Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
File:                     5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer (raw, json)
Hash identifier:          rZ5iVFV4Ppe7bX9PJ8XkWNr8sMrR7neTWTvZQUR8rl8=
Subject key identifier:   5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6CB8BC0301AC7737EA481688D9C1735672C7913E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 08:55:46 +0000
Certificate not after:    Wed 24 Mar 2027 09:00:46 +0000
Subordinate resources:    IP: 2602:fba1:9a0::/44
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b8:bc:03:01:ac:77:37:ea:48:16:88:d9:c1:73:56:72:c7:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Mar 25 08:55:46 2026 GMT
            Not After : Mar 24 09:00:46 2027 GMT
        Subject: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:77:a8:b7:74:17:5d:22:80:bc:4c:e3:87:
                    2a:e9:f6:bf:75:b4:1d:7f:96:2f:e9:a8:e1:c3:e2:
                    bd:0c:08:ea:c3:9c:2a:9d:8c:60:42:4c:f6:4f:ee:
                    90:9b:c5:1a:37:9b:3d:5e:a4:d6:72:f5:c1:3c:16:
                    db:b6:9e:d0:57:26:c3:3b:1b:2e:de:e9:ea:df:39:
                    00:20:0b:ba:37:66:74:d8:51:2b:2d:39:05:20:db:
                    d5:a6:bb:73:2f:78:b0:64:ae:d3:bd:46:07:72:80:
                    b5:dd:8c:b6:64:71:d6:65:b7:9d:3e:4c:fd:a3:35:
                    65:87:d4:be:69:6c:3d:ed:6c:ad:2f:32:5a:bc:a1:
                    0c:b7:e2:a1:ce:3e:93:6e:13:e5:f8:1e:c8:63:32:
                    e0:71:99:06:11:b1:0e:41:02:5a:84:a1:9b:48:9b:
                    5c:aa:b8:2f:7b:fa:d6:b5:64:70:75:6c:f4:47:2f:
                    c0:73:ac:07:85:8c:74:15:f9:1e:ac:6e:17:09:dd:
                    20:25:46:77:38:5d:f3:76:44:c7:b4:80:3b:a1:31:
                    b5:27:20:8c:42:53:b7:dd:64:80:23:31:16:97:48:
                    81:22:49:94:91:b5:64:52:21:e3:e6:2a:00:27:2f:
                    57:e1:c4:39:81:83:12:02:13:c6:c1:ff:b2:cf:f1:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:af:48:a2:2f:c6:3e:3a:34:81:b6:a3:1b:32:7b:fc:f2:
         5c:14:c3:f9:3f:da:8e:92:3e:21:f9:ff:95:3a:0d:c9:81:37:
         09:2a:bd:22:b2:71:f5:0d:55:ba:a7:ef:c8:10:7e:8b:3c:48:
         6c:e5:65:af:63:61:47:81:c2:47:fc:30:9a:b6:dd:42:2f:ce:
         e5:52:e5:0f:33:11:ea:8d:39:43:ec:c2:90:74:8a:f9:3f:d0:
         c3:5e:22:63:e2:94:e2:34:7e:77:a2:cc:51:60:3d:c5:43:ea:
         17:8c:7a:57:ef:56:9e:cc:19:10:ee:51:44:0e:98:b8:ce:a0:
         41:00:32:d8:59:70:fd:18:7d:73:74:e2:b3:d1:b3:79:00:34:
         44:66:59:49:52:3b:7d:21:70:b3:31:fc:02:97:92:8a:fb:b2:
         c5:7c:3c:7a:05:2f:4d:8e:cf:ae:75:fd:dc:0e:bb:e2:7d:cb:
         63:1f:f8:8b:f2:d4:6d:56:27:35:be:69:a7:17:28:b1:d3:9b:
         82:c5:b7:cf:4f:73:fe:f4:8c:1d:71:ca:aa:f0:8d:84:0c:e8:
         40:22:f2:a8:72:d5:57:e7:a4:95:d4:21:a4:89:53:8b:25:e5:
         94:e7:eb:59:c5:fe:68:c4:00:56:a2:a0:dc:f3:f9:6d:5e:cc:
         d2:1f:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:07 2026 by rpki-client