Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
File:                     307456E03A11DBB48443E93538958B15B4E9E0F0.cer (raw, json)
Hash identifier:          rD3u+DUDmTwMCq9Frdgfqc92xxrNEYh5xY2c61z3Fxg=
Subject key identifier:   30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       6288205D29A939FBE9FFDD3CC8CB866D11D9E648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 23 Feb 2026 02:04:08 +0000
Certificate not after:    Mon 22 Feb 2027 02:09:08 +0000
Subordinate resources:    IP: 103.139.88.0/24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:88:20:5d:29:a9:39:fb:e9:ff:dd:3c:c8:cb:86:6d:11:d9:e6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Feb 23 02:04:08 2026 GMT
            Not After : Feb 22 02:09:08 2027 GMT
        Subject: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:10:cc:93:bc:7a:33:52:48:11:85:50:32:
                    bc:57:86:d1:8b:71:ed:00:9b:74:55:08:56:64:2c:
                    04:48:f5:22:7b:c5:c2:3b:55:a6:56:c9:8c:2c:48:
                    37:84:18:2a:94:7d:f8:73:1e:ef:70:95:f1:9c:03:
                    24:40:24:8a:2d:58:46:5d:ea:42:17:81:43:b0:f9:
                    44:0d:28:fc:5c:3c:84:fb:71:2a:6e:17:0a:d5:b6:
                    d2:5b:96:4c:a1:44:1e:40:21:f2:a5:7f:b7:21:84:
                    51:27:07:1c:6d:d7:93:9b:dc:24:3c:f5:5c:5c:2a:
                    23:90:5b:bd:19:45:f8:73:d2:51:92:62:b6:89:83:
                    a1:40:c7:92:4e:70:75:3b:6f:81:6c:84:c3:90:df:
                    3a:70:56:9d:69:10:0c:88:f3:55:e9:8a:30:4a:2e:
                    44:94:3f:80:9a:ac:ec:4c:16:84:a4:ed:9a:77:50:
                    56:ee:d0:80:28:66:46:6e:5f:ae:0e:f7:2d:10:da:
                    f9:d7:10:f5:a5:4b:9c:6b:10:c6:84:14:54:d9:8c:
                    86:7f:08:89:8c:95:dd:b7:2e:12:7a:78:90:0f:bc:
                    2f:31:ae:69:6d:95:13:07:f3:02:85:b1:b2:f2:25:
                    cf:a7:56:4f:b5:e1:d1:a7:9d:1d:4e:2f:73:82:22:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:51:fa:fc:18:26:52:19:40:e7:5e:03:fe:c8:44:04:23:75:
         61:ed:6d:a7:c6:51:23:a9:f5:e0:fd:d7:e7:4a:e6:d7:41:6e:
         96:ad:3d:a6:6b:4c:0b:d6:45:79:4c:1b:8c:52:34:16:4f:44:
         32:85:6c:86:1a:f5:02:73:c2:93:bf:26:c0:dc:99:76:c2:8e:
         b7:01:ae:fe:c3:a8:fa:02:31:24:ed:c0:99:ee:12:64:1a:d7:
         47:23:5b:38:fc:e6:26:45:47:7b:31:e4:65:e1:57:bf:71:a2:
         75:0c:9c:ad:1e:4e:1d:e6:4a:2d:d8:f0:3d:ce:35:46:2a:1c:
         9b:3c:a3:21:a0:9e:22:6a:af:e2:86:45:b4:78:10:20:dc:39:
         ce:e4:5e:c2:0a:23:c3:89:2e:71:7d:4f:6c:ea:05:d9:f5:43:
         19:e7:75:75:6e:a8:ba:03:c3:71:b2:66:3a:b3:e2:14:f8:b8:
         7c:11:2a:7c:1a:22:62:4b:25:10:bd:37:6e:19:a3:dc:89:e6:
         b9:5d:4c:71:c1:fb:b4:21:42:bf:46:fe:e9:82:a9:ca:ae:5b:
         0a:51:17:eb:d1:4b:4d:7e:f6:ca:f6:16:f6:e0:8c:4e:56:c0:
         85:2e:95:35:e6:5f:5e:a0:13:80:82:e3:72:c4:f0:ca:8b:5d:
         30:71:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:55 2026 by rpki-client