Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
File:                     A912092CFA11F378852F52266C793AB678233205.cer (raw, json)
Hash identifier:          Yq+KmFEiBMDzMTCLn8xJVCG8402UtJL4ibtDxc0N/lw=
Subject key identifier:   A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       15E700BC9C020DBA22C141EA0A6CFF551DAC6025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 14 May 2026 02:32:31 +0000
Certificate not after:    Thu 13 May 2027 02:37:31 +0000
Subordinate resources:    IP: 2a05:dfc0::/32
                          IP: 2a09:54c3::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e7:00:bc:9c:02:0d:ba:22:c1:41:ea:0a:6c:ff:55:1d:ac:60:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: May 14 02:32:31 2026 GMT
            Not After : May 13 02:37:31 2027 GMT
        Subject: CN=A912092CFA11F378852F52266C793AB678233205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:cc:1d:43:20:54:07:52:b3:f2:17:a6:cf:
                    7b:2a:1c:e0:8a:fe:c8:0b:26:df:98:a2:63:39:80:
                    7e:83:c4:29:67:c6:f8:a9:29:a6:4e:9e:51:7c:88:
                    53:60:b6:db:7e:dd:ec:8a:05:9a:92:27:fc:37:38:
                    f6:5f:5f:c3:5b:4b:86:b5:2b:f9:cd:9d:e1:cc:fb:
                    0b:f8:67:46:d6:31:46:a0:65:78:09:88:9f:fc:6f:
                    47:e7:dc:e2:fc:01:35:f6:f4:ad:5d:f3:c1:46:40:
                    5a:07:6c:84:6d:6b:45:ed:1f:77:7b:78:83:e4:a7:
                    58:a5:57:24:34:33:ff:4e:23:9f:01:5f:c0:d7:70:
                    8d:1a:3f:03:a5:5f:12:92:b0:f1:a4:66:6d:97:b0:
                    c9:4a:50:1e:f8:f5:b2:ae:e2:29:76:53:ed:22:0d:
                    f8:4a:db:93:a7:56:8e:fe:62:b5:9a:96:01:1b:d8:
                    3e:69:eb:dd:56:47:44:71:be:7e:8e:da:46:ca:37:
                    e4:e6:51:61:03:ff:b4:74:c7:7b:f5:60:34:63:c7:
                    4e:5b:03:c2:44:66:01:54:c2:23:93:4a:1f:1c:cb:
                    c7:fa:99:15:7e:f0:51:f8:19:2c:f9:97:8a:34:7f:
                    a5:14:ec:96:68:d0:f3:d0:33:71:6f:23:4a:93:6e:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc0::/32
                  2a09:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:69:ef:d1:e1:38:cf:9e:ae:b4:e6:cd:f6:ec:bf:dd:53:
         b0:2d:43:37:aa:5d:62:72:4e:e5:90:4e:fa:0a:a2:b6:4c:08:
         f1:66:7b:df:3b:95:17:09:2b:29:b4:7d:f1:91:26:df:dd:ca:
         78:14:74:94:15:38:f2:67:ad:44:c6:57:ac:e1:88:d7:5b:a7:
         fa:da:4b:2e:6b:a5:f9:8a:61:0b:59:e4:e7:89:ba:52:5a:2e:
         0e:4a:22:2f:c0:f0:22:e3:71:31:80:f9:3e:d3:6e:85:7a:30:
         e7:73:b3:65:5e:be:1f:80:51:08:c0:20:06:ce:d9:f6:29:45:
         26:f0:98:7f:37:0d:3b:6c:1f:a1:e9:4c:79:e4:68:e4:a9:d0:
         7e:29:01:29:1a:fa:56:63:bd:72:c8:b8:90:c5:b9:26:ab:99:
         b7:d5:fe:34:d4:db:53:cf:2f:50:9d:be:22:f2:e2:07:b5:9b:
         28:52:29:b1:7b:05:0f:10:0f:55:5f:56:f2:2b:f1:57:8d:43:
         ca:75:9d:b3:81:56:ab:bb:6e:20:de:13:91:cd:20:84:e0:09:
         9b:76:b7:b6:34:d7:7c:aa:e5:98:91:15:08:40:f8:e1:32:a8:
         bb:6b:a2:d2:b9:33:e4:93:3e:33:96:ce:c4:85:24:a9:72:45:
         c1:51:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:37 2026 by rpki-client