Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
File:                     8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer (raw, json)
Hash identifier:          FQWgZuT/FG1NVbriEbzQe85ImR9WMXeDGlVOgrE5WVI=
Subject key identifier:   8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       3399607CBF07E27AFA9C06D34841E3B595A68A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Mon 27 Jul 2026 07:40:09 +0000
Certificate not after:    Mon 26 Jul 2027 07:45:09 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:99:60:7c:bf:07:e2:7a:fa:9c:06:d3:48:41:e3:b5:95:a6:8a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 27 07:40:09 2026 GMT
            Not After : Jul 26 07:45:09 2027 GMT
        Subject: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:92:de:9b:59:bb:54:2b:b7:b0:bc:96:40:
                    4a:4b:1a:08:d3:e3:49:d1:c3:c6:a5:17:e2:61:d7:
                    c1:c5:07:6d:55:4d:d5:47:51:ec:ba:5a:45:24:70:
                    05:58:95:a5:30:1b:d2:a4:61:60:c0:c4:6c:24:78:
                    b1:4b:43:8a:b0:eb:91:30:bf:94:38:86:e2:2b:91:
                    46:fa:99:62:c1:df:ee:77:7a:e4:f4:20:37:38:e8:
                    80:a5:bb:d3:ca:1b:d0:31:12:fb:85:b7:01:22:15:
                    da:70:1a:b4:4f:58:8c:0f:6d:8f:c9:65:1c:94:42:
                    14:79:45:01:84:95:31:54:9e:dd:d9:28:93:40:e1:
                    54:12:b7:1b:b3:34:86:8e:8d:3b:74:bb:38:de:64:
                    73:97:1f:21:58:80:5f:3e:89:b4:ad:86:76:f9:16:
                    11:8f:5a:4d:d0:5b:8e:92:67:81:bc:86:37:33:f7:
                    ff:d5:ea:a8:dc:19:5e:50:84:2a:02:d4:a9:76:b1:
                    3b:62:aa:42:eb:a4:2f:5f:24:82:fa:49:40:ca:3f:
                    7d:6a:20:7d:a7:12:75:26:92:f1:83:f1:d6:72:ab:
                    18:83:da:b1:3b:1b:0e:0f:1d:d6:d2:2d:7b:06:b7:
                    0a:af:a7:81:d2:cb:77:24:0e:2d:96:d1:97:b6:57:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:09:1e:60:3d:e2:5d:46:49:eb:a3:6d:fb:b5:b8:58:8d:66:
         13:d1:c4:8d:12:4a:10:b9:1b:a8:47:4d:89:00:be:af:7c:4a:
         c2:a1:4b:51:78:b2:1a:b1:26:ff:ca:50:36:e1:4a:77:23:e6:
         e1:95:ba:c6:66:ea:a5:1d:68:61:64:a1:dd:6f:8b:2b:64:bc:
         37:39:ec:13:ed:75:98:02:f5:7b:3e:4e:04:59:49:f1:0a:61:
         57:83:eb:49:79:74:18:ba:56:ba:57:03:3b:87:19:f4:35:3e:
         b9:c6:16:6e:c2:98:e7:91:14:7c:dd:3d:75:17:80:6e:62:b2:
         0a:f2:9c:5f:17:1e:14:d2:8d:bb:2b:29:1d:a7:35:0e:31:e8:
         91:05:38:5a:ce:7c:3a:95:35:7e:ec:53:09:8c:53:9c:1e:04:
         ed:f5:02:72:2d:b6:a9:50:e3:74:61:69:cd:07:bc:63:1f:83:
         10:ff:af:6f:bd:c1:3c:d3:63:64:29:e7:c1:41:ba:d6:10:2c:
         3d:69:44:1f:77:b3:33:61:e3:87:f3:9f:78:ee:d0:65:20:32:
         a7:0e:04:ac:83:d7:2f:99:91:98:5e:a5:34:6d:bb:69:03:a5:
         d1:71:c0:88:e3:f7:f7:f4:5c:74:b9:47:a3:9b:e3:9f:d4:46:
         b0:0c:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:49:41 2026 by rpki-client