$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer File: 5344A7147C3BDF128B91CB0E4B659E3DA3046121.cer (raw, json) Hash identifier: Ww8iKHOp9RHZASNs9pFyeQ4ApJPTTg5f1U1NU3LjLyg= Subject key identifier: 53:44:A7:14:7C:3B:DF:12:8B:91:CB:0E:4B:65:9E:3D:A3:04:61:21 Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Certificate issuer: /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Certificate serial: 1268A7B37B7FAD834FD68D1D9EBA0D1EE7174193 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer Manifest: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft caRepository: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/ Notify URL: https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml Certificate not before: Sat 27 Sep 2025 17:55:46 +0000 Certificate not after: Sat 26 Sep 2026 18:00:46 +0000 Subordinate resources: IP: 23.145.57.0/24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:68:a7:b3:7b:7f:ad:83:4f:d6:8d:1d:9e:ba:0d:1e:e7:17:41:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Validity Not Before: Sep 27 17:55:46 2025 GMT Not After : Sep 26 18:00:46 2026 GMT Subject: CN=5344A7147C3BDF128B91CB0E4B659E3DA3046121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:6d:4f:e7:f5:ce:f0:8b:d1:f4:00:b9:88: 5a:87:2d:c6:d2:55:a7:6a:d0:5c:03:e4:46:16:89: 64:0a:f1:d2:ad:af:d4:c5:6f:23:1e:66:f3:26:b4: 9c:5a:4a:a2:3a:27:61:f1:af:c1:3c:4b:cf:a3:49: 0c:cd:c3:9a:c3:47:4b:91:93:cd:48:d2:86:40:4f: da:58:2a:f5:a8:f1:41:c3:73:6f:d0:be:30:2a:09: f7:e1:0c:9a:e3:11:e6:9c:3a:79:ea:ae:1b:00:b3: 90:af:1c:6d:5e:b1:56:d5:15:7c:57:8e:a9:6d:95: b4:5a:2f:ae:10:d2:fa:6c:c1:7a:00:aa:75:a8:a8: a7:25:f0:2e:38:14:55:1e:86:48:99:41:79:81:7f: 15:14:20:30:8a:1b:d3:33:b2:2b:ff:0b:b0:fc:27: 89:5a:ac:87:f6:60:7d:70:5a:8a:df:0f:16:a7:43: 37:91:02:ae:23:45:16:98:8b:24:fe:0c:e5:3c:2f: 1c:15:2d:4c:65:da:b2:57:2f:12:81:d5:cd:9c:80: 62:d8:7c:63:54:22:23:c6:86:86:f0:c2:7a:97:bf: 74:16:a0:ef:5f:a4:62:50:e9:57:b8:93:18:21:bf: c3:aa:4c:43:67:09:e6:ea:91:6f:1c:22:7e:c5:4f: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:44:A7:14:7C:3B:DF:12:8B:91:CB:0E:4B:65:9E:3D:A3:04:61:21 X509v3 Authority Key Identifier: keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer Subject Information Access: CA Repository - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/ RPKI Manifest - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/3/5344A7147C3BDF128B91CB0E4B659E3DA3046121.mft RPKI Notify - URI:https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.145.57.0/24 Signature Algorithm: sha256WithRSAEncryption 78:a7:d1:b6:5a:9c:6a:01:8f:2e:73:42:4d:d4:f7:a5:53:8f: cb:e0:91:71:0a:a0:3f:b7:5d:21:8a:c9:1b:26:08:eb:62:da: c7:33:f5:2e:52:65:af:a6:6c:af:04:a0:f0:46:93:d9:26:42: ec:a1:9f:49:ba:aa:54:ed:9f:cf:cb:77:36:bd:46:e0:f6:e2: 0c:23:97:47:65:ed:75:57:99:dd:99:cb:97:ad:a0:2f:e3:a2: 46:07:d3:3c:59:df:8a:80:3c:ac:ba:b8:4b:ab:fb:49:3f:43: 5a:64:2b:9c:bc:53:5f:04:b9:6a:1b:4c:93:ad:10:6d:06:13: 2f:a1:26:ca:23:12:51:da:27:e0:9a:11:46:27:38:7e:9c:82: 85:9c:85:db:9f:d7:e9:da:19:0e:af:9a:a1:d3:2a:4a:80:63: 96:ae:81:38:20:69:3d:fd:04:cc:b7:7b:37:f2:ae:db:b6:41: 2c:72:b5:57:c4:24:ed:f4:b6:8a:c2:7a:45:0c:cd:1d:d6:9d: 4b:b2:9f:ab:ca:93:e7:ad:1e:34:ef:4a:b7:ae:25:03:1b:36: 22:bf:66:98:e7:b7:45:6d:aa:0a:05:8b:9b:f4:e3:8a:1b:73: da:3c:e3:a0:fe:82:01:73:2c:6c:b1:74:37:0a:dd:d3:3d:e3: 89:81:ff:61 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIUEmins3t/rYNP1o0dnroNHucXQZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4 Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjUwOTI3MTc1NTQ2WhcNMjYwOTI2MTgwMDQ2 WjAzMTEwLwYDVQQDEyg1MzQ0QTcxNDdDM0JERjEyOEI5MUNCMEU0QjY1OUUzREEz MDQ2MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CptT+f1zvCL 0fQAuYhahy3G0lWnatBcA+RGFolkCvHSra/UxW8jHmbzJrScWkqiOidh8a/BPEvP o0kMzcOaw0dLkZPNSNKGQE/aWCr1qPFBw3Nv0L4wKgn34Qya4xHmnDp56q4bALOQ rxxtXrFW1RV8V46pbZW0Wi+uENL6bMF6AKp1qKinJfAuOBRVHoZImUF5gX8VFCAw ihvTM7Ir/wuw/CeJWqyH9mB9cFqK3w8Wp0M3kQKuI0UWmIsk/gzlPC8cFS1MZdqy Vy8SgdXNnIBi2HxjVCIjxoaG8MJ6l790FqDvX6RiUOlXuJMYIb/DqkxDZwnm6pFv HCJ+xU+zbQIDAQABo4IDOjCCAzYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU U0SnFHw73xKLkcsOS2WePaMEYSEwHwYDVR0jBBgwFoAUk7ApbDF4d4D+hBMxj9DS cIODTMUwDgYDVR0PAQH/BAQDAgEGMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDky ZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzgvOTNCMDI5NkMzMTc4Nzc4 MEZFODQxMzMxOEZEMEQyNzA4MzgzNENDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHj MIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5 L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3 ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU1NjNlMmY5 LTRkOWItNDBjMy1hZmEyLWNlNzA0NWZmZDIzYS8xODIyZmU5YzhhMWQ4YTAyMTc3 ODkzNGUzNzgxNTlmZjhmNzk0ZGYzMmJmZTllZDA3MS5jZXIwggEIBggrBgEFBQcB CwSB+zCB+DBBBggrBgEFBQcwBYY1cnN5bmM6Ly9rcmlsbC5jYS1iYy0wMS5zc21p ZGdlLnh5ei9yZXBvL1NzbWlkZ2VMTEMvMy8wbQYIKwYBBQUHMAqGYXJzeW5jOi8v a3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXovcmVwby9Tc21pZGdlTExDLzMvNTM0 NEE3MTQ3QzNCREYxMjhCOTFDQjBFNEI2NTlFM0RBMzA0NjEyMS5tZnQwRAYIKwYB BQUHMA2GOGh0dHBzOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXovcnJkcC9u b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXkTkwDQYJKoZIhvcNAQELBQADggEBAHin 0bZanGoBjy5zQk3U96VTj8vgkXEKoD+3XSGKyRsmCOti2scz9S5SZa+mbK8EoPBG k9kmQuyhn0m6qlTtn8/Ldza9RuD24gwjl0dl7XVXmd2Zy5etoC/jokYH0zxZ34qA PKy6uEur+0k/Q1pkK5y8U18EuWobTJOtEG0GEy+hJsojElHaJ+CaEUYnOH6cgoWc hduf1+naGQ6vmqHTKkqAY5augTggaT39BMy3ezfyrtu2QSxytVfEJO30torCekUM zR3WnUuyn6vKk+etHjTvSreuJQMbNiK/Zpjnt0VtqgoFi5v044obc9o846D+ggFz LGyxdDcK3dM944mB/2E= -----END CERTIFICATE-----Generated at Tue Oct 21 00:47:52 2025 by rpki-client