Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
File: 4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer (raw, json)
Hash identifier: 1G79Dyf0LnsLORLEpOaQ+ita6/dFUi305mQrnshL3CM=
Subject key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 502F096A9E7BCEB14F60FF7ACD18D3C545E36000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 10:21:11 +0000
Certificate not after: Thu 07 Oct 2027 10:26:11 +0000
Subordinate resources: IP: 167.104.220.0/24
IP: 2a06:1283::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2f:09:6a:9e:7b:ce:b1:4f:60:ff:7a:cd:18:d3:c5:45:e3:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 8 10:21:11 2026 GMT
Not After : Oct 7 10:26:11 2027 GMT
Subject: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:c7:29:71:d2:05:1a:83:8d:23:e8:bc:e2:
81:83:cb:27:e7:f4:34:b3:98:25:79:41:5c:98:02:
74:e0:7c:80:78:01:5c:c7:79:57:6b:94:8e:ab:70:
83:52:c1:ba:be:89:b7:c7:c1:52:ad:3f:0a:12:4b:
76:93:08:50:9b:4e:17:f9:d9:9a:f3:90:97:39:60:
de:87:83:09:06:e5:5a:39:6b:50:b6:2e:67:25:0d:
ba:82:7a:e4:df:b7:fe:f4:c5:80:1c:e6:80:04:84:
b0:40:7f:b6:d7:3d:03:7b:15:24:06:7f:99:70:0a:
7a:7e:82:47:9e:a3:ed:a1:77:c8:3c:76:cb:dc:c4:
ec:10:7c:95:55:e3:e6:71:bf:36:1c:87:5c:14:fa:
0a:d1:83:6c:03:06:36:c5:9d:aa:73:cf:02:e7:23:
2d:de:6d:2b:1f:1b:af:8f:23:2d:04:81:e9:ce:29:
8d:5a:a3:84:e2:25:58:94:27:82:51:96:5a:1f:06:
ad:54:a5:c6:93:a3:55:d0:74:5a:2b:63:44:f8:b0:
26:63:90:44:ec:ce:f0:94:be:bd:2f:99:0a:b2:62:
3a:c1:23:1f:08:74:de:30:f1:96:66:f8:ef:09:b3:
fa:75:b4:be:a9:32:27:4b:ae:1b:4c:71:1d:1b:b1:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.220.0/24
IPv6:
2a06:1283::/32
Signature Algorithm: sha256WithRSAEncryption
c2:75:f5:cc:40:a0:b4:ed:00:fa:54:26:b3:6b:8d:23:52:0f:
db:e7:ae:39:29:02:e0:c6:ff:0c:60:18:8c:57:b5:01:96:85:
6b:2f:d8:c8:f6:d2:d5:c9:21:09:60:93:29:12:9c:d0:41:d2:
96:72:c8:48:10:60:47:94:02:94:c0:2a:b4:92:f6:e7:95:11:
aa:14:ae:7c:67:38:f4:ab:a7:fe:58:ef:ea:87:ac:f7:8a:a8:
90:7d:25:b3:37:e5:51:5c:fc:80:a6:85:4d:d8:5f:ba:d0:8c:
f4:a1:8f:7e:60:c8:51:2d:f1:af:8c:25:39:fc:a1:54:78:42:
28:49:85:43:7d:a1:85:e4:2f:3a:49:56:cd:c1:dd:85:cf:a3:
0e:b3:5f:df:56:b7:13:2c:bf:52:80:24:93:51:f7:08:1e:d4:
13:3a:c4:13:e6:8d:b1:3a:c7:62:fd:bc:65:91:50:32:2f:f1:
d8:23:ee:fb:aa:ec:c7:4a:5a:d9:aa:76:85:ee:1b:b0:71:a1:
a3:25:58:ef:ae:f1:66:e5:87:f4:9c:6a:9e:35:c0:72:41:fb:
e6:00:3e:49:72:15:7a:3f:22:15:fc:da:59:e5:ac:5b:95:b2:
14:52:d5:55:61:31:26:b5:50:73:de:c8:9a:c5:83:9c:be:25:
18:f5:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:45:26 2026 by rpki-client