Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
File:                     F6386FABEA39210B665A6A55AE5DA66BE6741597.cer (raw, json)
Hash identifier:          OfbHj2cXU/VTKE7K9zkaWlgjpC5aeZZrr5AVXWyK+PA=
Subject key identifier:   F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       456F4161076A8A22E8AF1A9E4E4EDC1746C2051F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Thu 11 Jun 2026 11:13:40 +0000
Certificate not after:    Thu 10 Jun 2027 11:18:40 +0000
Subordinate resources:    IP: 85.155.227.0/24
                          IP: 2a05:dfc4::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6f:41:61:07:6a:8a:22:e8:af:1a:9e:4e:4e:dc:17:46:c2:05:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun 11 11:13:40 2026 GMT
            Not After : Jun 10 11:18:40 2027 GMT
        Subject: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:60:1b:4e:8b:c7:a5:67:54:1b:60:63:77:
                    b1:06:6f:20:8b:e9:d7:d4:54:e5:f6:08:95:35:f9:
                    6b:f2:2c:be:1f:2e:7d:5b:8d:62:4c:46:09:6f:39:
                    c8:d9:7c:f3:e0:66:39:56:b9:9b:3f:b5:5f:73:ae:
                    9a:b5:8c:d1:17:1d:c9:05:1a:36:12:cd:4d:aa:35:
                    70:9c:0a:eb:71:32:6d:d2:02:b2:38:38:38:9a:0a:
                    ff:fa:b1:69:14:42:c2:0c:ea:d6:bd:e2:1f:09:00:
                    8b:dd:8f:9f:d8:11:00:37:9b:d6:b8:9a:ab:c6:20:
                    c9:0a:7c:a7:3c:65:43:97:e3:31:69:39:b8:dc:2b:
                    8a:22:48:f2:d0:f4:ab:37:f9:49:c5:00:f5:06:17:
                    74:84:90:6f:57:b1:14:f3:7c:28:77:d1:7b:d5:df:
                    b9:68:b9:ba:54:39:2f:13:f0:8b:76:b4:af:d7:2c:
                    86:56:83:c7:6c:3c:84:a1:45:6f:09:65:1a:54:8a:
                    0f:4b:fc:55:c5:d6:da:02:7e:cb:3c:ef:36:76:55:
                    59:b3:d9:60:83:9b:00:5e:a3:e8:27:7a:5c:aa:e5:
                    b3:79:32:c3:2b:36:0d:56:4b:a1:02:61:9b:3a:c7:
                    b1:9c:48:85:61:69:8f:d0:ea:fb:4f:3d:1c:d7:ca:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.227.0/24
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:66:69:28:6c:55:52:5c:a1:0b:a0:25:97:0a:f0:84:d5:
         5b:37:f7:28:9f:4a:a3:c0:38:45:27:96:49:9b:33:d2:f7:9b:
         50:6d:bd:78:3b:4f:b2:ee:92:11:ff:89:0f:7f:20:9f:7a:0e:
         54:3f:29:18:bc:6b:60:cf:88:c6:52:02:3b:cc:99:7f:dd:a7:
         7a:51:cd:01:d7:52:5c:4d:98:36:e9:8f:a5:57:4c:cd:2c:00:
         23:a2:76:c4:bb:b5:38:78:02:36:1a:03:22:ba:5a:76:07:f2:
         e1:c7:c2:59:7c:23:4b:14:7e:42:1f:7e:91:db:91:4f:ae:eb:
         e4:40:fc:1e:9a:bb:ed:5e:31:38:c5:db:98:c3:bb:47:46:65:
         b6:b8:d4:3a:f1:43:f9:28:8b:0e:69:fb:d5:c0:31:44:5a:54:
         04:70:78:f5:ce:11:7d:94:73:f5:4c:05:6b:7d:7a:da:44:6f:
         32:01:a0:ea:c2:ce:14:bb:05:c4:cb:9f:f0:e7:30:23:75:75:
         d8:07:59:7b:c3:20:b4:bf:85:28:14:5d:ae:60:de:f6:55:60:
         16:04:20:db:83:96:7f:73:2c:b5:cf:b7:66:62:94:d8:23:06:
         7d:f5:e7:5e:ce:37:f3:e2:71:d9:19:75:fb:d4:66:44:e7:19:
         dc:93:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:15:42 2026 by rpki-client