$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer File: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer (raw, json) Hash identifier: BQ9qUbcbsVTREdJQrOrXXtqK9eZfOJJX/nEItSqxrbE= Subject key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 53982E49268DDE1CB00E5643A52807B64514483A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 23 Feb 2026 08:52:19 +0000 Certificate not after: Mon 22 Feb 2027 08:57:19 +0000 Subordinate resources: IP: 2a0b:4e07:b0::/46 IP: 2a0b:4e07:2000::/37 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:98:2e:49:26:8d:de:1c:b0:0e:56:43:a5:28:07:b6:45:14:48:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Feb 23 08:52:19 2026 GMT Not After : Feb 22 08:57:19 2027 GMT Subject: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:e5:12:6d:d1:35:bc:20:58:23:d6:31:11: 91:50:07:2e:39:4f:92:5d:7e:ea:99:1b:13:1c:a6: 2e:e5:e5:c1:12:4f:02:c9:72:e3:0b:97:b2:31:ba: 91:6e:20:6f:04:0c:78:8b:a8:f4:59:8c:6e:d8:ae: 54:4c:39:66:84:b9:4d:42:9c:8d:54:6e:3d:d1:d4: 25:e1:93:30:c8:c5:e8:57:6c:f5:6d:dc:f2:c3:08: 85:30:90:79:24:b2:75:f5:95:0c:06:cb:98:a1:92: 10:80:3d:85:07:87:1c:2a:50:46:61:f3:5e:00:dc: b6:3e:49:54:b4:65:82:8b:c9:66:60:b9:4c:fd:65: 7e:cd:68:96:78:37:de:1a:76:99:96:69:9c:70:da: 59:4d:44:ec:81:9a:4f:95:71:96:43:42:b2:d3:a8: a9:34:bd:33:da:3c:cb:f3:3b:36:3d:2c:f2:7d:3b: 7c:74:e6:52:c2:2a:22:8e:f9:d0:19:c6:41:3b:95: 7c:ab:99:3d:65:a7:f6:d1:58:aa:ce:2d:38:b8:30: 78:13:92:cd:2d:f0:15:cb:5d:3c:53:d5:92:68:a9: a9:9f:0b:58:83:93:25:bd:d6:3c:f3:77:04:48:59: ad:2f:12:6e:70:d0:4d:78:96:a3:46:06:24:40:a8: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b0::/46 2a0b:4e07:2000::/37 Signature Algorithm: sha256WithRSAEncryption 88:9f:11:ea:ab:8e:4f:06:12:77:5f:ea:c7:19:53:f2:c2:32: 2f:41:b7:3a:b0:b8:bf:3d:8b:4d:c1:9b:2c:0e:0d:95:2f:be: d0:1e:89:55:8f:60:3e:a3:24:55:0e:35:21:d0:b1:10:61:0f: 8b:bc:67:50:c8:aa:3b:0e:45:a5:37:29:67:72:e7:8b:6d:a6: a8:19:01:d6:57:65:84:2d:7b:0d:a7:5a:31:71:43:d4:b8:32: e1:2b:ae:f4:96:cf:7b:d1:ad:eb:79:b2:de:a2:4d:58:df:10: ab:97:fd:9d:e3:dd:bf:db:f8:5b:6e:f5:aa:20:46:26:f2:ac: dc:d9:ee:b5:d1:34:c5:d8:ec:39:1b:39:e7:1c:93:2d:e5:88: 83:ba:48:35:df:e7:91:b2:93:af:d9:ce:68:8f:5a:08:a2:09: af:e4:37:b6:96:ea:9e:b4:a0:2b:ba:0c:33:c5:7e:41:3a:d5: 30:84:82:07:09:9f:58:ed:01:59:62:f7:2d:ba:7a:e7:c3:ca: 3e:65:0f:3e:46:35:85:3d:05:99:c3:e6:11:84:b7:fe:6c:d7: 86:57:bb:44:2a:6f:a0:ec:77:98:b9:1e:5f:32:ab:02:f2:9a: d7:0a:1a:a7:4f:c6:37:b0:f5:52:e5:70:9f:fa:6a:f0:11:2b: 4c:31:e5:5d -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIUU5guSSaN3hywDlZDpSgHtkUUSDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAyMjMwODUyMTlaFw0yNzAyMjIwODU3MTlaMDMxMTAvBgNV BAMTKEM3M0ZCNzAzM0YyM0M5NTk1OEZDRkJFNTBFNEM2NUFBOTVDMDNFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnuUSbdE1vCBYI9YxEZFQBy45 T5JdfuqZGxMcpi7l5cESTwLJcuMLl7IxupFuIG8EDHiLqPRZjG7YrlRMOWaEuU1C nI1Ubj3R1CXhkzDIxehXbPVt3PLDCIUwkHkksnX1lQwGy5ihkhCAPYUHhxwqUEZh 814A3LY+SVS0ZYKLyWZguUz9ZX7NaJZ4N94adpmWaZxw2llNROyBmk+VcZZDQrLT qKk0vTPaPMvzOzY9LPJ9O3x05lLCKiKO+dAZxkE7lXyrmT1lp/bRWKrOLTi4MHgT ks0t8BXLXTxT1ZJoqamfC1iDkyW91jzzdwRIWa0vEm5w0E14lqNGBiRAqBFHAgMB AAGjggMXMIIDEzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHP7cDPyPJWVj8 ++UOTGWqlcA+8DAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5Lzk5ZjgwOGQyLTFmMTUtNGRmMy1iNTFlLWQ1NWM1MjNiNjJmYy8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2MmZjLzEvQzcz RkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/ BBswGTAXBAIAAjARAwcCKgtOBwCwAwYDKgtOByAwDQYJKoZIhvcNAQELBQADggEB AIifEeqrjk8GEndf6scZU/LCMi9BtzqwuL89i03BmywODZUvvtAeiVWPYD6jJFUO NSHQsRBhD4u8Z1DIqjsORaU3KWdy54ttpqgZAdZXZYQtew2nWjFxQ9S4MuErrvSW z3vRret5st6iTVjfEKuX/Z3j3b/b+Ftu9aogRibyrNzZ7rXRNMXY7DkbOeccky3l iIO6SDXf55Gyk6/ZzmiPWgiiCa/kN7aW6p60oCu6DDPFfkE61TCEggcJn1jtAVli 9y26eufDyj5lDz5GNYU9BZnD5hGEt/5s14ZXu0Qqb6Dsd5i5Hl8yqwLymtcKGqdP xjew9VLlcJ/6avARK0wx5V0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:18:00 2026 by rpki-client