$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer (raw, json) Hash identifier: jRTaava7XmXwZVKP068yjfpIc6hGtklL3reW12V1urI= Subject key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 756BFCB58865B5DC483FDE418E95B9B6D9C704CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 23 Jul 2025 20:01:12 +0000 Certificate not after: Wed 22 Jul 2026 20:06:12 +0000 Subordinate resources: IP: 2a0b:4e07:1c00::/38 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6b:fc:b5:88:65:b5:dc:48:3f:de:41:8e:95:b9:b6:d9:c7:04:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jul 23 20:01:12 2025 GMT Not After : Jul 22 20:06:12 2026 GMT Subject: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:89:22:8a:58:78:9d:67:15:f5:5e:b1:4c: 56:5b:c1:24:71:3a:7f:73:4e:d7:9e:ef:6a:35:36: 1e:a0:83:62:53:45:b4:8d:c3:18:42:fd:13:4f:05: 72:c2:67:6a:a8:a8:02:69:5b:73:25:6b:89:53:c2: 91:19:8b:4d:24:42:41:c0:de:08:19:6c:39:c3:26: a5:29:2a:eb:e9:54:bf:32:b9:23:3d:fe:53:ce:e5: d0:57:e9:e0:42:b1:58:3f:89:c0:57:23:8e:c2:c6: 8b:f3:10:06:06:a6:16:1b:fe:fb:3d:45:45:1b:ef: f9:8e:6a:08:2e:6b:21:f9:98:06:54:ee:1d:16:5f: 17:39:e0:2d:7f:10:33:0d:11:de:b3:6d:cd:d1:00: 60:d2:eb:a8:40:0d:56:0b:38:9c:25:b9:a7:a5:52: 80:f4:53:6b:b8:88:cb:60:f9:72:a9:1a:87:83:69: 4e:24:71:9e:ac:7c:e8:08:06:fa:e9:9e:b1:ae:39: a1:09:93:34:3a:d5:20:d7:89:44:ff:f5:66:13:60: 39:15:3e:dc:b1:61:7a:4a:84:b2:2d:f7:71:31:48: 40:85:5a:ae:ca:8b:4b:a1:9a:c8:c9:23:32:79:bf: d3:58:d0:76:58:a3:d0:58:b9:e1:ba:5f:d8:cf:a2: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c00::/38 Signature Algorithm: sha256WithRSAEncryption 63:a7:92:fd:b6:58:12:ab:8c:1e:8c:ee:d8:de:b9:3e:bc:f4: 90:0d:fd:52:56:3f:28:d0:1a:a3:e5:f6:6c:4d:b9:79:69:07: 64:50:4d:d3:33:ba:4f:82:f6:b0:f9:47:8a:ee:29:45:01:a1: aa:73:a5:e1:b3:9a:60:9c:36:7c:94:8c:13:b5:d2:3d:d5:71: a0:cc:82:06:09:7a:c9:86:1e:3d:f5:a8:c2:50:8e:f7:bf:b3: 44:fd:b4:bc:ed:b4:91:a7:4f:03:4f:39:39:ce:54:46:55:e6: 41:39:c0:0c:a7:45:94:4e:49:b4:e1:58:8a:7a:bc:ab:c2:5c: f3:e0:1a:68:c3:a1:56:da:6f:d3:07:8c:2e:8c:91:54:8f:28: de:64:b6:e5:52:72:76:0b:08:b0:a9:3e:f6:fa:1d:5a:7e:07: 4e:c2:d2:2a:8d:47:29:f3:bc:3c:c3:3a:60:7c:cf:31:3f:7d: 6d:96:b5:92:70:87:a5:92:03:7d:45:b9:05:cb:74:eb:68:2f: 06:fc:14:13:f3:ec:86:88:fc:20:02:5a:2b:fa:43:d7:3e:69: 3a:63:cc:20:d7:5c:d1:4b:e1:3d:e1:da:c4:ea:d0:66:bc:c2: f2:08:92:36:fa:40:01:0a:7f:ad:d4:34:e7:46:12:be:bc:6c: 29:49:15:da -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUdWv8tYhltdxIP95BjpW5ttnHBMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTA3MjMyMDAxMTJaFw0yNjA3MjIyMDA2MTJaMDMxMTAvBgNV BAMTKDBCQzZEMjI1RjBDRTNFNjA3NzEyQTlBOThDNDU2MTkxMkYzNDMyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOIkiilh4nWcV9V6xTFZbwSRx On9zTtee72o1Nh6gg2JTRbSNwxhC/RNPBXLCZ2qoqAJpW3Mla4lTwpEZi00kQkHA 3ggZbDnDJqUpKuvpVL8yuSM9/lPO5dBX6eBCsVg/icBXI47CxovzEAYGphYb/vs9 RUUb7/mOagguayH5mAZU7h0WXxc54C1/EDMNEd6zbc3RAGDS66hADVYLOJwluael UoD0U2u4iMtg+XKpGoeDaU4kcZ6sfOgIBvrpnrGuOaEJkzQ61SDXiUT/9WYTYDkV PtyxYXpKhLIt93ExSECFWq7Ki0uhmsjJIzJ5v9NY0HZYo9BYueG6X9jPokOvAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLxtIl8M4+YHcS qamMRWGRLzQytjAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzUzMWU5NzIwLTBiNjItNDNhOC04ZTFmLTIzMDY4NGVhZjlhZi8zLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMEJD NkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYCKgtOBxwwDQYJKoZIhvcNAQELBQADggEBAGOnkv22WBKr jB6M7tjeuT689JAN/VJWPyjQGqPl9mxNuXlpB2RQTdMzuk+C9rD5R4ruKUUBoapz peGzmmCcNnyUjBO10j3VcaDMggYJesmGHj31qMJQjve/s0T9tLzttJGnTwNPOTnO VEZV5kE5wAynRZROSbThWIp6vKvCXPPgGmjDoVbab9MHjC6MkVSPKN5ktuVScnYL CLCpPvb6HVp+B07C0iqNRynzvDzDOmB8zzE/fW2WtZJwh6WSA31FuQXLdOtoLwb8 FBPz7IaI/CACWiv6Q9c+aTpjzCDXXNFL4T3h2sTq0Ga8wvIIkjb6QAEKf63UNOdG Er68bClJFdo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:38 2025 by rpki-client