Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
File:                     C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer (raw, json)
Hash identifier:          kloc/nrWe9/wcvk+eeSX6JoMmmyXDmR2yLVQQl3Fsok=
Subject key identifier:   C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       5A56845F24C52424D3DF437A12400933AB82B78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 21 Feb 2026 22:58:10 +0000
Certificate not after:    Sat 20 Feb 2027 23:03:10 +0000
Subordinate resources:    IP: 103.139.88.0/24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:56:84:5f:24:c5:24:24:d3:df:43:7a:12:40:09:33:ab:82:b7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Feb 21 22:58:10 2026 GMT
            Not After : Feb 20 23:03:10 2027 GMT
        Subject: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:86:5e:b5:ce:56:cc:9f:68:30:d3:47:c5:
                    bf:78:bf:c8:8b:e9:c3:da:4b:68:cd:dc:76:a3:f9:
                    b5:64:df:a8:01:d6:a5:16:e6:f2:28:c9:71:7b:ef:
                    af:5c:ae:32:f9:db:3e:1f:2a:53:8e:aa:dc:b1:b6:
                    2c:88:22:ba:5a:f8:00:93:7b:1c:9d:85:a1:04:a4:
                    7e:b8:4d:b2:93:35:6a:a2:dc:37:35:69:dc:f5:20:
                    87:44:c4:0a:ed:f0:94:4f:61:aa:73:d5:d5:d2:7f:
                    15:8f:81:93:d9:06:f4:63:9f:bc:23:c5:09:c3:df:
                    4b:16:12:c6:2c:ba:f3:f1:cd:78:d2:3a:e3:9b:56:
                    b7:f9:45:4b:72:93:e0:36:2f:f1:8a:ca:cc:a9:3c:
                    84:3d:8c:a4:3f:42:8b:7b:e8:ae:2c:82:8b:9e:ae:
                    5b:39:41:a6:fa:d3:38:01:13:55:be:7e:36:a3:74:
                    d2:ea:3a:9a:df:46:da:f9:13:b1:27:eb:1e:66:f6:
                    df:37:12:60:f0:2e:69:f8:46:89:68:0d:e2:c0:14:
                    b6:55:fa:8d:1a:dd:67:56:51:1a:2e:a5:c4:d5:bf:
                    ee:56:04:80:9f:58:0a:46:2f:6b:0a:8a:43:a1:7a:
                    ca:e9:bd:66:f2:a4:0b:98:7a:e9:f2:56:06:03:f9:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:a7:be:0f:55:00:69:b3:04:78:de:98:2a:ee:c2:32:19:
         76:26:79:1f:08:51:45:b3:95:27:16:c8:d6:31:7a:d1:4a:54:
         17:38:0a:ac:f3:24:f4:4b:7a:c0:d1:cc:06:37:34:f1:83:9b:
         5b:4e:8f:a6:5a:2c:eb:c7:41:53:be:99:8f:9c:03:34:3f:61:
         30:30:d0:0b:9f:33:14:32:46:30:b7:e1:cd:0a:6d:a3:85:62:
         b1:7e:5f:81:ef:67:c8:00:36:e8:0e:d2:72:2a:0a:4a:fa:f5:
         41:84:16:f3:93:dd:2f:3b:00:67:03:bf:ab:17:c1:e5:d8:58:
         a6:d9:67:7c:2a:2a:d7:e4:28:7b:e6:53:e0:4e:0a:48:e9:54:
         d5:70:dd:88:e5:a1:22:78:b9:88:3b:3e:9f:b2:3a:4e:aa:e8:
         1c:c6:6e:5d:57:6d:9c:d4:be:5d:3b:dd:15:0c:74:e5:b0:4b:
         aa:d4:ac:51:53:76:eb:31:41:f6:77:e9:4d:5a:b7:2c:00:74:
         b5:51:0c:12:64:a9:07:c5:14:96:38:59:55:b0:f5:9f:82:e8:
         23:1d:8a:12:f2:b0:3c:ed:37:76:2d:6b:c5:f6:1e:31:6c:54:
         71:1e:82:58:c1:dd:57:c7:b1:f7:f2:cd:37:38:0f:7e:01:6a:
         bf:bd:5d:dc
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUWlaEXyTFJCTT30N6EkAJM6uCt4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAyMjEyMjU4MTBaFw0yNzAyMjAyMzAzMTBaMDMxMTAvBgNV
BAMTKEMzRjAyQzJBRjM4MjM3N0FEQTlCNTFGMkVBMzcwRTc0NTQxMkQxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMYZetc5WzJ9oMNNHxb94v8iL
6cPaS2jN3Haj+bVk36gB1qUW5vIoyXF7769crjL52z4fKlOOqtyxtiyIIrpa+ACT
exydhaEEpH64TbKTNWqi3Dc1adz1IIdExArt8JRPYapz1dXSfxWPgZPZBvRjn7wj
xQnD30sWEsYsuvPxzXjSOuObVrf5RUtyk+A2L/GKysypPIQ9jKQ/Qot76K4sgoue
rls5Qab60zgBE1W+fjajdNLqOprfRtr5E7En6x5m9t83EmDwLmn4RoloDeLAFLZV
+o0a3WdWURoupcTVv+5WBICfWApGL2sKikOhesrpvWbypAuYeunyVgYD+TxpAgMB
AAGjggLRMIICzTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTD8Cwq84I3etqb
UfLqNw50VBLR3zAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMy
My1hOTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxMDk4
YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8xL0MzRjAyQzJBRjM4MjM3
N0FEQTlCNTFGMkVBMzcwRTc0NTQxMkQxREYubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGeLWDANBgkqhkiG9w0BAQsFAAOCAQEAn0unvg9VAGmzBHjemCruwjIZdiZ5
HwhRRbOVJxbI1jF60UpUFzgKrPMk9Et6wNHMBjc08YObW06Pplos68dBU76Zj5wD
ND9hMDDQC58zFDJGMLfhzQpto4VisX5fge9nyAA26A7ScioKSvr1QYQW85PdLzsA
ZwO/qxfB5dhYptlnfCoq1+Qoe+ZT4E4KSOlU1XDdiOWhIni5iDs+n7I6TqroHMZu
XVdtnNS+XTvdFQx05bBLqtSsUVN26zFB9nfpTVq3LAB0tVEMEmSpB8UUljhZVbD1
n4LoIx2KEvKwPO03di1rxfYeMWxUcR6CWMHdV8ex9/LNNzgPfgFqv71d3A==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:49:14 2026 by rpki-client