$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.cer (raw, json) Hash identifier: LV7n47aWxXvwAdmDLOtTvbvn+XAQNLvIp83Fu9LVMzw= Subject key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 7BB2D1306E0146EDD4831D5F386F3665368D63E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer CRL Distribution Point: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 07 Nov 2026 19:35:00 +0000 Certificate not after: Sat 06 Nov 2027 19:40:00 +0000 Subordinate resources: IP: 85.155.227.0/24 IP: 2a06:a005:d2d::/48 IP: 2a06:a005:1507::/48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 09:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b2:d1:30:6e:01:46:ed:d4:83:1d:5f:38:6f:36:65:36:8d:63:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 7 19:35:00 2026 GMT Not After : Nov 6 19:40:00 2027 GMT Subject: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:7c:60:ad:98:e3:fd:42:e2:78:48:2d:d6: 67:4a:d2:2c:6b:37:c0:c1:59:2f:1f:91:74:86:65: 60:0b:09:f0:65:ae:f6:60:06:11:61:86:9c:ba:17: 23:64:84:64:77:4e:a6:ae:92:86:1a:d9:00:d7:1e: 3a:b6:6e:1c:11:05:18:a4:2e:f6:bd:69:dd:6a:d5: 95:a8:db:95:c3:e5:10:fe:c5:3a:62:cc:f3:ec:6f: 18:9d:e7:dc:b4:1c:d0:36:9b:83:41:76:42:98:5c: 7d:1a:87:22:12:88:ac:5c:87:03:6b:3b:c0:9e:76: b7:dc:a7:68:89:01:83:75:28:d3:35:b9:87:c9:17: 99:ac:ec:e5:c2:0a:c5:07:fd:5a:f2:4a:6a:85:85: 43:dc:5c:69:31:a6:29:12:eb:28:c1:86:7f:71:17: 87:0a:52:db:a1:01:76:86:0e:2a:21:4a:0c:69:6c: 61:6f:11:1b:fe:cf:a7:c8:fe:be:aa:90:2b:5f:21: 37:66:72:45:93:1e:42:36:cf:4b:81:66:6f:84:38: bb:b4:e2:a1:9b:96:d9:82:3d:b9:98:4a:be:ec:36: 94:b0:d7:38:15:2e:27:ec:94:ae:5d:d4:1e:62:9b: 18:9f:d7:32:ff:b1:0e:d3:66:ae:4c:e3:eb:f3:75: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.227.0/24 IPv6: 2a06:a005:d2d::/48 2a06:a005:1507::/48 Signature Algorithm: sha256WithRSAEncryption 63:b5:f6:dd:fd:d7:51:72:9e:79:de:0d:67:3c:6d:d2:51:82: f7:1e:1a:6e:c2:38:a7:d4:89:65:bf:27:a1:43:2c:8e:aa:49: a8:76:1f:a1:2a:b3:3b:8e:c4:04:77:f5:09:43:3b:2d:1e:a4: 0e:94:db:a2:7c:e1:dc:ab:32:94:8c:1c:05:cc:0d:17:fa:2b: bc:e7:5b:ab:7f:bb:73:bc:53:56:00:c5:86:e4:8b:bd:4f:6e: b1:05:b7:c4:df:45:8d:8f:09:bf:6e:f0:26:4c:21:cb:aa:cc: e0:0a:65:5e:c1:fc:47:51:87:ad:65:d0:3f:d0:74:0c:ff:d6: aa:ee:a3:e9:5d:78:9a:89:5b:ca:6f:ea:dd:ae:d8:35:1e:ea: 33:d0:59:01:09:a2:b3:31:03:49:10:fa:55:08:58:4e:19:4e: d3:93:01:6e:76:9e:b0:07:b1:3d:1e:2d:ae:44:39:32:d1:17: 5b:ce:10:d7:f6:82:ce:4a:81:ed:63:60:ac:15:ff:46:79:88: d7:47:c7:77:f5:07:bb:cb:69:8a:ca:41:81:a6:6f:a1:ce:d4: d1:03:31:96:30:8f:27:fb:90:12:d4:72:bc:d9:45:a7:0d:db: 4a:15:42:a5:66:7b:fb:99:a5:c0:60:0c:d2:f7:5b:8b:9f:31: e0:61:7f:9c -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUe7LRMG4BRu3Ugx1fOG82ZTaNY+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjExMDcxOTM1MDBaFw0yNzExMDYxOTQwMDBaMDMxMTAvBgNV BAMTKDY1NzhFNzk2NjIwMDA0OTZFQjE1NDBEOEJEOEZBNjVFRDhENjNBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LHxgrZjj/ULieEgt1mdK0ixr N8DBWS8fkXSGZWALCfBlrvZgBhFhhpy6FyNkhGR3TqaukoYa2QDXHjq2bhwRBRik Lva9ad1q1ZWo25XD5RD+xTpizPPsbxid59y0HNA2m4NBdkKYXH0ahyISiKxchwNr O8Cedrfcp2iJAYN1KNM1uYfJF5ms7OXCCsUH/VrySmqFhUPcXGkxpikS6yjBhn9x F4cKUtuhAXaGDiohSgxpbGFvERv+z6fI/r6qkCtfITdmckWTHkI2z0uBZm+EOLu0 4qGbltmCPbmYSr7sNpSw1zgVLifslK5d1B5imxif1zL/sQ7TZq5M4+vzdc7VAgMB AAGjggLrMIIC5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRleOeWYgAElusV QNi9j6Ze2NY6YjAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZi NC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZDMw NmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC84LzY1NzhFNzk2NjIwMDA0 OTZFQjE1NDBEOEJEOEZBNjVFRDhENjNBNjIubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEw BgMEAFWb4zAYBAIAAjASAwcAKgagBQ0tAwcAKgagBRUHMA0GCSqGSIb3DQEBCwUA A4IBAQBjtfbd/ddRcp553g1nPG3SUYL3Hhpuwjin1IllvyehQyyOqkmodh+hKrM7 jsQEd/UJQzstHqQOlNuifOHcqzKUjBwFzA0X+iu851urf7tzvFNWAMWG5Iu9T26x BbfE30WNjwm/bvAmTCHLqszgCmVewfxHUYetZdA/0HQM/9aq7qPpXXiaiVvKb+rd rtg1Huoz0FkBCaKzMQNJEPpVCFhOGU7TkwFudp6wB7E9Hi2uRDky0RdbzhDX9oLO SoHtY2CsFf9GeYjXR8d39Qe7y2mKykGBpm+hztTRAzGWMI8n+5AS1HK82UWnDdtK FUKlZnv7maXAYAzS91uLnzHgYX+c -----END CERTIFICATE-----Generated at Sun Nov 15 18:46:15 2026 by rpki-client