$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer (raw, json) Hash identifier: TRw7mV+8XDFyGZvog23TchYS4ES4rIS2Am3xicnQCiY= Subject key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3FB8C95690FFB679E31CD3094DF3CE634BB3BA18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 23 Feb 2026 08:53:21 +0000 Certificate not after: Mon 22 Feb 2027 08:58:21 +0000 Subordinate resources: IP: 2a0b:4e07:6100::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:c9:56:90:ff:b6:79:e3:1c:d3:09:4d:f3:ce:63:4b:b3:ba:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Feb 23 08:53:21 2026 GMT Not After : Feb 22 08:58:21 2027 GMT Subject: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:f3:82:c2:ee:2e:e4:5b:52:01:db:53:3c: 4d:c2:32:60:a8:5f:7d:36:d5:44:d9:b4:2b:2f:fd: c9:3c:dd:a9:14:fa:8b:88:5f:7a:9f:73:47:74:04: 3a:89:e7:f0:cd:55:cb:26:b5:27:d2:66:51:49:96: cd:e3:39:50:08:ab:c5:fa:9e:9a:13:99:5c:2b:bf: d8:77:7b:c3:59:cf:2f:19:33:b9:07:60:95:fc:e1: 44:30:04:9b:7c:7f:49:26:fa:b0:e0:9c:a6:89:95: 6a:55:b9:af:c9:3c:ea:48:e3:bc:20:7a:4e:0f:3a: a6:bb:34:d9:3e:0d:9a:c1:20:c6:16:0b:16:0b:ea: f3:c2:90:0d:35:a7:48:fe:fa:74:d8:3a:cf:6b:fc: d4:61:22:b6:bf:1a:b8:cb:e7:f1:41:a2:23:97:be: ea:7c:df:68:16:4c:7c:81:d2:c4:af:a1:f1:c0:be: 2c:a2:fc:93:f3:56:39:61:9e:21:fc:4f:ff:19:e8: f6:13:43:5b:c8:ba:d8:de:d1:ad:54:3c:3e:ed:7c: 61:db:0e:7a:fb:2a:e8:41:41:55:ab:a5:57:b6:71: af:13:31:92:e6:a3:8f:1f:01:05:0e:ea:fd:2c:a2: e4:93:ea:a3:15:88:3b:e5:c2:88:af:ed:62:c2:0a: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6100::/40 Signature Algorithm: sha256WithRSAEncryption 9c:2e:67:cd:f7:0a:e2:26:38:78:af:54:7e:9f:c9:b3:1b:dd: 3f:fa:86:f7:e6:53:b3:1b:55:9f:3f:cc:a4:61:66:b2:f7:29: d7:80:7a:5e:6f:3c:69:45:db:03:2e:19:08:20:a8:e7:bf:e1: 22:76:a3:58:d6:da:ea:30:a3:7a:0a:ae:44:bd:ff:9d:89:f5: bd:f4:3c:e3:ed:1f:90:bb:02:c1:bd:df:14:4e:e8:2d:ae:da: a7:ff:aa:54:d2:f8:e8:5e:8a:b0:02:30:b5:b3:9d:8e:13:bc: 9b:01:97:1b:f8:38:04:7d:27:e4:1b:ef:1e:b3:24:3e:7b:53: e6:df:84:d9:aa:7d:03:36:2d:e5:fd:cc:77:38:f3:a0:4f:9c: 85:41:e5:16:c9:13:6b:24:5d:0d:15:0e:4f:af:70:6d:04:3e: eb:5e:03:0c:52:76:2b:2a:5c:9d:24:41:6d:44:73:5b:82:b3: 70:df:93:ef:2b:4c:d8:df:f4:5a:cf:35:66:fa:b5:05:72:29: 60:d6:40:1c:a1:f0:81:02:43:8a:3c:0c:22:7b:1c:13:09:9f: 4c:d4:c9:f2:de:3b:3a:eb:76:23:ab:7d:55:4f:2d:47:10:49: 95:c9:ec:83:75:8b:fe:57:25:67:40:67:01:18:0b:d8:97:0c: 7a:7a:9d:00 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUP7jJVpD/tnnjHNMJTfPOY0uzuhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAyMjMwODUzMjFaFw0yNzAyMjIwODU4MjFaMDMxMTAvBgNV BAMTKDc5QUExMkJBRDdFMkM1MDI3ODg5MEYyREY5Q0NFMDJCODhFMTg0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPfOCwu4u5FtSAdtTPE3CMmCo X3021UTZtCsv/ck83akU+ouIX3qfc0d0BDqJ5/DNVcsmtSfSZlFJls3jOVAIq8X6 npoTmVwrv9h3e8NZzy8ZM7kHYJX84UQwBJt8f0km+rDgnKaJlWpVua/JPOpI47wg ek4POqa7NNk+DZrBIMYWCxYL6vPCkA01p0j++nTYOs9r/NRhIra/GrjL5/FBoiOX vup832gWTHyB0sSvofHAviyi/JPzVjlhniH8T/8Z6PYTQ1vIutje0a1UPD7tfGHb Dnr7KuhBQVWrpVe2ca8TMZLmo48fAQUO6v0souST6qMViDvlwoiv7WLCCuutAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5qhK61+LFAniJ Dy35zOAriOGEhDAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzhmMTY5YTdhLWUwNDMtNDMzNy1hZWVjLTI0ZDJhYjkxZjEzOC8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFmMTM4LzEvNzlB QTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOB2EwDQYJKoZIhvcNAQELBQADggEBAJwuZ833CuIm OHivVH6fybMb3T/6hvfmU7MbVZ8/zKRhZrL3KdeAel5vPGlF2wMuGQggqOe/4SJ2 o1jW2uowo3oKrkS9/52J9b30POPtH5C7AsG93xRO6C2u2qf/qlTS+OheirACMLWz nY4TvJsBlxv4OAR9J+Qb7x6zJD57U+bfhNmqfQM2LeX9zHc486BPnIVB5RbJE2sk XQ0VDk+vcG0EPuteAwxSdisqXJ0kQW1Ec1uCs3Dfk+8rTNjf9FrPNWb6tQVyKWDW QByh8IECQ4o8DCJ7HBMJn0zUyfLeOzrrdiOrfVVPLUcQSZXJ7IN1i/5XJWdAZwEY C9iXDHp6nQA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:11:36 2026 by rpki-client