$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer File: 892843788777A43273322096510EA10880E7E5EA.cer (raw, json) Hash identifier: F5s95FpqYyZL2h6umTVkXDeakWwehMraLPZZiIIJ8uQ= Subject key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 308BF5517F67E5AC4B91B4AC465204D6E812DD5A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 25 Jan 2025 23:38:59 +0000 Certificate not after: Sat 24 Jan 2026 23:43:59 +0000 Subordinate resources: IP: 2a07:54c0:ffee::/48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 03:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8b:f5:51:7f:67:e5:ac:4b:91:b4:ac:46:52:04:d6:e8:12:dd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jan 25 23:38:59 2025 GMT Not After : Jan 24 23:43:59 2026 GMT Subject: CN=892843788777A43273322096510EA10880E7E5EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:47:ed:1b:e6:f3:6f:41:e0:4d:de:97:a9: 3e:9f:1e:f8:bc:fc:dd:d2:f6:c1:27:5e:3e:7e:cf: 53:83:2d:0d:c4:e6:46:17:dc:92:07:60:89:b4:26: 6d:0c:0c:45:14:02:1b:b7:5f:8e:c1:15:29:f6:5f: c4:cd:9b:08:3b:99:47:ae:89:ef:d6:11:59:dd:72: 70:8c:bc:bf:c8:c4:02:d8:2a:8a:aa:ed:6a:49:ab: d3:c2:92:bc:8e:40:69:c1:35:21:ea:89:b8:8f:0b: 1d:1b:e7:64:7b:7b:89:73:2b:db:5e:e4:8e:c8:9e: 3b:b6:31:52:9e:84:5f:1b:b5:09:37:97:ff:f3:20: 36:20:72:26:71:36:d5:3c:08:fa:91:f8:80:19:d8: b7:41:0a:76:5b:72:17:a2:de:fd:6e:85:b5:e6:45: b0:46:de:c4:60:ad:e6:1a:47:ac:b8:82:4e:46:c2: 24:d6:3d:39:a9:ed:09:01:88:55:30:9d:8d:f6:e3: d6:91:b9:db:fa:0c:d8:60:1f:c9:dd:05:08:b5:9f: b7:8e:06:7a:d2:51:b0:fc:80:fe:18:d0:27:67:82: 04:8d:01:3e:30:e9:19:86:1c:18:7d:b3:e6:ed:ce: c2:e9:82:8d:30:bc:9d:00:69:15:eb:3b:8e:11:c3: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption 57:98:02:92:30:e8:98:7a:3f:ac:c1:1b:7b:fa:c3:ac:87:6c: db:9f:75:1a:57:97:d5:eb:78:a0:e8:b9:6d:ec:9e:37:68:a2: 7c:4a:0a:bd:52:a9:87:61:d3:1c:04:3f:5d:d4:d6:86:e1:84: 92:17:e1:c9:7d:61:3e:80:49:3e:a1:d1:55:43:12:64:01:4a: 2c:99:16:93:8f:31:91:a6:50:ed:87:28:5a:84:51:89:b9:82: b4:cb:e6:35:21:2a:bf:e0:df:c4:56:13:4a:8e:5a:2b:3d:25: 16:0f:1b:04:81:a3:0a:58:fb:65:c2:49:ff:0d:d4:fa:8f:78: d5:86:9a:15:d2:20:31:7c:01:9e:36:12:8b:ae:32:73:96:f0: 8a:95:3a:59:33:63:82:e2:90:a3:80:b6:68:d9:e7:7d:9c:62: 1f:b0:3f:d6:f9:56:9f:00:be:50:0d:d3:86:ab:9c:ee:18:36: 6e:20:2a:eb:c8:b0:82:f0:ae:37:f0:7a:22:91:c2:e3:9d:78: 6f:07:54:a8:7f:4f:ab:e1:f1:9a:c8:d7:b7:f3:b9:4d:68:44: 17:99:3a:b6:ea:80:c7:97:ad:74:97:7d:48:a1:3b:3e:e9:85: 88:e9:91:e7:09:8e:f8:e8:b9:29:fe:de:22:9e:81:57:f7:19: c5:96:7f:1d -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUMIv1UX9n5axLkbSsRlIE1ugS3VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTAxMjUyMzM4NTlaFw0yNjAxMjQyMzQzNTlaMDMxMTAvBgNV BAMTKDg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBkftG+bzb0HgTd6XqT6fHvi8 /N3S9sEnXj5+z1ODLQ3E5kYX3JIHYIm0Jm0MDEUUAhu3X47BFSn2X8TNmwg7mUeu ie/WEVndcnCMvL/IxALYKoqq7WpJq9PCkryOQGnBNSHqibiPCx0b52R7e4lzK9te 5I7Inju2MVKehF8btQk3l//zIDYgciZxNtU8CPqR+IAZ2LdBCnZbchei3v1uhbXm RbBG3sRgreYaR6y4gk5GwiTWPTmp7QkBiFUwnY3249aRudv6DNhgH8ndBQi1n7eO BnrSUbD8gP4Y0CdnggSNAT4w6RmGHBh9s+btzsLpgo0wvJ0AaRXrO44Rw7/bAgMB AAGjggL4MIIC9DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJKEN4h3ekMnMy IJZRDqEIgOfl6jAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8yLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk ZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8yLzg5Mjg0Mzc4ODc3N0E0MzI3MzMy MjA5NjUxMEVBMTA4ODBFN0U1RUEubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN BgkqhkiG9w0BAQsFAAOCAQEAV5gCkjDomHo/rMEbe/rDrIds2591GleX1et4oOi5 beyeN2iifEoKvVKph2HTHAQ/XdTWhuGEkhfhyX1hPoBJPqHRVUMSZAFKLJkWk48x kaZQ7YcoWoRRibmCtMvmNSEqv+DfxFYTSo5aKz0lFg8bBIGjClj7ZcJJ/w3U+o94 1YaaFdIgMXwBnjYSi64yc5bwipU6WTNjguKQo4C2aNnnfZxiH7A/1vlWnwC+UA3T hquc7hg2biAq68iwgvCuN/B6IpHC4514bwdUqH9Pq+HxmsjXt/O5TWhEF5k6tuqA x5etdJd9SKE7PumFiOmR5wmO+Oi5Kf7eIp6BV/cZxZZ/HQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:58:54 2025 by rpki-client