$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer File: D6D172D72D23BAC1F197C131AD720E6E8230B003.cer (raw, json) Hash identifier: M8a5aE/mky/dXjm+1vMzaR2Rz1aBMiI40fXXsnXen6s= Subject key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03 Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08 Certificate issuer: /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74 Certificate serial: 0ECADAF43561B54BC5DC030AEA37EADFAE27DEC8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 25 Apr 2026 15:45:33 +0000 Certificate not after: Sat 24 Apr 2027 15:50:33 +0000 Subordinate resources: IP: 2602:f50c:c00::/48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 11:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ca:da:f4:35:61:b5:4b:c5:dc:03:0a:ea:37:ea:df:ae:27:de:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74 Validity Not Before: Apr 25 15:45:33 2026 GMT Not After : Apr 24 15:50:33 2027 GMT Subject: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:63:8c:25:77:68:32:0f:e7:30:41:04:82: fa:7c:94:6a:15:da:f8:03:0d:a3:15:6f:7b:d1:4e: b0:7c:c4:c1:85:6c:7c:f5:1c:67:46:50:8b:28:07: c3:96:08:94:b6:c2:eb:89:61:15:57:ab:3d:70:9a: dc:6d:26:15:8d:8d:ab:88:a6:01:72:8f:57:4b:0a: 69:ed:02:f1:7b:bd:6f:70:2d:cf:49:f8:87:76:a4: d1:80:ef:a6:b5:6f:84:ec:fb:30:45:d7:1a:ca:3b: 11:3a:ce:1b:68:79:c2:f1:d8:1c:27:12:52:0e:bb: 6c:62:41:af:51:25:42:80:6d:7a:57:7f:fc:8a:af: 8e:30:81:5e:3a:81:57:29:50:58:e4:4e:78:9b:17: eb:66:8a:5e:87:17:92:54:8a:ed:e6:57:7f:cb:ff: 42:8b:c0:05:3e:ff:48:e9:f2:24:6e:0d:7c:1a:e5: 96:df:5c:97:b1:8f:24:cf:b7:27:e6:98:75:ce:72: 58:9e:e3:82:4e:4a:c2:e4:53:05:72:dd:57:c4:2f: 8c:f7:e6:e3:e8:d5:82:ca:f4:03:e7:6b:da:60:f1: 88:a5:37:d1:f6:66:ff:f8:20:68:19:3f:b4:4b:a2: 40:45:24:49:c8:20:74:54:f2:2a:33:e6:0d:b5:fa: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03 X509v3 Authority Key Identifier: keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f50c:c00::/48 Signature Algorithm: sha256WithRSAEncryption 01:74:c6:b2:67:88:b3:1d:2f:57:9e:81:2c:0d:2f:aa:4b:40: 8e:f8:89:1e:03:00:ef:bb:de:27:6f:9e:18:61:6f:e2:58:9d: 3a:7d:98:37:96:eb:d4:8b:7f:eb:7a:76:a1:8f:a6:47:40:57: bc:bb:b3:be:b4:4c:35:55:10:46:45:2f:13:08:18:bc:ad:ab: 6d:3e:72:7e:f7:4f:58:d7:19:2b:3f:b1:21:6f:67:ec:6d:d5: 23:1e:da:8e:06:e7:13:5d:3f:8a:af:5e:60:c8:d5:d6:21:c1: 7a:fb:45:72:70:51:90:94:b6:ff:3c:52:b3:42:19:25:15:83: be:17:ec:73:f9:ce:c1:50:e9:79:e2:12:e8:cd:1a:c8:6d:d0: 64:c6:7a:3b:ba:1a:35:9e:5c:ab:8e:35:69:c3:fb:b3:9b:30: c3:85:66:a2:5b:59:8a:64:86:cf:33:17:20:f4:d2:2f:ad:c0: 22:fa:7e:bb:02:87:1e:df:29:41:c9:86:dd:a9:48:62:66:a4: c5:35:99:12:a0:1b:b7:f0:45:cb:1c:00:bf:43:7f:d7:22:3f: 3d:46:94:bd:52:31:d8:57:82:c6:43:77:df:94:0a:97:79:86: c2:81:a8:cb:68:13:af:d8:c3:61:72:1b:53:4e:b0:d1:42:8c: fd:b8:c3:e3 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUDsra9DVhtUvF3AMK6jfq364n3sgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4 NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYwNDI1MTU0NTMzWhcNMjcwNDI0MTU1MDMz WjAzMTEwLwYDVQQDEyhENkQxNzJENzJEMjNCQUMxRjE5N0MxMzFBRDcyMEU2RTgy MzBCMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1xjjCV3aDIP 5zBBBIL6fJRqFdr4Aw2jFW970U6wfMTBhWx89RxnRlCLKAfDlgiUtsLriWEVV6s9 cJrcbSYVjY2riKYBco9XSwpp7QLxe71vcC3PSfiHdqTRgO+mtW+E7PswRdcayjsR Os4baHnC8dgcJxJSDrtsYkGvUSVCgG16V3/8iq+OMIFeOoFXKVBY5E54mxfrZope hxeSVIrt5ld/y/9Ci8AFPv9I6fIkbg18GuWW31yXsY8kz7cn5ph1znJYnuOCTkrC 5FMFct1XxC+M9+bj6NWCyvQD52vaYPGIpTfR9mb/+CBoGT+0S6JARSRJyCB0VPIq M+YNtfrrYwIDAQABo4IDZDCCA2AwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU 1tFy1y0jusHxl8ExrXIOboIwsAMwHwYDVR0jBBgwFoAUdb8XZ1ZNfETFvTlfamoh kNLd1wgwDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvY2EyYjEyYWZjNDI4NDNkYmFl NGIwNWNmMzYwZDk1MmQvMC83NUJGMTc2NzU2NEQ3QzQ0QzVCRDM5NUY2QTZBMjE5 MEQyRERENzA4LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3 LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzQxNTY0NGEtYTVhNC00ODQ5LWFiYTkt MTk4MDg2ZmQxNTRkL2ZlY2ZkZmRiZGI1NmQzZmJmYTI2MWJiMjg3YmYwYzQxODU1 NzJkMGMyMWI2NGUxZjc0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYB BQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5NzVjLzIvMIGLBggr BgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMi9ENkQx NzJENzJEMjNCQUMxRjE5N0MxMzFBRDcyMEU2RTgyMzBCMDAzLm1mdDA8BggrBgEF BQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAmAvUMDAAwDQYJKoZIhvcNAQELBQADggEBAAF0xrJniLMd L1eegSwNL6pLQI74iR4DAO+73idvnhhhb+JYnTp9mDeW69SLf+t6dqGPpkdAV7y7 s760TDVVEEZFLxMIGLytq20+cn73T1jXGSs/sSFvZ+xt1SMe2o4G5xNdP4qvXmDI 1dYhwXr7RXJwUZCUtv88UrNCGSUVg74X7HP5zsFQ6XniEujNGsht0GTGeju6GjWe XKuONWnD+7ObMMOFZqJbWYpkhs8zFyD00i+twCL6frsChx7fKUHJht2pSGJmpMU1 mRKgG7fwRcscAL9Df9ciPz1GlL1SMdhXgsZDd9+UCpd5hsKBqMtoE6/Yw2FyG1NO sNFCjP24w+M= -----END CERTIFICATE-----Generated at Wed May 13 01:37:39 2026 by rpki-client