$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/EEF3EC40152A747D52835AE8973E7DC8C193A840.cer File: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (raw, json) Hash identifier: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4= Subject key identifier: EE:F3:EC:40:15:2A:74:7D:52:83:5A:E8:97:3E:7D:C8:C1:93:A8:40 Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 2D09123A233B7F8F2D3D61FF04AD04921EC652FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Manifest: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft caRepository: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/ Notify URL: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml Certificate not before: Sat 27 Sep 2025 17:55:44 +0000 Certificate not after: Sat 26 Sep 2026 18:00:44 +0000 Subordinate resources: IP: 2602:fa6e:100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 12:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:09:12:3a:23:3b:7f:8f:2d:3d:61:ff:04:ad:04:92:1e:c6:52:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Sep 27 17:55:44 2025 GMT Not After : Sep 26 18:00:44 2026 GMT Subject: CN=EEF3EC40152A747D52835AE8973E7DC8C193A840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:39:6d:78:24:e3:fa:b9:54:5d:b5:7d:66: b1:27:94:8e:6e:22:7e:38:58:99:82:fc:69:ed:18: 5a:9d:ee:dc:f7:4a:4f:5d:9d:f5:04:c3:e3:12:8d: 2f:d1:07:43:e1:40:ee:a4:2b:f4:e1:4d:b4:6f:32: 48:50:b3:a5:d3:b4:e0:51:53:6b:1a:d9:a8:8b:b0: 67:db:d2:00:da:62:72:ee:db:90:0a:84:58:f6:02: a9:a3:0c:b3:db:30:a2:04:5b:30:ab:fb:ed:23:f0: bd:87:1d:69:5c:57:80:0c:5a:4f:e8:2a:6b:22:c6: 31:1b:4a:eb:f8:cb:00:14:77:af:4e:97:dc:45:df: 77:3b:b9:93:53:b7:51:a9:c9:d0:79:68:a4:ed:82: 7e:1f:0b:4b:eb:71:52:a6:15:a4:84:c4:c0:21:17: 5f:ed:4e:88:fd:2c:2d:ea:b9:be:dc:8f:f2:7b:42: ff:de:81:44:0b:f8:56:e5:43:dc:93:fb:43:ef:b3: ba:6a:1c:7a:f7:76:7b:18:9b:56:8b:21:d5:54:3a: 11:d1:f9:24:41:d0:ee:6d:b2:3c:ac:53:43:59:00: 7e:25:0d:cb:4a:37:29:14:e5:21:06:8b:55:92:70: 48:8e:1b:b4:e8:c3:b5:30:31:d3:45:32:a5:0b:4e: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:F3:EC:40:15:2A:74:7D:52:83:5A:E8:97:3E:7D:C8:C1:93:A8:40 X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: CA Repository - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/ RPKI Manifest - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft RPKI Notify - URI:https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fa6e:100::/40 Signature Algorithm: sha256WithRSAEncryption 26:6b:04:ee:f9:84:2b:5e:3d:3d:e1:28:cf:75:e0:ee:46:96: bb:b5:da:63:ec:8a:fd:38:87:80:9d:7b:58:5f:04:d3:1f:da: d2:1e:85:c8:a6:20:4c:c5:c1:86:71:5d:82:05:31:a0:72:ef: 58:34:08:7c:89:c2:1f:f1:cc:4e:fe:35:77:24:b4:91:0e:ef: 2a:7e:6c:09:55:3a:cf:6d:18:80:40:a0:83:e0:42:20:3c:ec: 61:a9:ec:51:1d:1d:95:43:3c:53:8e:f7:8e:30:da:9d:e2:47: 55:3e:cf:eb:05:86:53:97:e3:d3:ef:14:94:93:64:09:2d:44: c9:cb:96:c3:9c:49:3b:b8:35:e0:e0:21:02:cf:30:05:70:97: 23:4c:83:81:47:72:e0:56:57:f6:60:27:24:d8:7b:2a:14:21: cc:6c:52:37:ec:b0:35:36:ac:d7:62:d1:4d:37:50:b1:61:e1: 85:c2:a7:60:67:8c:de:1b:fe:b8:25:67:09:dc:a0:80:c0:14: be:9e:e7:5d:97:fe:13:80:ac:a9:7a:87:8c:ed:4c:7f:d2:cd: 40:2a:c5:25:dd:de:9f:43:07:b2:4b:6c:3f:7b:28:84:97:ff: db:ad:17:72:13:9c:54:cf:dc:8a:a9:c7:5b:6a:86:9e:01:62: 94:7d:5d:e2 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIULQkSOiM7f48tPWH/BK0Ekh7GUvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUwOTI3MTc1NTQ0WhcNMjYwOTI2MTgwMDQ0 WjAzMTEwLwYDVQQDEyhFRUYzRUM0MDE1MkE3NDdENTI4MzVBRTg5NzNFN0RDOEMx OTNBODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwak5bXgk4/q5 VF21fWaxJ5SObiJ+OFiZgvxp7Rhane7c90pPXZ31BMPjEo0v0QdD4UDupCv04U20 bzJIULOl07TgUVNrGtmoi7Bn29IA2mJy7tuQCoRY9gKpowyz2zCiBFswq/vtI/C9 hx1pXFeADFpP6CprIsYxG0rr+MsAFHevTpfcRd93O7mTU7dRqcnQeWik7YJ+HwtL 63FSphWkhMTAIRdf7U6I/Swt6rm+3I/ye0L/3oFEC/hW5UPck/tD77O6ahx693Z7 GJtWiyHVVDoR0fkkQdDubbI8rFNDWQB+JQ3LSjcpFOUhBotVknBIjhu06MO1MDHT RTKlC06YNQIDAQABo4IDPDCCAzgwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU 7vPsQBUqdH1Sg1rolz59yMGTqEAwHwYDVR0jBBgwFoAUam9uwnKl69wYJBwshNHZ /pTBJaowDgYDVR0PAQH/BAQDAgEGMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDky ZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3MkE1RUJE QzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHj MIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5 L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3 ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzgyOWZiODcy LTE1YmItNGE0ZS05ZWQ5LTI1OTk2MGIwNDliZC80MzcyOTk5NzE1MmZkODRmY2Rh NmQxOTBjM2IzMTk1YjAyNjc5NjYwMTEyYmU5YTJkNy5jZXIwggEIBggrBgEFBQcB CwSB+zCB+DBBBggrBgEFBQcwBYY1cnN5bmM6Ly9rcmlsbC5jYS1iYy0wMS5zc21p ZGdlLnh5ei9yZXBvL1NzbWlkZ2VMTEMvMi8wbQYIKwYBBQUHMAqGYXJzeW5jOi8v a3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXovcmVwby9Tc21pZGdlTExDLzIvRUVG M0VDNDAxNTJBNzQ3RDUyODM1QUU4OTczRTdEQzhDMTkzQTg0MC5tZnQwRAYIKwYB BQUHMA2GOGh0dHBzOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXovcnJkcC9u b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvpuATANBgkqhkiG9w0BAQsFAAOCAQEA JmsE7vmEK149PeEoz3Xg7kaWu7XaY+yK/TiHgJ17WF8E0x/a0h6FyKYgTMXBhnFd ggUxoHLvWDQIfInCH/HMTv41dyS0kQ7vKn5sCVU6z20YgECgg+BCIDzsYansUR0d lUM8U473jjDaneJHVT7P6wWGU5fj0+8UlJNkCS1EycuWw5xJO7g14OAhAs8wBXCX I0yDgUdy4FZX9mAnJNh7KhQhzGxSN+ywNTas12LRTTdQsWHhhcKnYGeM3hv+uCVn CdyggMAUvp7nXZf+E4CsqXqHjO1Mf9LNQCrFJd3en0MHsktsP3sohJf/260XchOc VM/ciqnHW2qGngFilH1d4g== -----END CERTIFICATE-----Generated at Mon Oct 27 21:36:58 2025 by rpki-client