Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
File:                     8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer (raw, json)
Hash identifier:          ZxGqCCHBymq3+KLGmEM1VrWVmhCJggKWSeMzsOE49bI=
Subject key identifier:   8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       7A83257F0661B998DF71228A9FE6264758CC4027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Thu 09 Jul 2026 14:58:20 +0000
Certificate not after:    Thu 08 Jul 2027 15:03:20 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:83:25:7f:06:61:b9:98:df:71:22:8a:9f:e6:26:47:58:cc:40:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  9 14:58:20 2026 GMT
            Not After : Jul  8 15:03:20 2027 GMT
        Subject: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:92:de:9b:59:bb:54:2b:b7:b0:bc:96:40:
                    4a:4b:1a:08:d3:e3:49:d1:c3:c6:a5:17:e2:61:d7:
                    c1:c5:07:6d:55:4d:d5:47:51:ec:ba:5a:45:24:70:
                    05:58:95:a5:30:1b:d2:a4:61:60:c0:c4:6c:24:78:
                    b1:4b:43:8a:b0:eb:91:30:bf:94:38:86:e2:2b:91:
                    46:fa:99:62:c1:df:ee:77:7a:e4:f4:20:37:38:e8:
                    80:a5:bb:d3:ca:1b:d0:31:12:fb:85:b7:01:22:15:
                    da:70:1a:b4:4f:58:8c:0f:6d:8f:c9:65:1c:94:42:
                    14:79:45:01:84:95:31:54:9e:dd:d9:28:93:40:e1:
                    54:12:b7:1b:b3:34:86:8e:8d:3b:74:bb:38:de:64:
                    73:97:1f:21:58:80:5f:3e:89:b4:ad:86:76:f9:16:
                    11:8f:5a:4d:d0:5b:8e:92:67:81:bc:86:37:33:f7:
                    ff:d5:ea:a8:dc:19:5e:50:84:2a:02:d4:a9:76:b1:
                    3b:62:aa:42:eb:a4:2f:5f:24:82:fa:49:40:ca:3f:
                    7d:6a:20:7d:a7:12:75:26:92:f1:83:f1:d6:72:ab:
                    18:83:da:b1:3b:1b:0e:0f:1d:d6:d2:2d:7b:06:b7:
                    0a:af:a7:81:d2:cb:77:24:0e:2d:96:d1:97:b6:57:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:2d:ba:86:df:f0:10:d5:68:c7:62:c1:d8:65:f2:22:a6:
         76:10:73:2d:1e:d9:b0:6b:23:d4:c0:79:f5:f0:07:0e:b8:0d:
         1b:fd:5b:9e:6c:e5:c5:9e:95:12:84:44:87:d7:87:89:16:a1:
         3e:30:8c:15:a7:72:fe:65:89:2c:0d:67:a6:a7:a9:8a:56:6f:
         b3:a8:e2:9f:a7:76:47:e3:ed:b8:a5:d8:9a:f3:17:f7:80:7f:
         85:0e:6a:05:34:48:67:8e:97:8e:45:8e:45:45:8a:b6:68:ec:
         00:61:37:40:15:b3:64:20:ae:e6:b5:29:6b:04:cf:5a:0b:74:
         bd:ab:fa:e0:fd:6f:dd:81:c3:91:a9:76:c1:c7:7e:81:93:6e:
         b4:43:76:08:2f:66:d5:f4:ad:76:c5:3c:6b:53:18:b1:e1:76:
         4b:3d:93:ce:02:11:5f:59:52:a9:66:e5:f9:d7:ec:c1:db:3e:
         80:00:a6:8f:82:e0:f5:0d:66:b8:8a:57:99:51:55:ef:0c:c8:
         a6:75:d2:13:05:a6:dd:d9:95:e7:f5:bb:d8:1e:10:3a:64:c9:
         e4:8b:af:4a:67:74:ea:ab:d5:71:d4:24:0a:73:1f:f3:6f:db:
         8e:0c:c1:b6:5f:5e:bb:3d:29:a3:5d:6f:5f:c2:d2:8f:2c:d0:
         b3:00:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:30:16 2026 by rpki-client