Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
File:                     A912092CFA11F378852F52266C793AB678233205.cer (raw, json)
Hash identifier:          zcfpEemim3mhVQsYf6HK1qsJDj1ttaWWOvz7vlKsJrU=
Subject key identifier:   A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       64CBC77BC2F6AC0D3757E2EC5E2B2BB516902A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 03 Jul 2025 19:35:39 +0000
Certificate not after:    Thu 02 Jul 2026 19:40:39 +0000
Subordinate resources:    IP: 2a09:54c3::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cb:c7:7b:c2:f6:ac:0d:37:57:e2:ec:5e:2b:2b:b5:16:90:2a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 19:35:39 2025 GMT
            Not After : Jul  2 19:40:39 2026 GMT
        Subject: CN=A912092CFA11F378852F52266C793AB678233205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:cc:1d:43:20:54:07:52:b3:f2:17:a6:cf:
                    7b:2a:1c:e0:8a:fe:c8:0b:26:df:98:a2:63:39:80:
                    7e:83:c4:29:67:c6:f8:a9:29:a6:4e:9e:51:7c:88:
                    53:60:b6:db:7e:dd:ec:8a:05:9a:92:27:fc:37:38:
                    f6:5f:5f:c3:5b:4b:86:b5:2b:f9:cd:9d:e1:cc:fb:
                    0b:f8:67:46:d6:31:46:a0:65:78:09:88:9f:fc:6f:
                    47:e7:dc:e2:fc:01:35:f6:f4:ad:5d:f3:c1:46:40:
                    5a:07:6c:84:6d:6b:45:ed:1f:77:7b:78:83:e4:a7:
                    58:a5:57:24:34:33:ff:4e:23:9f:01:5f:c0:d7:70:
                    8d:1a:3f:03:a5:5f:12:92:b0:f1:a4:66:6d:97:b0:
                    c9:4a:50:1e:f8:f5:b2:ae:e2:29:76:53:ed:22:0d:
                    f8:4a:db:93:a7:56:8e:fe:62:b5:9a:96:01:1b:d8:
                    3e:69:eb:dd:56:47:44:71:be:7e:8e:da:46:ca:37:
                    e4:e6:51:61:03:ff:b4:74:c7:7b:f5:60:34:63:c7:
                    4e:5b:03:c2:44:66:01:54:c2:23:93:4a:1f:1c:cb:
                    c7:fa:99:15:7e:f0:51:f8:19:2c:f9:97:8a:34:7f:
                    a5:14:ec:96:68:d0:f3:d0:33:71:6f:23:4a:93:6e:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:7b:23:4b:de:d4:9b:94:8b:b5:f8:57:5c:66:79:dc:f8:
         c4:6a:06:ca:53:f0:22:71:87:41:50:ef:bf:f0:ee:17:6b:71:
         1a:b4:59:73:f6:d7:e5:45:eb:f1:dc:23:c6:9f:27:46:6b:fe:
         7f:53:ef:68:a9:d5:7d:fe:a0:fa:4b:1b:bb:db:5d:85:1c:df:
         ba:57:22:de:c9:b6:a2:1e:77:39:2d:49:eb:6f:ae:8f:27:9d:
         89:da:e5:80:cf:f4:ca:75:d9:05:09:18:d0:dd:af:d9:0c:41:
         40:30:51:01:79:61:b0:67:e2:8c:45:ef:b1:72:24:5d:31:1a:
         da:5d:fe:d0:f8:2d:4f:82:cd:dd:90:af:89:6c:21:ef:27:0b:
         8a:84:ce:a5:2c:3c:7d:42:71:07:a2:27:10:4a:3b:43:bf:40:
         2e:5c:74:53:6d:6f:bb:cc:12:6a:57:6c:ba:5b:ff:80:03:e0:
         06:27:57:c0:d2:24:61:e0:e4:79:38:8c:d2:bd:cf:c7:97:5e:
         8d:23:e4:36:56:d7:5f:53:4d:a6:5f:90:2e:99:c7:36:2c:62:
         0a:45:7a:bc:1f:19:07:6a:cb:5b:af:58:d0:cd:c0:47:df:f9:
         18:68:cc:c9:32:7e:ab:32:08:81:f6:8c:e1:51:d4:43:7c:97:
         fe:3a:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:27:23 2025 by rpki-client