Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
File:                     5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer (raw, json)
Hash identifier:          RrNmahTqXuWnIjEM3ns4e3ABh8GdV/M9qeBhusnUwZ4=
Subject key identifier:   5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       756A0EE0539480805D7AA67E916842363ECDD72F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Wed 22 Jul 2026 19:03:26 +0000
Certificate not after:    Wed 21 Jul 2027 19:08:26 +0000
Subordinate resources:    IP: 2602:fba1:9a0::/44
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:0e:e0:53:94:80:80:5d:7a:a6:7e:91:68:42:36:3e:cd:d7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Jul 22 19:03:26 2026 GMT
            Not After : Jul 21 19:08:26 2027 GMT
        Subject: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:77:a8:b7:74:17:5d:22:80:bc:4c:e3:87:
                    2a:e9:f6:bf:75:b4:1d:7f:96:2f:e9:a8:e1:c3:e2:
                    bd:0c:08:ea:c3:9c:2a:9d:8c:60:42:4c:f6:4f:ee:
                    90:9b:c5:1a:37:9b:3d:5e:a4:d6:72:f5:c1:3c:16:
                    db:b6:9e:d0:57:26:c3:3b:1b:2e:de:e9:ea:df:39:
                    00:20:0b:ba:37:66:74:d8:51:2b:2d:39:05:20:db:
                    d5:a6:bb:73:2f:78:b0:64:ae:d3:bd:46:07:72:80:
                    b5:dd:8c:b6:64:71:d6:65:b7:9d:3e:4c:fd:a3:35:
                    65:87:d4:be:69:6c:3d:ed:6c:ad:2f:32:5a:bc:a1:
                    0c:b7:e2:a1:ce:3e:93:6e:13:e5:f8:1e:c8:63:32:
                    e0:71:99:06:11:b1:0e:41:02:5a:84:a1:9b:48:9b:
                    5c:aa:b8:2f:7b:fa:d6:b5:64:70:75:6c:f4:47:2f:
                    c0:73:ac:07:85:8c:74:15:f9:1e:ac:6e:17:09:dd:
                    20:25:46:77:38:5d:f3:76:44:c7:b4:80:3b:a1:31:
                    b5:27:20:8c:42:53:b7:dd:64:80:23:31:16:97:48:
                    81:22:49:94:91:b5:64:52:21:e3:e6:2a:00:27:2f:
                    57:e1:c4:39:81:83:12:02:13:c6:c1:ff:b2:cf:f1:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:da:4e:63:b5:72:1a:e7:cf:f5:c7:da:1b:01:45:37:01:
         7b:58:43:c2:2b:81:d0:f6:c9:f7:0d:6b:d8:54:f5:f6:ee:67:
         e0:5f:ea:cd:9c:32:ef:76:c1:bd:c2:91:86:6e:10:2d:72:f0:
         0e:7d:e5:cd:2e:72:0f:31:7d:51:a6:13:a9:74:cc:b2:98:f1:
         b2:2a:66:bd:15:80:4e:86:56:09:90:98:c1:9d:9b:fe:56:29:
         c7:8e:e3:2f:cf:ec:15:32:30:49:d7:41:0b:f7:6b:0e:74:b8:
         80:c7:8e:1d:9f:8a:02:1c:0a:4b:fa:78:f5:28:0b:ee:3e:2e:
         42:b1:78:2f:14:e2:a2:7e:7f:08:ec:cc:02:d6:97:3b:55:b9:
         1e:8c:db:fd:44:88:6b:da:3a:ea:60:43:4d:ce:67:c1:ab:68:
         a5:d2:13:1a:9a:7d:b4:83:f0:18:25:f6:cf:e1:03:a5:8c:4d:
         50:ad:a3:f2:5b:ff:2f:d1:d1:14:41:be:74:84:2c:fa:a6:25:
         0a:4b:f6:7c:22:68:53:ef:5d:b8:38:66:c9:eb:17:4c:7f:3f:
         f5:83:4f:fa:ff:59:bf:18:a4:47:91:e4:53:88:0e:be:d2:20:
         58:a9:f5:e1:f2:31:26:f1:db:2e:87:19:91:14:5c:7a:b5:31:
         b7:14:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:46 2026 by rpki-client