$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (raw, json) Hash identifier: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4= Subject key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 67E901A939959C9164570C275B0C704718F24380 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 03 Jul 2025 19:08:25 +0000 Certificate not after: Thu 02 Jul 2026 19:13:25 +0000 Subordinate resources: IP: 2a06:9f41:100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 08:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e9:01:a9:39:95:9c:91:64:57:0c:27:5b:0c:70:47:18:f2:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Jul 3 19:08:25 2025 GMT Not After : Jul 2 19:13:25 2026 GMT Subject: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:9b:4d:83:f6:a1:23:c1:bd:4f:cc:2b:81: 4c:63:0d:d5:12:21:29:9e:02:3e:de:72:e0:3c:7e: 9a:ba:b0:26:43:d4:a7:19:bb:da:f9:6e:96:23:82: 83:83:33:a9:1d:c5:d3:6f:b4:a8:c0:af:5c:f0:5b: f9:d7:65:7f:45:89:bb:d1:40:0b:46:48:fb:ec:7c: 59:51:11:29:75:df:c4:b0:68:f8:dc:91:0e:68:3d: e0:57:2e:49:d5:5c:74:56:6f:3d:01:f0:e7:b8:56: 92:2b:15:15:8e:73:1e:55:7b:0e:d7:1c:de:47:2d: d1:ee:1c:74:20:55:5e:6d:fa:91:fe:a7:18:08:38: d1:b8:96:83:a5:61:76:f6:84:68:59:25:b4:a0:46: e2:2b:fd:ba:c8:64:b0:21:ac:55:3b:62:dd:6b:d1: 1d:bd:7b:84:fe:17:08:da:f1:6e:84:78:2b:bc:81: 9f:cd:6f:38:99:c9:79:6f:8e:92:47:6d:35:28:ca: bb:63:9c:d8:2f:81:cd:ef:00:da:eb:d4:a2:95:b9: d8:bc:5a:e7:28:fb:bf:42:29:bd:93:25:5c:57:4e: de:93:ca:ed:0b:19:1b:c7:1b:ea:6a:ba:71:c8:ed: ca:c2:b9:29:22:75:e2:0e:14:41:3f:7a:e7:1f:5a: 8b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:100::/40 Signature Algorithm: sha256WithRSAEncryption 55:aa:06:b1:bd:5c:8a:40:41:b7:71:95:5b:5f:1b:7b:69:be: 5c:79:fb:7e:58:b2:fe:ff:7a:af:c7:c8:1f:e6:df:51:25:ce: 04:e0:8e:d3:19:87:96:e0:df:b6:bc:7d:94:b3:44:a7:41:e8: 6f:ec:a9:4e:60:65:23:15:9d:c1:39:74:2e:5c:4c:48:18:69: 11:aa:f2:f4:d6:4f:1f:9c:c5:74:df:90:23:8a:63:c2:d7:c8: 07:7c:92:76:aa:31:23:1e:f5:54:fa:00:4a:81:75:be:5c:c4: 6f:b0:b0:4c:a4:52:76:97:ce:ff:73:44:13:73:38:17:d6:65: cf:b8:f6:29:0e:48:c1:06:6a:27:16:73:6c:37:81:80:b1:1e: e8:73:b8:fb:49:e3:29:9c:aa:29:d4:a6:19:1d:d3:b6:89:b8: c0:d4:73:00:b2:eb:62:06:3d:a0:f6:ce:bb:ab:95:a8:6b:4d: 6b:f3:59:8c:aa:02:ae:9c:09:38:e0:74:d5:b7:ff:ed:6c:f4: f6:bc:1a:72:d0:9c:8f:af:43:d7:e5:f5:3f:cf:3c:30:bb:d9: 8d:34:5c:3c:4d:c4:9d:83:ad:8c:65:48:61:59:36:b3:b0:a5: ee:9e:8a:a1:dc:b5:23:b9:14:f5:c6:9f:c8:1e:d5:98:1d:44: 8f:6e:4f:a1 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUZ+kBqTmVnJFkVwwnWwxwRxjyQ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTA3MDMxOTA4MjVaFw0yNjA3MDIxOTEzMjVaMDMxMTAvBgNV BAMTKDVBM0Y3ODE5MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC245tNg/ahI8G9T8wrgUxjDdUS ISmeAj7ecuA8fpq6sCZD1KcZu9r5bpYjgoODM6kdxdNvtKjAr1zwW/nXZX9FibvR QAtGSPvsfFlRESl138SwaPjckQ5oPeBXLknVXHRWbz0B8Oe4VpIrFRWOcx5Vew7X HN5HLdHuHHQgVV5t+pH+pxgIONG4loOlYXb2hGhZJbSgRuIr/brIZLAhrFU7Yt1r 0R29e4T+Fwja8W6EeCu8gZ/NbziZyXlvjpJHbTUoyrtjnNgvgc3vANrr1KKVudi8 Wuco+79CKb2TJVxXTt6Tyu0LGRvHG+pqunHI7crCuSkideIOFEE/eucfWotLAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaP3gZNTzg/RO4 /83LiDftC/WRXzAfBgNVHSMEGDAWgBQG22mdGR1LAomRDIjpnPlKZxFC9TAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5MTBDODhF OTlDRjk0QTY3MTE0MkY1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzUv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv NS81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RDQjg4MzdFRDBCRjU5MTVGLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp9BATANBgkqhkiG9w0BAQsFAAOCAQEAVaoG sb1cikBBt3GVW18be2m+XHn7fliy/v96r8fIH+bfUSXOBOCO0xmHluDftrx9lLNE p0Hob+ypTmBlIxWdwTl0LlxMSBhpEary9NZPH5zFdN+QI4pjwtfIB3ySdqoxIx71 VPoASoF1vlzEb7CwTKRSdpfO/3NEE3M4F9Zlz7j2KQ5IwQZqJxZzbDeBgLEe6HO4 +0njKZyqKdSmGR3Ttom4wNRzALLrYgY9oPbOu6uVqGtNa/NZjKoCrpwJOOB01bf/ 7Wz09rwactCcj69D1+X1P888MLvZjTRcPE3EnYOtjGVIYVk2s7Cl7p6Kody1I7kU 9cafyB7VmB1Ej25PoQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:39 2025 by rpki-client