:c0:61:6f:af:71:fc:ed:00:a1:4e:75:4f:
0a:03:eb:25:d5:90:fa:af:1c:50:78:2f:03:a6:be:a2:a5:9f:
2b:be:8d:43:9a:30:12:f1:5d:5c:c6:db:22:35:b5:2f:c5:ec:
b7:1a:67:a0:3f:76:0f:89:c5:de:97:7f:9e:07:bb:29:ec:f1:
70:7c:20:82
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUK0Bg7zy3oLB1sgpvJW2CMFXZpAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA1MzEwMjM4NDJaFw0yNjA1MzAwMjQzNDJaMDMxMTAvBgNV
BAMTKDBBQUQyMjFFNDA3MDk4OUQ0OTM5RkFDQTBGMDk4MUFCMjZFOTM4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOEQUQQnVjk2nyT9w6Bziuge7
R4wRXSp7DqC/u4xS5Kw4hMYKnHIR12rEjVLHquESJxajFdgokMOln0vOuHeFWKwz
RvaS7vieqzH8cY/UExRN7HcgcdRhSw/5MdUoAmZJeGeSEPkZkSfS1NjlReR0j0nZ
rKwEDcDzGmwsKYmnpjZj1o31d1Yo3bivp2d0Hyl99E7FVb86PxGYyJaOnhY/aK8u
DP8qlRJDRQZsN+Y+UTeaCwE5cXoJVw1wyHumWS936yNwwIaFX5oywnc9FrkwiXcf
tfUkipdRIXW0wPL67+qhTPcxvxDvY5Y36/tcsvxgknbqwp/uc+fPm7wqrKpxAgMB
AAGjggKJMIIChTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKrSIeQHCYnUk5
+soPCYGrJuk4lTAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIH3BggrBgEFBQcBCwSB6jCB5zA9BggrBgEFBQcwBYYxcnN5bmM6
Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8yLzBpBggr
BgEFBQcwCoZdcnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3hu
ZXR3b3Jrcy8yLzBBQUQyMjFFNDA3MDk4OUQ0OTM5RkFDQTBGMDk4MUFCMjZFOTM4
OTUubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jwa2ktMDEucGR4bmV0LnVrL3Jy
ZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgXfxDANBgkqhkiG9w0BAQsFAAOC
AQEAdggCQsAV0D7G9pUsEqFVFP08Zx7JOjcGh8ci4ndvECsjxdUfrJfNPRh3cgM/
t8Pz56u7PuZFqV+0g1wpf/iB2CurERneODE+O9TMCvpV7qA5JJVRJDJTXhPXZanc
2R+zd7JUO409/oeElKPCwZPK1o9ghAMhah2kFig+TqXsIR8NCBXFnM/pvNeS9Fzf
Sig5T4DnkJ51wpIN+4+S9vOuHFg92/2qHAx+xXW7Zmj8tYkTHcGF3Eptd+lhwGFv
r3H87QChTnVPCgPrJdWQ+q8cUHgvA6a+oqWfK76NQ5owEvFdXMbbIjW1L8Xstxpn
oD92D4nF3pd/nge7KezxcHwggg==
-----END CERTIFICATE-----
Generated at Tue Jun 3 13:04:17 2025 by rpki-client