Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
File:                     8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer (raw, json)
Hash identifier:          DF1CYC2AvyCFCxEBPKFFiyjpN2QNEZdGwzbk+nW8KOA=
Subject key identifier:   8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       75E5904975CC5F3898DC116F3D493CE3269DE14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Fri 09 Oct 2026 03:28:33 +0000
Certificate not after:    Fri 08 Oct 2027 03:33:33 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e5:90:49:75:cc:5f:38:98:dc:11:6f:3d:49:3c:e3:26:9d:e1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Oct  9 03:28:33 2026 GMT
            Not After : Oct  8 03:33:33 2027 GMT
        Subject: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:92:de:9b:59:bb:54:2b:b7:b0:bc:96:40:
                    4a:4b:1a:08:d3:e3:49:d1:c3:c6:a5:17:e2:61:d7:
                    c1:c5:07:6d:55:4d:d5:47:51:ec:ba:5a:45:24:70:
                    05:58:95:a5:30:1b:d2:a4:61:60:c0:c4:6c:24:78:
                    b1:4b:43:8a:b0:eb:91:30:bf:94:38:86:e2:2b:91:
                    46:fa:99:62:c1:df:ee:77:7a:e4:f4:20:37:38:e8:
                    80:a5:bb:d3:ca:1b:d0:31:12:fb:85:b7:01:22:15:
                    da:70:1a:b4:4f:58:8c:0f:6d:8f:c9:65:1c:94:42:
                    14:79:45:01:84:95:31:54:9e:dd:d9:28:93:40:e1:
                    54:12:b7:1b:b3:34:86:8e:8d:3b:74:bb:38:de:64:
                    73:97:1f:21:58:80:5f:3e:89:b4:ad:86:76:f9:16:
                    11:8f:5a:4d:d0:5b:8e:92:67:81:bc:86:37:33:f7:
                    ff:d5:ea:a8:dc:19:5e:50:84:2a:02:d4:a9:76:b1:
                    3b:62:aa:42:eb:a4:2f:5f:24:82:fa:49:40:ca:3f:
                    7d:6a:20:7d:a7:12:75:26:92:f1:83:f1:d6:72:ab:
                    18:83:da:b1:3b:1b:0e:0f:1d:d6:d2:2d:7b:06:b7:
                    0a:af:a7:81:d2:cb:77:24:0e:2d:96:d1:97:b6:57:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:6c:3b:5d:63:b4:81:56:5a:38:2d:91:7b:80:05:c7:97:b1:
         80:51:74:e8:71:9f:21:a6:4f:bf:79:b8:45:ef:80:23:e8:d7:
         82:6a:72:02:3e:7a:45:6c:8c:cb:40:a6:18:eb:2c:84:b4:a0:
         48:f8:4c:b5:94:73:fe:bf:2c:39:59:43:4e:3f:0a:51:24:a2:
         b7:26:43:cf:ba:e1:f3:31:8f:4a:c6:2e:44:7e:8e:d7:c8:24:
         b6:59:cc:3c:f6:88:d3:ca:03:33:96:95:1f:02:8f:0c:e5:3b:
         98:1d:c9:30:9c:28:ff:08:6e:c0:07:bc:2f:e1:d9:80:29:ec:
         05:ea:96:82:d1:f9:6b:7e:82:ee:db:21:c4:1c:84:6b:c6:6b:
         fa:4c:15:94:0a:cf:11:f6:a8:a1:db:23:41:16:f3:c4:1b:94:
         cf:42:0b:f3:f6:5d:7e:e4:8d:69:3a:31:d6:92:88:29:29:c5:
         41:ad:ce:3e:6e:84:0a:3e:e6:55:ca:9d:2c:35:86:60:de:95:
         03:f5:0d:b9:b0:85:29:21:c8:f0:72:37:e3:4a:5d:5a:4a:ef:
         bb:07:89:f6:51:d4:d7:6c:1e:d9:75:70:d9:29:64:48:ee:4e:
         f5:32:73:95:d8:d8:5d:2e:43:94:85:af:be:43:73:51:5a:a5:
         14:70:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:49:19 2026 by rpki-client