Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
File:                     F6386FABEA39210B665A6A55AE5DA66BE6741597.cer (raw, json)
Hash identifier:          V/EYpYBPIv9OIeHsyic3FZwScadAjrW199hzjTeKzrc=
Subject key identifier:   F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       6794D53C1AE929C589D20B556CAA66B52406AED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Tue 28 Jul 2026 08:29:54 +0000
Certificate not after:    Tue 27 Jul 2027 08:34:54 +0000
Subordinate resources:    IP: 85.155.227.0/24
                          IP: 2a05:dfc4::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:94:d5:3c:1a:e9:29:c5:89:d2:0b:55:6c:aa:66:b5:24:06:ae:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 28 08:29:54 2026 GMT
            Not After : Jul 27 08:34:54 2027 GMT
        Subject: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:60:1b:4e:8b:c7:a5:67:54:1b:60:63:77:
                    b1:06:6f:20:8b:e9:d7:d4:54:e5:f6:08:95:35:f9:
                    6b:f2:2c:be:1f:2e:7d:5b:8d:62:4c:46:09:6f:39:
                    c8:d9:7c:f3:e0:66:39:56:b9:9b:3f:b5:5f:73:ae:
                    9a:b5:8c:d1:17:1d:c9:05:1a:36:12:cd:4d:aa:35:
                    70:9c:0a:eb:71:32:6d:d2:02:b2:38:38:38:9a:0a:
                    ff:fa:b1:69:14:42:c2:0c:ea:d6:bd:e2:1f:09:00:
                    8b:dd:8f:9f:d8:11:00:37:9b:d6:b8:9a:ab:c6:20:
                    c9:0a:7c:a7:3c:65:43:97:e3:31:69:39:b8:dc:2b:
                    8a:22:48:f2:d0:f4:ab:37:f9:49:c5:00:f5:06:17:
                    74:84:90:6f:57:b1:14:f3:7c:28:77:d1:7b:d5:df:
                    b9:68:b9:ba:54:39:2f:13:f0:8b:76:b4:af:d7:2c:
                    86:56:83:c7:6c:3c:84:a1:45:6f:09:65:1a:54:8a:
                    0f:4b:fc:55:c5:d6:da:02:7e:cb:3c:ef:36:76:55:
                    59:b3:d9:60:83:9b:00:5e:a3:e8:27:7a:5c:aa:e5:
                    b3:79:32:c3:2b:36:0d:56:4b:a1:02:61:9b:3a:c7:
                    b1:9c:48:85:61:69:8f:d0:ea:fb:4f:3d:1c:d7:ca:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.227.0/24
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:07:a4:fa:e0:17:ec:0d:4f:d4:db:9c:af:fb:d7:b5:a1:db:
         25:ec:c1:0a:0f:9e:e4:53:89:fb:68:a3:99:dc:9d:9a:6b:91:
         5f:2d:e0:97:01:08:c5:1e:21:0f:d7:47:05:1d:3f:90:63:2a:
         e4:37:c4:a6:43:fc:08:e5:4f:73:bf:c2:54:02:5b:31:eb:19:
         2d:81:71:40:48:20:57:e2:3c:c6:44:34:61:d6:40:b3:d0:9e:
         9e:c1:56:81:b0:37:28:28:06:ea:64:f4:0c:92:8a:d1:68:62:
         e2:72:b9:6e:cf:75:b3:5d:0d:95:30:4f:fe:b8:a0:4b:a0:30:
         90:50:10:78:03:84:8d:63:77:66:3a:82:e5:a7:36:82:9b:a2:
         3f:7b:ea:81:40:3d:4c:7e:1f:63:17:42:35:4d:80:10:ff:69:
         c0:db:31:14:77:0d:e2:67:c6:95:b8:0e:32:28:d4:49:10:dc:
         5e:46:3a:50:24:00:9b:d7:f9:d2:20:46:3b:cf:75:86:36:c3:
         51:47:8b:e6:45:08:32:66:75:9d:ca:3e:3e:b6:24:c8:1a:60:
         86:15:08:3a:42:d9:9b:83:4c:94:cd:85:6a:02:e8:d6:1a:46:
         11:f7:32:fc:1b:80:79:d0:cd:e3:f0:4c:22:cd:12:07:aa:dd:
         93:d2:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:11 2026 by rpki-client