$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer (raw, json) Hash identifier: QntEdc5qHkmp5G6qmuw1pcksb3o6+dmesQUx5P4KRTQ= Subject key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 1AA4F5E0A30F03637147AB5BCCEF793348931ABA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 15 Mar 2026 02:50:00 +0000 Certificate not after: Sun 14 Mar 2027 02:55:00 +0000 Subordinate resources: IP: 2a0b:4e07:6000::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:f5:e0:a3:0f:03:63:71:47:ab:5b:cc:ef:79:33:48:93:1a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Mar 15 02:50:00 2026 GMT Not After : Mar 14 02:55:00 2027 GMT Subject: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:54:23:8a:f0:06:02:ca:07:11:6d:e8:e5: 75:7f:ce:da:ea:1f:3c:e6:34:f8:04:3c:ee:54:ae: 47:fe:72:07:fd:c2:ce:2c:c5:c2:f9:91:79:f9:8b: 36:d6:f7:02:d8:50:11:0a:fd:aa:69:b0:a0:1d:82: a7:81:d4:6d:88:c7:bc:82:56:bd:87:92:1c:24:fd: a5:f5:9e:93:50:ff:16:35:66:6d:dd:9a:da:a9:63: bc:04:3c:a5:93:47:c9:1f:54:2f:08:25:60:ea:00: cf:60:ae:f9:93:94:6e:e3:55:04:9d:a2:f3:1f:70: 95:5f:ab:4b:20:c7:52:b5:20:9a:bf:5f:b9:8a:d5: 25:fb:b8:75:1c:0c:55:e9:19:a6:13:10:27:77:e7: 2e:5f:11:50:f7:a0:4f:83:af:26:44:97:5f:2f:77: 73:d3:8e:b6:ec:27:90:a7:eb:c0:d2:1e:6b:c8:c8: 7a:ae:62:bd:d2:1d:64:7f:6e:fc:26:5d:4e:87:cd: 7b:29:cd:8a:19:7d:90:21:62:fa:1e:34:0c:ad:eb: 80:19:a3:c6:9d:1b:54:b1:83:61:ed:70:e6:8f:95: d7:10:da:d6:c5:20:d1:35:ff:69:32:43:fa:3a:02: d1:a6:70:2e:c0:07:44:56:76:c5:36:22:08:20:5d: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6000::/40 Signature Algorithm: sha256WithRSAEncryption 24:1d:bd:1b:1f:bb:55:40:29:8f:ef:e6:5c:c7:7a:1a:58:55: 92:15:dd:e1:f9:e9:1b:88:2e:85:1f:0a:20:f2:c8:c6:29:a8: 0f:81:84:56:e2:e4:20:aa:d4:ca:8c:d6:97:f3:be:89:d1:10: bf:b6:a3:24:56:c5:6a:39:0f:9c:8d:5c:e1:e4:7d:d5:d8:45: 13:32:78:38:ef:67:89:ca:7b:f7:ec:96:f2:e7:57:01:a8:f0: d4:4c:79:50:61:5b:20:fe:55:09:8e:5f:35:7a:0b:0f:81:b1: 46:97:12:df:f8:28:0b:bd:88:d7:44:0e:93:7b:33:32:5b:74: 21:ad:cf:9b:7d:7b:d3:63:8d:ba:0c:9d:ce:cb:da:cb:ab:f5: fd:23:83:df:47:9b:a2:92:ec:3c:86:01:cd:4d:35:e9:95:64: 84:cf:c7:06:d0:8a:84:6e:fa:cc:c4:df:96:2b:af:c0:bb:27: fe:7c:aa:64:0d:72:10:ac:cc:9a:a4:86:d6:8a:d2:11:11:d7: 8c:3f:5f:4b:ab:b8:bc:e9:1a:77:fc:b5:a2:5a:bf:fe:09:3c: 8f:aa:c6:96:86:2f:84:6a:e5:d3:b7:87:7e:b6:f4:b5:c7:fa: 4f:38:7d:47:48:ca:43:69:22:67:c9:9c:4d:cb:ea:99:cd:54: 59:7a:47:a4 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUGqT14KMPA2NxR6tbzO95M0iTGrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAzMTUwMjUwMDBaFw0yNzAzMTQwMjU1MDBaMDMxMTAvBgNV BAMTKEREQzI1QUQyRjFBNDg5MjQ3NzEzRUUzOUIxQzAzRUEyRkREQTQxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyFQjivAGAsoHEW3o5XV/ztrq HzzmNPgEPO5Urkf+cgf9ws4sxcL5kXn5izbW9wLYUBEK/appsKAdgqeB1G2Ix7yC Vr2Hkhwk/aX1npNQ/xY1Zm3dmtqpY7wEPKWTR8kfVC8IJWDqAM9grvmTlG7jVQSd ovMfcJVfq0sgx1K1IJq/X7mK1SX7uHUcDFXpGaYTECd35y5fEVD3oE+DryZEl18v d3PTjrbsJ5Cn68DSHmvIyHquYr3SHWR/bvwmXU6HzXspzYoZfZAhYvoeNAyt64AZ o8adG1Sxg2HtcOaPldcQ2tbFINE1/2kyQ/o6AtGmcC7AB0RWdsU2IgggXeNxAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdwlrS8aSJJHcT 7jmxwD6i/dpBGDAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2JlYWQyZGNmLWVhZDUtNDk1NC1hZDg0LTY1ODBjZDJhOWM1MC8zLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5YzUwLzMvRERD MjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOB2AwDQYJKoZIhvcNAQELBQADggEBACQdvRsfu1VA KY/v5lzHehpYVZIV3eH56RuILoUfCiDyyMYpqA+BhFbi5CCq1MqM1pfzvonREL+2 oyRWxWo5D5yNXOHkfdXYRRMyeDjvZ4nKe/fslvLnVwGo8NRMeVBhWyD+VQmOXzV6 Cw+BsUaXEt/4KAu9iNdEDpN7MzJbdCGtz5t9e9NjjboMnc7L2sur9f0jg99Hm6KS 7DyGAc1NNemVZITPxwbQioRu+szE35Yrr8C7J/58qmQNchCszJqkhtaK0hER14w/ X0uruLzpGnf8taJav/4JPI+qxpaGL4Rq5dO3h3629LXH+k84fUdIykNpImfJnE3L 6pnNVFl6R6Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:33 2026 by rpki-client