$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer File: CF1D094BB231C3433115D5C53880889E2E701056.cer (raw, json) Hash identifier: T3X1OOWbpREckwlq3uCkB6qf/AZ7JGc7YTYi1txLOhs= Subject key identifier: CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 7F5402D599EEA6B362C6C7A6D17930D0E56A93C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 21 Aug 2025 10:49:08 +0000 Certificate not after: Thu 20 Aug 2026 10:54:08 +0000 Subordinate resources: IP: 2a0b:4e07:a00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:54:02:d5:99:ee:a6:b3:62:c6:c7:a6:d1:79:30:d0:e5:6a:93:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Aug 21 10:49:08 2025 GMT Not After : Aug 20 10:54:08 2026 GMT Subject: CN=CF1D094BB231C3433115D5C53880889E2E701056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:d0:5d:3a:6d:5e:ab:3e:2d:b6:8a:36:4f: 88:51:e8:a3:dd:70:9c:a0:65:d8:a1:c9:25:3c:a9: 8c:06:b5:49:85:5a:90:97:55:6e:37:98:4e:29:3c: 5a:54:2b:02:02:6f:0c:29:84:a8:75:de:5b:1a:d7: 24:94:fb:96:cc:d7:71:a8:51:33:89:b2:0d:8e:39: 7e:f8:5f:14:d6:a7:18:ed:e2:24:10:71:21:12:40: d6:12:bc:98:ac:2d:8b:7d:34:ff:c1:7a:33:60:92: d4:93:0b:08:80:ed:c6:fc:c6:10:a6:50:be:44:52: 94:a0:e3:c8:02:93:de:cd:fa:ab:9a:33:ed:99:0a: 71:f7:02:41:8b:f5:08:ca:39:9e:98:42:8e:42:15: 0c:78:8e:af:15:1b:ba:11:7c:db:85:8a:77:0b:9d: c2:5b:6f:b4:ae:8b:e5:7d:4e:c6:b4:fa:82:54:ca: 95:d4:77:d2:19:8d:cf:45:b2:9b:fc:fd:71:2e:3d: 55:90:46:09:e4:5a:89:e0:40:93:9e:89:be:49:b1: a6:cb:fc:86:50:ab:b1:60:65:dc:be:01:cc:c2:49: b6:b1:d3:07:d7:51:9b:a5:4e:a1:65:b7:1e:39:00: 2b:ef:61:1b:78:bb:80:ed:a2:47:58:47:d8:74:23: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a00::/40 Signature Algorithm: sha256WithRSAEncryption 8b:8f:71:c5:b2:e6:4b:a9:79:74:99:5d:1c:19:8b:c9:fa:56: c5:ee:59:73:42:49:32:22:03:25:3b:a9:7e:19:aa:10:b8:41: 19:35:58:d4:de:5e:f3:01:2f:b6:04:8b:9a:48:06:d6:2d:c3: 54:75:be:60:c2:11:44:29:dd:1f:c3:ad:d4:6e:98:e2:08:d0: f6:c0:ce:c5:e9:4f:cd:9c:15:ca:be:bf:f6:0b:48:c7:c3:b0: 66:40:11:2e:30:c2:57:f8:3c:92:90:aa:8c:91:75:59:23:df: d8:0b:e6:ae:8c:6e:9f:8a:3e:50:10:2e:f7:e5:cc:b6:71:42: 2f:02:df:fd:df:ce:1e:c9:e5:7e:18:5c:e7:4d:91:80:22:d7: 11:85:2e:65:0d:77:ed:9a:e5:f4:03:7d:fe:e4:71:0d:1b:7a: af:90:df:a9:d1:4f:c5:8d:b0:34:69:33:34:2f:56:4d:74:e2: dd:27:cb:e4:3f:a3:36:31:93:cb:84:d7:ad:5f:f3:54:4f:4c: a8:d2:05:51:0b:ee:27:31:20:f4:f8:bf:f3:fb:54:97:7e:e2: 67:51:f1:8f:89:80:f4:6f:b3:15:85:d3:7f:e6:70:c8:e8:ca: b6:8a:1d:38:6f:85:6e:1b:3e:1d:a8:58:1b:1d:79:78:37:fa: f6:27:21:ad -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUf1QC1ZnuprNixsem0Xkw0OVqk8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA4MjExMDQ5MDhaFw0yNjA4MjAxMDU0MDhaMDMxMTAvBgNV BAMTKENGMUQwOTRCQjIzMUMzNDMzMTE1RDVDNTM4ODA4ODlFMkU3MDEwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDja9BdOm1eqz4ttoo2T4hR6KPd cJygZdihySU8qYwGtUmFWpCXVW43mE4pPFpUKwICbwwphKh13lsa1ySU+5bM13Go UTOJsg2OOX74XxTWpxjt4iQQcSESQNYSvJisLYt9NP/BejNgktSTCwiA7cb8xhCm UL5EUpSg48gCk97N+quaM+2ZCnH3AkGL9QjKOZ6YQo5CFQx4jq8VG7oRfNuFincL ncJbb7Sui+V9Tsa0+oJUypXUd9IZjc9Fspv8/XEuPVWQRgnkWongQJOeib5JsabL /IZQq7FgZdy+AczCSbax0wfXUZulTqFltx45ACvvYRt4u4DtokdYR9h0I7kFAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPHQlLsjHDQzEV 1cU4gIieLnAQVjAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzI3ZWJkZTAzLTM0ZGYtNGYyYy05MmZhLThmZTFkMDgzZDE1ZC8yLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNkMTVkLzIvQ0Yx RDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUyRTcwMTA1Ni5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOBwowDQYJKoZIhvcNAQELBQADggEBAIuPccWy5kup eXSZXRwZi8n6VsXuWXNCSTIiAyU7qX4ZqhC4QRk1WNTeXvMBL7YEi5pIBtYtw1R1 vmDCEUQp3R/DrdRumOII0PbAzsXpT82cFcq+v/YLSMfDsGZAES4wwlf4PJKQqoyR dVkj39gL5q6Mbp+KPlAQLvflzLZxQi8C3/3fzh7J5X4YXOdNkYAi1xGFLmUNd+2a 5fQDff7kcQ0beq+Q36nRT8WNsDRpMzQvVk104t0ny+Q/ozYxk8uE161f81RPTKjS BVEL7icxIPT4v/P7VJd+4mdR8Y+JgPRvsxWF03/mcMjoyraKHThvhW4bPh2oWBsd eXg3+vYnIa0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:21 2025 by rpki-client