Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
File:                     E9AE8529E9A69A4FA376F17695E6EB8731823068.cer (raw, json)
Hash identifier:          DlSeMYi9gb/oRg8DrUUEJlCykkm+uGKUs4FNZ7bxqXk=
Subject key identifier:   E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       6507FCF4C8AAD7AD54A98B400E37D8F59E7FA9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 22 Feb 2026 14:39:59 +0000
Certificate not after:    Sun 21 Feb 2027 14:44:59 +0000
Subordinate resources:    IP: 2a05:dfc5::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:07:fc:f4:c8:aa:d7:ad:54:a9:8b:40:0e:37:d8:f5:9e:7f:a9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Feb 22 14:39:59 2026 GMT
            Not After : Feb 21 14:44:59 2027 GMT
        Subject: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:dc:40:30:a0:d5:66:6a:5c:e8:ed:ca:d4:
                    18:96:ec:e7:8f:43:f9:83:db:35:9a:96:5f:6b:4a:
                    62:26:ef:d4:61:85:e7:ea:fd:cd:f3:7c:55:2e:8c:
                    bb:94:89:80:d5:77:97:a1:d8:ff:9c:1f:f1:3a:03:
                    a2:3d:98:26:bb:2c:7b:12:a8:7c:ef:e9:e2:0a:70:
                    72:85:1b:ec:0b:4c:b9:20:90:95:6b:63:0b:8d:a6:
                    04:88:ad:71:0c:04:1e:5e:6e:d8:65:c4:ed:f9:3c:
                    5f:5d:56:d0:6e:50:ee:40:4a:bd:c6:c8:c5:96:09:
                    53:7e:96:2c:f5:1b:1c:72:11:1e:cd:a1:2e:d6:34:
                    10:0b:50:60:64:ac:f1:8b:dc:f6:63:ce:6a:10:be:
                    00:8c:6a:48:9d:71:e7:7d:e7:38:9e:b9:44:36:f0:
                    bf:65:28:15:d1:a2:f0:6a:a5:97:e8:9a:41:a9:0b:
                    b2:17:e5:d3:07:55:45:50:01:64:0b:cd:02:58:7b:
                    e8:26:d6:06:a8:9a:05:99:01:f9:8f:ea:3e:9c:ef:
                    ab:e2:34:d5:bb:b3:55:ba:76:5f:59:31:b8:49:64:
                    e5:ac:bf:50:38:5c:ec:de:43:e8:67:68:5d:cb:96:
                    52:aa:f6:ea:1a:0a:73:49:12:c2:e0:f8:cb:44:a6:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:85:47:0d:e1:de:af:66:da:c7:78:06:b5:7c:3e:78:a4:
         8f:d3:26:c0:49:2b:69:fb:e4:c9:1c:26:c6:0b:00:38:03:d8:
         1d:b7:9b:1f:1b:58:8a:0f:4c:65:4a:30:b8:fb:b0:2c:f8:11:
         62:1e:39:4d:65:e5:18:3b:43:19:e3:54:12:bf:0c:4e:55:a3:
         e7:3f:16:6a:02:df:36:64:ca:ac:c9:a8:65:90:a5:5c:0d:10:
         51:42:b1:e8:75:c5:a4:f6:4b:97:fc:db:f0:2c:00:29:40:5d:
         80:68:2e:d6:f3:67:c0:2c:6a:7c:12:ad:c8:1d:26:6a:65:9f:
         90:49:23:c6:50:13:d8:0b:f7:90:9f:a2:09:54:9a:26:b4:a1:
         6f:42:bb:d5:92:77:87:49:1a:c0:0f:31:a8:54:ba:e2:6f:4b:
         7c:e1:ee:0e:18:af:a9:9a:7e:78:da:ac:cd:e3:ae:af:62:7c:
         99:cc:b3:52:12:c3:b8:92:f8:26:6e:02:79:9b:46:f9:ee:61:
         55:73:de:9b:d7:7a:f1:a0:21:fd:c4:6f:ac:59:ca:8a:fd:1a:
         c8:59:de:46:73:49:04:d1:4a:51:7d:be:67:d7:6c:fd:1c:b9:
         b9:db:4e:e7:f2:f4:76:c6:23:df:55:d7:d3:c4:a8:a7:12:34:
         0d:83:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:49:18 2026 by rpki-client