Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
File:                     F6386FABEA39210B665A6A55AE5DA66BE6741597.cer (raw, json)
Hash identifier:          xNRli3oa1cnzN4lpz4yG+PLbupm1frGRxRjY+lWv/xs=
Subject key identifier:   F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       1E843EF8ACC10FFF5B9B07400C8FE91FC40D9689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Thu 03 Jul 2025 15:48:43 +0000
Certificate not after:    Thu 02 Jul 2026 15:53:43 +0000
Subordinate resources:    IP: 2a05:dfc4::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:84:3e:f8:ac:c1:0f:ff:5b:9b:07:40:0c:8f:e9:1f:c4:0d:96:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:48:43 2025 GMT
            Not After : Jul  2 15:53:43 2026 GMT
        Subject: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:60:1b:4e:8b:c7:a5:67:54:1b:60:63:77:
                    b1:06:6f:20:8b:e9:d7:d4:54:e5:f6:08:95:35:f9:
                    6b:f2:2c:be:1f:2e:7d:5b:8d:62:4c:46:09:6f:39:
                    c8:d9:7c:f3:e0:66:39:56:b9:9b:3f:b5:5f:73:ae:
                    9a:b5:8c:d1:17:1d:c9:05:1a:36:12:cd:4d:aa:35:
                    70:9c:0a:eb:71:32:6d:d2:02:b2:38:38:38:9a:0a:
                    ff:fa:b1:69:14:42:c2:0c:ea:d6:bd:e2:1f:09:00:
                    8b:dd:8f:9f:d8:11:00:37:9b:d6:b8:9a:ab:c6:20:
                    c9:0a:7c:a7:3c:65:43:97:e3:31:69:39:b8:dc:2b:
                    8a:22:48:f2:d0:f4:ab:37:f9:49:c5:00:f5:06:17:
                    74:84:90:6f:57:b1:14:f3:7c:28:77:d1:7b:d5:df:
                    b9:68:b9:ba:54:39:2f:13:f0:8b:76:b4:af:d7:2c:
                    86:56:83:c7:6c:3c:84:a1:45:6f:09:65:1a:54:8a:
                    0f:4b:fc:55:c5:d6:da:02:7e:cb:3c:ef:36:76:55:
                    59:b3:d9:60:83:9b:00:5e:a3:e8:27:7a:5c:aa:e5:
                    b3:79:32:c3:2b:36:0d:56:4b:a1:02:61:9b:3a:c7:
                    b1:9c:48:85:61:69:8f:d0:ea:fb:4f:3d:1c:d7:ca:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:9f:98:cb:b6:a2:9c:7b:c9:c8:95:6e:bf:57:55:1f:b2:
         e7:86:52:45:fd:e4:81:01:1e:6f:7e:81:99:ea:24:84:98:40:
         f9:83:3c:49:51:f0:ae:aa:6f:42:d7:45:f4:76:7c:7d:78:e7:
         4f:d8:ad:aa:5b:5a:85:8c:2a:ed:4d:b4:a4:09:de:3e:db:e3:
         0d:18:15:f2:4e:7e:47:ba:7a:a9:23:a1:fd:68:b1:9b:45:87:
         45:89:09:9d:29:d0:61:03:0c:74:16:c5:48:e1:f2:d3:b8:93:
         5b:e5:b7:90:9e:8e:f7:fd:93:cb:40:43:d4:8c:80:8f:6f:ef:
         24:ae:29:08:ae:98:1f:ed:72:b7:13:64:df:09:ba:c6:a3:e2:
         f6:d9:46:f7:29:40:57:5b:d8:54:d2:76:b7:5e:47:c3:38:14:
         0c:ff:af:4b:23:e6:80:4b:9e:ef:c2:4e:bc:2c:21:9f:19:4e:
         78:48:c2:33:2f:c9:a2:13:ad:bd:ae:48:3d:c0:a7:54:93:f3:
         a7:d3:71:dd:33:65:93:73:03:f0:db:04:4a:57:71:22:7f:8c:
         d2:af:ec:dc:99:7e:39:bf:28:68:a0:39:57:19:bc:cc:3b:26:
         d1:d9:67:5a:c0:4a:89:00:c6:bd:66:eb:19:08:71:e8:42:77:
         1d:e3:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:55:19 2025 by rpki-client