Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer
File: 53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer (raw, json)
Hash identifier: jdcj+38dtlOnPTKetRWnmGa9p0wa+mlTPzsb6w1aofk=
Subject key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 58BE062884F33CEB91450E515D5BACA20844C00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 01:44:19 +0000
Certificate not after: Fri 10 Sep 2027 01:49:19 +0000
Subordinate resources: IP: 85.155.226.0/23
IP: 2a05:dfc6::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:be:06:28:84:f3:3c:eb:91:45:0e:51:5d:5b:ac:a2:08:44:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 11 01:44:19 2026 GMT
Not After : Sep 10 01:49:19 2027 GMT
Subject: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:3a:71:a3:63:df:7f:7c:79:97:61:3a:50:
c3:e0:2e:9b:76:8d:96:b6:c3:7f:5e:69:cc:07:8a:
75:4d:26:4b:5d:23:c5:4a:63:1e:37:58:f5:3b:c1:
be:0a:15:2d:55:78:b4:0d:f7:fc:39:a7:b8:9a:7b:
e0:de:91:df:dd:e8:12:dc:7e:e9:49:f3:95:6d:f4:
2a:5a:34:45:e6:0f:6d:09:16:76:3e:5b:41:ab:18:
c0:86:18:fe:ee:45:af:6a:17:14:f6:d6:37:0a:a5:
5a:5b:49:03:d8:0a:a9:c4:34:50:eb:3a:a0:ec:2d:
3f:1b:21:6c:14:b3:ec:7d:4a:3f:3b:9c:12:f5:55:
0f:c5:34:51:16:fe:74:b5:4f:3d:1a:aa:f4:f0:e2:
1f:a8:8a:cc:b4:1a:53:ad:c3:f2:2d:35:73:13:b5:
79:20:f2:41:e0:d5:26:58:f6:ee:02:93:21:11:9e:
ec:8a:fc:bc:8d:48:6e:00:89:1d:86:15:79:10:e9:
ac:2e:0c:3d:71:75:e9:d8:ce:ca:8f:80:cc:70:40:
b1:e2:c5:4f:36:71:40:db:2a:f4:f7:15:f8:9d:eb:
46:9e:03:8c:ed:ba:aa:95:d6:0a:7d:07:18:3d:eb:
93:d6:d3:f5:07:90:6b:9f:fd:3a:57:7a:f3:96:90:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.226.0/23
IPv6:
2a05:dfc6::/32
Signature Algorithm: sha256WithRSAEncryption
7f:df:90:74:f1:3a:d7:71:29:a1:59:ef:b2:63:ea:e4:eb:b4:
02:1d:bf:b3:03:12:ee:79:e5:a6:88:8d:76:64:11:a3:de:bc:
a1:80:e1:29:3b:d5:a1:6d:90:68:46:26:3a:d1:de:7f:0b:74:
5b:75:af:22:61:ec:9d:15:33:6b:3e:bb:70:38:6d:76:fa:9a:
77:b6:99:fb:bd:1a:20:9e:88:f1:9a:da:86:3a:e5:42:8e:12:
77:45:36:a5:0b:a9:c6:9c:4c:41:00:63:03:17:a0:8f:76:8c:
c3:36:3a:83:71:86:ea:a2:72:98:23:ab:3a:6a:57:3b:20:f4:
a7:f3:15:33:78:8e:87:4f:2e:f9:55:11:d4:cd:de:e1:57:ea:
fa:71:83:4f:b4:36:3d:33:6a:95:b3:49:ac:db:aa:3d:95:78:
cd:fb:23:c9:fb:3a:00:9d:3d:07:3f:e9:4b:eb:a0:7b:17:ce:
b7:5a:10:b2:11:4b:03:46:c5:9f:a8:40:60:bf:c3:30:66:ab:
ad:91:f2:3b:0a:cd:6a:cf:4b:f7:1a:12:6a:fc:1e:d3:61:c4:
fc:fd:34:4d:ea:dd:2d:d3:c5:00:9b:25:16:0d:a9:26:8a:c8:
36:14:30:8c:04:06:4f:5f:1b:33:de:fc:d9:43:f8:e1:fd:70:
af:a6:95:96
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUWL4GKITzPOuRRQ5RXVusoghEwA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MTEwMTQ0MTlaFw0yNzA5MTAwMTQ5MTlaMDMxMTAvBgNV
BAMTKDUzNzE1RjA0NzZFQTE5RUI2MEREMEYzOEQ5MkY4NEU4RDQwQTAyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyDpxo2Pff3x5l2E6UMPgLpt2
jZa2w39eacwHinVNJktdI8VKYx43WPU7wb4KFS1VeLQN9/w5p7iae+Dekd/d6BLc
fulJ85Vt9CpaNEXmD20JFnY+W0GrGMCGGP7uRa9qFxT21jcKpVpbSQPYCqnENFDr
OqDsLT8bIWwUs+x9Sj87nBL1VQ/FNFEW/nS1Tz0aqvTw4h+oisy0GlOtw/ItNXMT
tXkg8kHg1SZY9u4CkyERnuyK/LyNSG4AiR2GFXkQ6awuDD1xdenYzsqPgMxwQLHi
xU82cUDbKvT3Ffid60aeA4ztuqqV1gp9Bxg965PW0/UHkGuf/TpXevOWkFEXAgMB
AAGjggLgMIIC3DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTcV8EduoZ62Dd
DzjZL4To1AoCkjAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zY2JmYWQ5
Ni03OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNjYmZh
ZDk2LTc5NDctNGU0OS1hY2UxLThiZjg5OTkzYmQ0Mi80LzUzNzE1RjA0NzZFQTE5
RUI2MEREMEYzOEQ5MkY4NEU4RDQwQTAyOTIubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEAVWb4jANBAIAAjAHAwUAKgXfxjANBgkqhkiG9w0BAQsFAAOCAQEAf9+QdPE6
13EpoVnvsmPq5Ou0Ah2/swMS7nnlpoiNdmQRo968oYDhKTvVoW2QaEYmOtHefwt0
W3WvImHsnRUzaz67cDhtdvqad7aZ+70aIJ6I8ZrahjrlQo4Sd0U2pQupxpxMQQBj
Axegj3aMwzY6g3GG6qJymCOrOmpXOyD0p/MVM3iOh08u+VUR1M3e4Vfq+nGDT7Q2
PTNqlbNJrNuqPZV4zfsjyfs6AJ09Bz/pS+ugexfOt1oQshFLA0bFn6hAYL/DMGar
rZHyOwrNas9L9xoSavwe02HE/P00TerdLdPFAJslFg2pJorINhQwjAQGT18bM978
2UP44f1wr6aVlg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:08 2026 by rpki-client