$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer File: 4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer (raw, json) Hash identifier: 5uCEFy3YwUOymOBLCu8UEvPofdvFs08FWY02kNVhsM8= Subject key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 7021111342A43932F8FF50856BE7FA701A800BDE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 26 Jun 2025 08:00:18 +0000 Certificate not after: Thu 25 Jun 2026 08:05:18 +0000 Subordinate resources: IP: 2a0f:6287:f000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 01:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:21:11:13:42:a4:39:32:f8:ff:50:85:6b:e7:fa:70:1a:80:0b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 26 08:00:18 2025 GMT Not After : Jun 25 08:05:18 2026 GMT Subject: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:63:03:59:93:5d:99:8b:6a:d1:ae:29:fd: e9:c4:7d:12:11:d4:2f:6e:d4:27:53:ea:ae:85:bb: 6b:25:2f:8f:ac:61:58:d3:19:ef:f8:b5:66:4c:58: 44:fa:9e:ad:a3:93:18:94:25:10:1d:bd:d3:35:4c: 74:d5:12:5c:33:c8:d3:3b:16:be:13:ae:38:5d:98: 3e:51:ed:b0:14:ef:76:56:4c:a6:0a:60:f4:ce:fc: 8f:09:71:49:eb:7d:ca:61:83:27:e5:87:54:b6:d8: 40:36:63:2f:60:a7:be:01:41:80:91:70:b3:84:2a: a6:93:a9:45:a3:7f:94:c6:38:51:5f:7b:5b:50:38: 87:95:4b:5a:9f:82:3c:b0:09:ed:0b:8e:c8:ba:3e: 1c:ba:d5:67:17:83:22:aa:43:7a:38:40:ae:7d:cc: b8:91:b7:32:51:e8:50:b1:34:e7:04:89:bb:fc:79: e2:1b:e3:79:86:5a:f4:e2:f4:97:07:f8:28:bf:7f: 30:66:e8:21:35:68:88:4b:2a:bd:73:ff:4a:44:71: b9:c5:d9:af:ec:c7:f2:e3:24:5a:32:d7:12:5c:dd: bb:63:f0:dd:34:d4:10:5e:2a:be:25:74:f0:8c:74: 38:d3:b8:e1:c3:9f:97:0e:be:44:1b:43:5e:a1:d9: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:f000::/36 Signature Algorithm: sha256WithRSAEncryption 18:30:64:c1:aa:3b:e9:18:9d:83:ce:7a:b4:34:00:ce:46:91: 4e:6e:18:56:87:bd:0a:54:bb:46:0c:48:6e:7a:b6:ed:16:ac: a0:22:45:f7:63:b2:a5:5a:75:45:4c:47:5b:72:58:bb:e7:87: 9c:56:ec:7f:9e:6e:d0:db:58:44:f1:b9:dc:f6:35:92:b0:0a: 40:6a:7c:f3:01:47:15:e1:8d:97:5e:9e:a5:9c:64:c1:05:c9: ec:20:fd:1c:0e:31:04:2b:1f:48:c2:20:90:41:41:6a:17:f0: 5c:4f:dd:09:6f:0d:6b:4f:7a:4b:fb:98:bd:1c:71:38:7c:76: 2b:7b:f9:dc:f3:db:e4:19:01:c2:de:7f:6d:5e:2d:e5:ba:2c: d0:d3:63:e3:69:67:76:dc:6a:7d:ec:96:84:c8:e3:3d:9f:1a: e1:1b:7d:99:3a:68:a0:a1:af:17:63:2f:42:c3:3b:05:ce:6d: 95:ae:36:9b:ee:83:06:a3:cd:1d:7a:78:2a:0f:1f:2a:1c:7a: 60:33:2a:14:14:68:f4:08:db:56:d7:78:32:c6:ee:35:6f:8f: 2b:e4:7a:5d:ee:f5:ed:b5:c0:39:de:f4:78:bf:38:28:cb:c9: 0d:49:4d:a8:c5:45:d9:b3:e1:39:ef:d9:6b:ae:0b:1b:4b:d2: a1:a2:21:0e -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUcCERE0KkOTL4/1CFa+f6cBqAC94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MjYwODAwMThaFw0yNjA2MjUwODA1MThaMDMxMTAvBgNV BAMTKDQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+GMDWZNdmYtq0a4p/enEfRIR 1C9u1CdT6q6Fu2slL4+sYVjTGe/4tWZMWET6nq2jkxiUJRAdvdM1THTVElwzyNM7 Fr4TrjhdmD5R7bAU73ZWTKYKYPTO/I8JcUnrfcphgyflh1S22EA2Yy9gp74BQYCR cLOEKqaTqUWjf5TGOFFfe1tQOIeVS1qfgjywCe0Ljsi6Phy61WcXgyKqQ3o4QK59 zLiRtzJR6FCxNOcEibv8eeIb43mGWvTi9JcH+Ci/fzBm6CE1aIhLKr1z/0pEcbnF 2a/sx/LjJFoy1xJc3btj8N001BBeKr4ldPCMdDjTuOHDn5cOvkQbQ16h2SWDAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCAcVPkuZVLkeq V1rO7Srw7imo5zAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZjkyZWU0ZDg0MDE5M2RmNDVhMGVhNjY4Ny8yLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk ZjkyZWU0ZDg0MDE5M2RmNDVhMGVhNjY4Ny8yLzQyMDFDNTRGOTJFNjU1MkU0N0FB NTc1QUNFRUQyQUYwRUUyOUE4RTcubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoPYofwMA0G CSqGSIb3DQEBCwUAA4IBAQAYMGTBqjvpGJ2Dznq0NADORpFObhhWh70KVLtGDEhu erbtFqygIkX3Y7KlWnVFTEdbcli754ecVux/nm7Q21hE8bnc9jWSsApAanzzAUcV 4Y2XXp6lnGTBBcnsIP0cDjEEKx9IwiCQQUFqF/BcT90Jbw1rT3pL+5i9HHE4fHYr e/nc89vkGQHC3n9tXi3luizQ02PjaWd23Gp97JaEyOM9nxrhG32ZOmigoa8XYy9C wzsFzm2Vrjab7oMGo80dengqDx8qHHpgMyoUFGj0CNtW13gyxu41b48r5Hpd7vXt tcA53vR4vzgoy8kNSU2oxUXZs+E579lrrgsbS9KhoiEO -----END CERTIFICATE-----Generated at Sun Jun 29 16:16:17 2025 by rpki-client