Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
File:                     F6386FABEA39210B665A6A55AE5DA66BE6741597.cer (raw, json)
Hash identifier:          4nQRA7JSxLQhu85NfPaOuSjC4YinJZ/oQEOla0JGprw=
Subject key identifier:   F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       6FD59AF5DE22315895843D37A2303F00B443AB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Tue 21 Apr 2026 07:26:30 +0000
Certificate not after:    Tue 20 Apr 2027 07:31:30 +0000
Subordinate resources:    IP: 85.155.227.0/24
                          IP: 2a05:dfc4::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d5:9a:f5:de:22:31:58:95:84:3d:37:a2:30:3f:00:b4:43:ab:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Apr 21 07:26:30 2026 GMT
            Not After : Apr 20 07:31:30 2027 GMT
        Subject: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:60:1b:4e:8b:c7:a5:67:54:1b:60:63:77:
                    b1:06:6f:20:8b:e9:d7:d4:54:e5:f6:08:95:35:f9:
                    6b:f2:2c:be:1f:2e:7d:5b:8d:62:4c:46:09:6f:39:
                    c8:d9:7c:f3:e0:66:39:56:b9:9b:3f:b5:5f:73:ae:
                    9a:b5:8c:d1:17:1d:c9:05:1a:36:12:cd:4d:aa:35:
                    70:9c:0a:eb:71:32:6d:d2:02:b2:38:38:38:9a:0a:
                    ff:fa:b1:69:14:42:c2:0c:ea:d6:bd:e2:1f:09:00:
                    8b:dd:8f:9f:d8:11:00:37:9b:d6:b8:9a:ab:c6:20:
                    c9:0a:7c:a7:3c:65:43:97:e3:31:69:39:b8:dc:2b:
                    8a:22:48:f2:d0:f4:ab:37:f9:49:c5:00:f5:06:17:
                    74:84:90:6f:57:b1:14:f3:7c:28:77:d1:7b:d5:df:
                    b9:68:b9:ba:54:39:2f:13:f0:8b:76:b4:af:d7:2c:
                    86:56:83:c7:6c:3c:84:a1:45:6f:09:65:1a:54:8a:
                    0f:4b:fc:55:c5:d6:da:02:7e:cb:3c:ef:36:76:55:
                    59:b3:d9:60:83:9b:00:5e:a3:e8:27:7a:5c:aa:e5:
                    b3:79:32:c3:2b:36:0d:56:4b:a1:02:61:9b:3a:c7:
                    b1:9c:48:85:61:69:8f:d0:ea:fb:4f:3d:1c:d7:ca:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.227.0/24
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:02:aa:d1:a2:c0:a7:82:04:51:32:5a:f5:14:3b:77:2c:c4:
         1f:f1:ee:59:d5:6d:16:27:da:40:c9:f7:7e:37:fb:1c:5e:5b:
         48:a6:2b:fe:8e:95:fe:a2:75:3e:74:84:97:f9:af:d8:aa:f2:
         cb:0a:37:26:55:a1:5e:1e:27:ea:cb:1e:d9:de:31:66:05:13:
         ee:2b:20:53:98:39:1d:30:09:dc:e0:1a:0a:f7:df:fa:f3:ed:
         ea:84:5f:87:53:19:97:6a:41:26:18:59:95:dc:65:74:70:e0:
         da:f6:1f:da:0c:b3:88:fd:5c:00:21:f5:a4:63:55:15:61:2d:
         4d:5b:19:4c:35:2e:56:32:d6:0e:2c:08:ae:4f:5d:3c:d5:f1:
         27:72:77:16:17:b1:5f:69:99:a8:0a:4c:4b:38:be:3a:99:18:
         70:a6:89:c1:6c:d8:bb:e5:2d:63:79:33:ff:38:23:68:3f:91:
         a0:cd:20:d4:22:a0:e1:a7:99:9c:98:6c:02:78:6c:46:86:d4:
         a6:0f:29:e6:72:dc:6c:16:59:59:a5:f0:8a:ad:3c:a2:15:10:
         3d:51:03:0e:c7:c7:f9:a5:a7:29:6c:67:89:53:35:63:c1:5e:
         d2:d2:3d:05:ba:5d:d3:d8:e2:e2:2c:db:d4:d1:c8:9a:a2:57:
         e6:cd:e9:f0
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUb9Wa9d4iMViVhD03ojA/ALRDq4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA0MjEwNzI2MzBaFw0yNzA0MjAwNzMxMzBaMDMxMTAvBgNV
BAMTKEY2Mzg2RkFCRUEzOTIxMEI2NjVBNkE1NUFFNURBNjZCRTY3NDE1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQSmAbTovHpWdUG2Bjd7EGbyCL
6dfUVOX2CJU1+WvyLL4fLn1bjWJMRglvOcjZfPPgZjlWuZs/tV9zrpq1jNEXHckF
GjYSzU2qNXCcCutxMm3SArI4ODiaCv/6sWkUQsIM6ta94h8JAIvdj5/YEQA3m9a4
mqvGIMkKfKc8ZUOX4zFpObjcK4oiSPLQ9Ks3+UnFAPUGF3SEkG9XsRTzfCh30XvV
37loubpUOS8T8It2tK/XLIZWg8dsPIShRW8JZRpUig9L/FXF1toCfss87zZ2VVmz
2WCDmwBeo+gnelyq5bN5MsMrNg1WS6ECYZs6x7GcSIVhaY/Q6vtPPRzXyojTAgMB
AAGjggKXMIICkzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2OG+r6jkhC2Za
alWuXaZr5nQVlzAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIH3BggrBgEFBQcBCwSB6jCB5zA9BggrBgEFBQcwBYYxcnN5bmM6
Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy84LzBpBggr
BgEFBQcwCoZdcnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3hu
ZXR3b3Jrcy84L0Y2Mzg2RkFCRUEzOTIxMEI2NjVBNkE1NUFFNURBNjZCRTY3NDE1
OTcubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jwa2ktMDEucGR4bmV0LnVrL3Jy
ZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAVZvjMA0EAgACMAcDBQAqBd/EMA0G
CSqGSIb3DQEBCwUAA4IBAQCIAqrRosCnggRRMlr1FDt3LMQf8e5Z1W0WJ9pAyfd+
N/scXltIpiv+jpX+onU+dISX+a/YqvLLCjcmVaFeHifqyx7Z3jFmBRPuKyBTmDkd
MAnc4BoK99/68+3qhF+HUxmXakEmGFmV3GV0cODa9h/aDLOI/VwAIfWkY1UVYS1N
WxlMNS5WMtYOLAiuT1081fEncncWF7FfaZmoCkxLOL46mRhwponBbNi75S1jeTP/
OCNoP5GgzSDUIqDhp5mcmGwCeGxGhtSmDynmctxsFllZpfCKrTyiFRA9UQMOx8f5
pacpbGeJUzVjwV7S0j0Ful3T2OLiLNvU0ciaolfmzenw
-----END CERTIFICATE-----
Generated at Wed Apr 22 17:09:36 2026 by rpki-client