Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
File:                     A912092CFA11F378852F52266C793AB678233205.cer (raw, json)
Hash identifier:          iXq5hV/H4d665JOfNeqAojrKXMopln1jcu3FpOgHtaQ=
Subject key identifier:   A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       74A634DC9C87ACFCE3CDD5FF0B1C49977EAC4582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 06 Aug 2025 01:15:41 +0000
Certificate not after:    Wed 05 Aug 2026 01:20:41 +0000
Subordinate resources:    IP: 111.235.151.0/24
                          IP: 2a09:54c3::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a6:34:dc:9c:87:ac:fc:e3:cd:d5:ff:0b:1c:49:97:7e:ac:45:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Aug  6 01:15:41 2025 GMT
            Not After : Aug  5 01:20:41 2026 GMT
        Subject: CN=A912092CFA11F378852F52266C793AB678233205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:cc:1d:43:20:54:07:52:b3:f2:17:a6:cf:
                    7b:2a:1c:e0:8a:fe:c8:0b:26:df:98:a2:63:39:80:
                    7e:83:c4:29:67:c6:f8:a9:29:a6:4e:9e:51:7c:88:
                    53:60:b6:db:7e:dd:ec:8a:05:9a:92:27:fc:37:38:
                    f6:5f:5f:c3:5b:4b:86:b5:2b:f9:cd:9d:e1:cc:fb:
                    0b:f8:67:46:d6:31:46:a0:65:78:09:88:9f:fc:6f:
                    47:e7:dc:e2:fc:01:35:f6:f4:ad:5d:f3:c1:46:40:
                    5a:07:6c:84:6d:6b:45:ed:1f:77:7b:78:83:e4:a7:
                    58:a5:57:24:34:33:ff:4e:23:9f:01:5f:c0:d7:70:
                    8d:1a:3f:03:a5:5f:12:92:b0:f1:a4:66:6d:97:b0:
                    c9:4a:50:1e:f8:f5:b2:ae:e2:29:76:53:ed:22:0d:
                    f8:4a:db:93:a7:56:8e:fe:62:b5:9a:96:01:1b:d8:
                    3e:69:eb:dd:56:47:44:71:be:7e:8e:da:46:ca:37:
                    e4:e6:51:61:03:ff:b4:74:c7:7b:f5:60:34:63:c7:
                    4e:5b:03:c2:44:66:01:54:c2:23:93:4a:1f:1c:cb:
                    c7:fa:99:15:7e:f0:51:f8:19:2c:f9:97:8a:34:7f:
                    a5:14:ec:96:68:d0:f3:d0:33:71:6f:23:4a:93:6e:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.151.0/24
                IPv6:
                  2a09:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:20:12:0e:e2:06:30:c3:7a:16:f3:92:a2:b2:45:0e:9a:
         2b:ca:4d:19:02:d2:39:b1:bd:82:5d:d1:52:2f:a5:b3:80:26:
         12:20:e7:f2:e7:d5:1c:a9:28:1d:b7:13:6c:26:b5:19:75:20:
         53:6b:59:01:28:21:62:ea:ed:b9:32:74:4d:02:1d:74:6b:37:
         08:87:a5:0d:2b:6a:68:6e:6d:db:29:e8:34:a4:d4:a6:9c:ed:
         c0:3c:7f:19:09:f2:71:2e:64:00:47:be:fa:61:6a:32:d5:33:
         87:2c:47:c4:d7:e9:17:37:2c:69:b1:3c:69:63:de:6d:9e:66:
         f2:17:dd:a9:c0:db:29:af:3f:82:26:3e:60:a1:71:21:8e:4d:
         64:e0:5f:06:50:53:ad:62:f7:70:1c:b3:78:56:13:e2:cb:3f:
         14:2d:58:9b:78:7a:06:89:ae:bf:0f:8e:be:f9:71:73:07:aa:
         6e:f1:c9:28:3c:4d:ec:a3:00:6c:f1:3c:c0:52:7e:38:c8:89:
         78:3b:73:4c:dd:7f:99:0d:35:a6:43:7c:c6:77:ff:09:54:6d:
         b1:d7:99:b8:c3:c3:6d:b0:77:86:64:af:09:7e:35:cf:10:d8:
         52:7c:b5:44:30:30:70:18:df:20:4d:cc:99:81:29:28:91:03:
         48:84:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:04 2025 by rpki-client