$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (raw, json) Hash identifier: zDfWjzGK40zSCpRuFh+A3O83EeUEIjX9jMdsKJlIUSE= Subject key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 21BDDD6C523FFFC67391D1FF0AD5850F66D875C5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 05 Jun 2026 12:24:21 +0000 Certificate not after: Fri 04 Jun 2027 12:29:21 +0000 Subordinate resources: IP: 2a06:9f41:100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bd:dd:6c:52:3f:ff:c6:73:91:d1:ff:0a:d5:85:0f:66:d8:75:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Jun 5 12:24:21 2026 GMT Not After : Jun 4 12:29:21 2027 GMT Subject: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:9b:4d:83:f6:a1:23:c1:bd:4f:cc:2b:81: 4c:63:0d:d5:12:21:29:9e:02:3e:de:72:e0:3c:7e: 9a:ba:b0:26:43:d4:a7:19:bb:da:f9:6e:96:23:82: 83:83:33:a9:1d:c5:d3:6f:b4:a8:c0:af:5c:f0:5b: f9:d7:65:7f:45:89:bb:d1:40:0b:46:48:fb:ec:7c: 59:51:11:29:75:df:c4:b0:68:f8:dc:91:0e:68:3d: e0:57:2e:49:d5:5c:74:56:6f:3d:01:f0:e7:b8:56: 92:2b:15:15:8e:73:1e:55:7b:0e:d7:1c:de:47:2d: d1:ee:1c:74:20:55:5e:6d:fa:91:fe:a7:18:08:38: d1:b8:96:83:a5:61:76:f6:84:68:59:25:b4:a0:46: e2:2b:fd:ba:c8:64:b0:21:ac:55:3b:62:dd:6b:d1: 1d:bd:7b:84:fe:17:08:da:f1:6e:84:78:2b:bc:81: 9f:cd:6f:38:99:c9:79:6f:8e:92:47:6d:35:28:ca: bb:63:9c:d8:2f:81:cd:ef:00:da:eb:d4:a2:95:b9: d8:bc:5a:e7:28:fb:bf:42:29:bd:93:25:5c:57:4e: de:93:ca:ed:0b:19:1b:c7:1b:ea:6a:ba:71:c8:ed: ca:c2:b9:29:22:75:e2:0e:14:41:3f:7a:e7:1f:5a: 8b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:100::/40 Signature Algorithm: sha256WithRSAEncryption 06:96:dc:5d:d0:95:6b:b8:93:83:02:ab:f8:87:bf:e3:6b:91: 45:33:99:d6:11:6e:90:e6:36:da:99:86:c6:63:f7:ec:47:82: 86:9b:38:4d:e9:8b:6b:d8:b5:af:75:84:24:19:02:d0:82:9b: ad:0b:31:c3:0d:99:80:0b:a0:5a:bb:6e:81:e5:92:ef:05:0f: 01:f8:f6:c5:a1:5b:05:dd:16:06:60:9d:65:4a:2b:b7:99:d2: 42:d0:3b:c1:39:13:5a:3a:39:dd:ba:75:f7:7d:a0:3f:7d:94: e0:d3:43:1a:1f:be:c6:b6:c5:75:ab:a6:9b:65:b1:2a:c0:5a: c2:47:b0:07:5f:4b:b0:84:86:7a:39:a0:87:79:d9:72:8e:89: bd:74:09:01:96:4a:93:8a:16:7f:4a:f2:e4:b5:d0:9f:22:3b: 0e:5a:34:24:fc:ce:df:96:ba:d6:1a:20:bb:40:ce:87:89:1f: 59:7f:e2:a4:d1:0a:30:d5:da:4d:61:ac:b1:92:d2:72:7b:14: 67:b2:84:04:f0:12:77:27:a6:93:93:06:9d:99:78:35:7b:2a: 95:aa:0c:d9:86:fb:f3:d4:74:a5:2a:6a:91:ee:68:0e:a1:5b: 40:64:bf:91:88:f8:17:2f:d4:8d:95:70:37:39:39:e4:d8:ba: 3c:4b:3e:13 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUIb3dbFI//8ZzkdH/CtWFD2bYdcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA2MDUxMjI0MjFaFw0yNzA2MDQxMjI5MjFaMDMxMTAvBgNV BAMTKDVBM0Y3ODE5MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC245tNg/ahI8G9T8wrgUxjDdUS ISmeAj7ecuA8fpq6sCZD1KcZu9r5bpYjgoODM6kdxdNvtKjAr1zwW/nXZX9FibvR QAtGSPvsfFlRESl138SwaPjckQ5oPeBXLknVXHRWbz0B8Oe4VpIrFRWOcx5Vew7X HN5HLdHuHHQgVV5t+pH+pxgIONG4loOlYXb2hGhZJbSgRuIr/brIZLAhrFU7Yt1r 0R29e4T+Fwja8W6EeCu8gZ/NbziZyXlvjpJHbTUoyrtjnNgvgc3vANrr1KKVudi8 Wuco+79CKb2TJVxXTt6Tyu0LGRvHG+pqunHI7crCuSkideIOFEE/eucfWotLAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaP3gZNTzg/RO4 /83LiDftC/WRXzAfBgNVHSMEGDAWgBQG22mdGR1LAomRDIjpnPlKZxFC9TAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5MTBDODhF OTlDRjk0QTY3MTE0MkY1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzUv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv NS81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RDQjg4MzdFRDBCRjU5MTVGLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp9BATANBgkqhkiG9w0BAQsFAAOCAQEABpbc XdCVa7iTgwKr+Ie/42uRRTOZ1hFukOY22pmGxmP37EeChps4TemLa9i1r3WEJBkC 0IKbrQsxww2ZgAugWrtugeWS7wUPAfj2xaFbBd0WBmCdZUort5nSQtA7wTkTWjo5 3bp1932gP32U4NNDGh++xrbFdaumm2WxKsBawkewB19LsISGejmgh3nZco6JvXQJ AZZKk4oWf0ry5LXQnyI7Dlo0JPzO35a61hogu0DOh4kfWX/ipNEKMNXaTWGssZLS cnsUZ7KEBPASdyemk5MGnZl4NXsqlaoM2Yb789R0pSpqke5oDqFbQGS/kYj4Fy/U jZVwNzk55Ni6PEs+Ew== -----END CERTIFICATE-----Generated at Sat Jun 13 08:43:17 2026 by rpki-client