$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer File: 44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer (raw, json) Hash identifier: rVRAz8LkvOnlmaw4M19kCLRqA3jHFBSl8pbI4FiAIfs= Subject key identifier: 44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 46DA7D0D9FA7FAE9C635197B479BFE622633CC86 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 28 Oct 2025 12:37:04 +0000 Certificate not after: Tue 27 Oct 2026 12:42:04 +0000 Subordinate resources: IP: 2a0b:4e07:a00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:da:7d:0d:9f:a7:fa:e9:c6:35:19:7b:47:9b:fe:62:26:33:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Oct 28 12:37:04 2025 GMT Not After : Oct 27 12:42:04 2026 GMT Subject: CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:1d:7a:19:46:07:d9:58:92:74:08:bf:35: 6e:85:57:08:ce:d2:8d:dc:1b:c0:d0:fe:67:5c:d8: 67:f1:f3:4e:22:a5:ee:98:73:8f:4e:0a:ca:59:1b: 4e:64:0c:54:eb:e5:8c:01:e2:df:ef:39:18:db:26: 46:76:9d:3c:85:9a:19:89:0d:be:75:62:4c:8c:1e: 04:3d:0f:4b:56:e3:f5:8d:5d:cc:97:64:81:9e:1e: 13:12:0c:d6:ea:9a:24:c1:f7:ee:8b:04:fd:e8:d6: 5e:fc:ee:21:14:9c:d2:d3:67:96:1a:d5:dc:52:79: 2f:0b:52:eb:73:3f:40:25:4e:a1:14:00:e7:af:0e: 3a:a8:93:e2:05:2d:d5:91:e0:ef:8a:eb:65:6f:8d: 95:34:12:e4:5b:4d:71:0a:6a:eb:7e:7a:e4:25:95: 94:b2:08:23:4b:bc:54:3b:db:3d:9d:9c:2b:01:1b: e0:ab:33:3b:f0:c5:ac:d7:3f:d9:4b:7b:cf:5e:4c: 25:4b:f5:ca:50:a8:e4:37:b2:53:5d:57:7b:75:6d: 48:11:fb:5c:09:89:c0:a0:4b:69:ea:f3:38:75:60: 80:e4:c9:c6:25:f8:a7:82:60:65:f7:f1:83:a6:2d: 1b:19:41:b2:b5:03:28:4f:87:6e:de:10:d4:a0:e4: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a00::/40 Signature Algorithm: sha256WithRSAEncryption 40:b5:4a:aa:48:8a:5b:0f:14:b3:fc:1f:d6:a8:d9:db:a8:ac: 62:ac:83:7e:05:07:41:4a:b4:b0:4b:18:24:28:b7:84:dd:ef: 8c:36:9e:8b:d4:0f:22:7c:54:91:4d:b3:04:97:4a:31:c5:c3: 20:55:f7:bd:7f:d3:ec:f0:70:b5:a7:43:d1:87:77:05:01:a3: 3d:dc:b6:c5:67:c9:e0:08:33:c5:4c:a3:1b:69:01:34:c5:a5: 11:86:e8:65:d1:df:ef:8b:cc:51:90:5e:ca:d9:bd:c0:e8:d1: 57:01:ec:db:f2:3a:20:91:d7:30:c8:07:e8:d7:9f:1a:04:88: a7:43:5b:43:ba:4d:82:e8:8b:af:95:66:38:d4:b5:70:0a:bf: 17:a5:19:f4:c3:7b:96:33:2f:8e:5a:68:96:94:4c:fd:4c:ad: 76:65:bc:5f:53:8f:a3:af:a0:d4:d7:69:d0:34:90:0f:76:9d: 4a:cf:7a:34:9f:4f:44:bf:77:d7:48:1b:c9:38:26:03:35:e7: 04:09:ee:58:e7:75:c6:5e:6f:0b:20:d5:59:62:0d:1c:a2:d5: 32:a2:d4:b8:e8:d5:a8:eb:bb:65:a2:38:3b:aa:42:6a:e2:0c: d6:3c:f7:64:6f:74:b8:df:c1:da:ce:0f:37:cc:bd:28:b4:82: cd:b0:14:f5 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIURtp9DZ+n+unGNRl7R5v+YiYzzIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEwMjgxMjM3MDRaFw0yNjEwMjcxMjQyMDRaMDMxMTAvBgNV BAMTKDQ0RTg2Rjk0NzlBNEI5OTg1REJENjdGRUMxNDYzMEJDMUY2QTU3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUdh16GUYH2ViSdAi/NW6FVwjO 0o3cG8DQ/mdc2Gfx804ipe6Yc49OCspZG05kDFTr5YwB4t/vORjbJkZ2nTyFmhmJ Db51YkyMHgQ9D0tW4/WNXcyXZIGeHhMSDNbqmiTB9+6LBP3o1l787iEUnNLTZ5Ya 1dxSeS8LUutzP0AlTqEUAOevDjqok+IFLdWR4O+K62VvjZU0EuRbTXEKaut+euQl lZSyCCNLvFQ72z2dnCsBG+CrMzvwxazXP9lLe89eTCVL9cpQqOQ3slNdV3t1bUgR +1wJicCgS2nq8zh1YIDkycYl+KeCYGX38YOmLRsZQbK1AyhPh27eENSg5C+dAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE6G+UeaS5mF29 Z/7BRjC8H2pXBzAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2FiNTFiMWIyLTVlMTQtNGMzNi04NmFhLWFiMWFkMWQ3ZGQzMC8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYWI1MWIxYjItNWUxNC00YzM2LTg2YWEtYWIxYWQxZDdkZDMwLzEvNDRF ODZGOTQ3OUE0Qjk5ODVEQkQ2N0ZFQzE0NjMwQkMxRjZBNTcwNy5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOBwowDQYJKoZIhvcNAQELBQADggEBAEC1SqpIilsP FLP8H9ao2duorGKsg34FB0FKtLBLGCQot4Td74w2novUDyJ8VJFNswSXSjHFwyBV 971/0+zwcLWnQ9GHdwUBoz3ctsVnyeAIM8VMoxtpATTFpRGG6GXR3++LzFGQXsrZ vcDo0VcB7NvyOiCR1zDIB+jXnxoEiKdDW0O6TYLoi6+VZjjUtXAKvxelGfTDe5Yz L45aaJaUTP1MrXZlvF9Tj6OvoNTXadA0kA92nUrPejSfT0S/d9dIG8k4JgM15wQJ 7ljndcZebwsg1VliDRyi1TKi1Ljo1ajru2WiODuqQmriDNY892RvdLjfwdrODzfM vSi0gs2wFPU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:07:59 2025 by rpki-client