Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
File:                     6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer (raw, json)
Hash identifier:          ErzHNXA0FOO3Un7LshwPh8lFyEi5CahnF5S5kj940m4=
Subject key identifier:   6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       4926F75E5BF6E826A7EC96E5626971B276B6D8DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 13 Jun 2026 04:38:51 +0000
Certificate not after:    Sat 12 Jun 2027 04:43:51 +0000
Subordinate resources:    IP: 160.202.134.0/24
                          IP: 2a07:54c0::/29
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:26:f7:5e:5b:f6:e8:26:a7:ec:96:e5:62:69:71:b2:76:b6:d8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun 13 04:38:51 2026 GMT
            Not After : Jun 12 04:43:51 2027 GMT
        Subject: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:87:52:ca:35:c0:d5:59:4b:89:7e:6c:84:
                    30:d4:51:b8:29:5b:e7:b2:51:f2:44:e5:d3:1d:d1:
                    06:48:84:8b:3a:77:9b:8a:5b:de:9c:68:da:0e:fc:
                    07:7c:cb:35:72:72:35:b3:76:0f:1c:e6:fa:16:c9:
                    7c:04:ff:9e:08:55:fe:01:3a:06:8d:1d:7b:66:a4:
                    8f:5e:05:7d:0b:ac:06:06:a4:c7:2a:9a:93:0e:b0:
                    72:28:a9:f5:f5:ae:e4:fa:5a:e2:41:ab:94:ea:a2:
                    99:88:a9:23:ec:28:1d:dd:8c:60:8c:33:b7:db:10:
                    8a:da:7d:5d:75:e0:53:14:5a:9e:3d:ac:bf:00:f2:
                    f9:97:3e:dd:9d:2e:85:d2:08:55:d4:f8:69:7f:a8:
                    f7:a8:6d:60:98:8f:80:31:0d:ce:b9:a2:5c:92:b2:
                    35:81:f3:64:92:d0:d9:a3:df:91:cf:64:9e:75:72:
                    14:cf:55:45:08:e1:00:68:89:93:a1:a0:c3:3f:0b:
                    21:cd:4a:7d:f2:a6:bd:2e:b6:05:9c:85:1c:bb:13:
                    48:1c:4d:81:9c:41:a0:6c:4d:67:ff:a2:a7:fe:4c:
                    f2:fd:1e:d9:74:ef:54:48:09:0d:ab:54:b4:b8:7d:
                    5e:bc:36:ab:9f:1c:59:c7:dc:78:d3:82:f9:0d:ac:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.134.0/24
                IPv6:
                  2a07:54c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:e5:b4:ea:92:4a:d0:b8:2e:8c:ac:62:bc:1e:6f:2c:3b:56:
         ad:d8:b5:0a:57:79:c2:7f:04:fe:35:49:78:41:9f:7d:d7:49:
         7f:fe:c5:12:21:90:a2:76:26:30:07:fa:ef:8c:5b:43:5b:99:
         40:ab:8e:fd:b3:25:18:9e:c5:fa:5d:26:1d:b1:0c:45:b6:fe:
         1c:8a:1f:2f:a6:a6:9a:92:46:4f:fa:e1:3b:e0:57:a2:e2:34:
         a6:02:f7:59:63:5b:d0:a7:21:65:e8:b2:40:ab:0a:99:e9:9b:
         17:64:69:b3:8a:d6:75:59:a7:89:f3:c8:df:2e:5e:e4:1b:2d:
         ea:72:53:6b:56:38:cb:bd:e3:83:17:19:5b:ab:fc:31:ff:0c:
         a0:77:62:96:92:33:75:43:b3:3a:a1:dc:6b:cf:2d:8c:6e:72:
         f2:af:d7:83:fd:1f:08:6d:af:f8:00:f8:3e:b0:64:8e:fa:d1:
         9d:4b:70:f9:9c:a0:f9:b0:45:e8:03:4e:37:c5:7c:c8:0f:bb:
         f1:3d:38:64:0c:68:a2:4f:f2:b1:5a:4e:45:ec:72:80:76:29:
         63:43:9a:b9:8f:60:9f:ac:9b:a4:e4:a7:4c:94:82:46:b3:f7:
         ef:df:de:79:d1:d4:a7:1a:3a:ec:1e:02:25:8e:87:35:d2:81:
         27:cb:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:37 2026 by rpki-client