Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
File:                     A912092CFA11F378852F52266C793AB678233205.cer (raw, json)
Hash identifier:          CHpRwKLqMAX1pn1v83HYU/z7bbw1vktt0Ozl53xbNsQ=
Subject key identifier:   A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       402C9165697B8A07FA08F7381A0BD7F456D90820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 19 Apr 2026 19:28:56 +0000
Certificate not after:    Sun 18 Apr 2027 19:33:56 +0000
Subordinate resources:    IP: 111.235.151.0/24
                          IP: 2a09:54c3::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2c:91:65:69:7b:8a:07:fa:08:f7:38:1a:0b:d7:f4:56:d9:08:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Apr 19 19:28:56 2026 GMT
            Not After : Apr 18 19:33:56 2027 GMT
        Subject: CN=A912092CFA11F378852F52266C793AB678233205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:cc:1d:43:20:54:07:52:b3:f2:17:a6:cf:
                    7b:2a:1c:e0:8a:fe:c8:0b:26:df:98:a2:63:39:80:
                    7e:83:c4:29:67:c6:f8:a9:29:a6:4e:9e:51:7c:88:
                    53:60:b6:db:7e:dd:ec:8a:05:9a:92:27:fc:37:38:
                    f6:5f:5f:c3:5b:4b:86:b5:2b:f9:cd:9d:e1:cc:fb:
                    0b:f8:67:46:d6:31:46:a0:65:78:09:88:9f:fc:6f:
                    47:e7:dc:e2:fc:01:35:f6:f4:ad:5d:f3:c1:46:40:
                    5a:07:6c:84:6d:6b:45:ed:1f:77:7b:78:83:e4:a7:
                    58:a5:57:24:34:33:ff:4e:23:9f:01:5f:c0:d7:70:
                    8d:1a:3f:03:a5:5f:12:92:b0:f1:a4:66:6d:97:b0:
                    c9:4a:50:1e:f8:f5:b2:ae:e2:29:76:53:ed:22:0d:
                    f8:4a:db:93:a7:56:8e:fe:62:b5:9a:96:01:1b:d8:
                    3e:69:eb:dd:56:47:44:71:be:7e:8e:da:46:ca:37:
                    e4:e6:51:61:03:ff:b4:74:c7:7b:f5:60:34:63:c7:
                    4e:5b:03:c2:44:66:01:54:c2:23:93:4a:1f:1c:cb:
                    c7:fa:99:15:7e:f0:51:f8:19:2c:f9:97:8a:34:7f:
                    a5:14:ec:96:68:d0:f3:d0:33:71:6f:23:4a:93:6e:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.151.0/24
                IPv6:
                  2a09:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:33:b9:a8:a9:af:a7:2c:6e:ea:af:06:8c:15:31:88:22:59:
         3a:46:9a:ad:ac:6b:11:84:54:e9:4e:fb:a8:94:18:33:75:b3:
         79:7f:8a:7a:f8:24:e9:9d:dc:bb:21:0b:0f:18:e5:f1:3b:bf:
         9d:bd:d3:d0:5b:0e:c3:3c:e0:0b:1a:dc:11:fa:e2:5d:f6:f9:
         39:4d:49:3a:b6:59:ce:37:3c:18:65:4e:5b:a6:0a:f3:9b:18:
         67:68:9f:58:26:95:0c:95:9e:f6:35:6c:ac:5f:85:43:ee:49:
         6b:5f:1b:79:d8:db:d2:61:d9:17:b9:f4:17:7e:25:30:8d:f2:
         94:2a:bb:37:d2:e6:17:ea:a2:ad:62:6d:ce:6a:a5:92:3d:1f:
         a4:49:8f:68:a8:20:8d:a5:0d:b8:36:b0:91:e6:3f:ae:43:3c:
         4d:9d:9b:db:45:e9:ca:78:96:ac:73:91:2b:d5:76:fd:9c:32:
         bc:33:9b:e0:f8:2c:03:f3:56:1b:75:47:bc:80:7e:a3:bd:52:
         62:65:b7:ec:14:c9:f6:1d:c9:af:9b:ab:0c:ba:b9:a6:24:5a:
         67:32:fa:79:26:be:9c:9c:e8:11:52:5c:50:9c:a6:07:ec:44:
         9b:53:78:59:6c:6e:9f:d1:b6:32:04:e3:97:c7:34:1d:cc:03:
         e0:7f:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:24 2026 by rpki-client