$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer File: C284E54726A876081FA2857EF4AF5B1A78D096B4.cer (raw, json) Hash identifier: WdElHPS0iYHd62z4x1lOD26HHerDNwLQZbuLZzQw07o= Subject key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5C54E685F5A1E84884121031C6BBD1BE299C7075 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 08:13:36 +0000 Certificate not after: Fri 03 Jul 2026 08:18:36 +0000 Subordinate resources: IP: 2a07:54c0::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:54:e6:85:f5:a1:e8:48:84:12:10:31:c6:bb:d1:be:29:9c:70:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 08:13:36 2025 GMT Not After : Jul 3 08:18:36 2026 GMT Subject: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:77:2c:2c:68:af:25:61:3b:4b:d5:b0:95: e4:55:6b:63:fd:23:48:0f:82:af:8c:5a:69:c3:26: 75:51:3e:b4:c2:b2:95:08:1d:8c:fa:40:18:f1:ac: 53:dc:96:6a:09:ac:50:08:10:bf:29:6a:f2:c1:7c: 7b:93:c5:bc:d7:c5:64:1d:9b:e5:77:dc:b1:92:85: c7:4b:01:d7:43:5b:92:62:b0:04:f8:7b:9d:71:30: 14:3c:db:57:5d:7d:87:96:d9:d0:ed:81:8e:92:af: e9:6b:c9:8e:aa:69:ef:66:7c:0f:cc:8b:ca:11:67: ef:7e:3c:07:0e:15:9c:28:d4:9a:66:89:f2:ea:29: 21:17:46:ca:f3:f7:d0:11:cf:0d:15:96:97:9f:97: 4b:15:8e:71:2c:e6:02:ee:e9:c9:cc:f9:09:4f:86: ce:26:89:10:c7:01:b1:de:0d:22:81:45:7b:a2:32: af:78:6f:4a:1e:e7:ce:25:b2:c3:17:9b:85:b1:7e: 9e:d7:ec:17:c3:d2:0b:53:bc:bd:61:0d:28:55:83: e0:2e:95:2b:77:fe:dd:91:50:85:fa:3a:b3:8b:5c: 47:85:d7:23:d5:70:3c:a4:6a:b5:30:f4:75:f5:75: 39:46:33:18:89:e6:5b:98:f2:1d:d1:50:02:1e:8c: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:2c:c8:87:15:bf:1d:6e:2f:ef:66:79:ed:f0:e6:96:13:4d: 3a:46:4a:fc:92:70:49:22:b6:9f:4e:da:1e:99:9b:08:72:2e: 39:15:72:59:cb:96:92:7b:f2:b4:ad:e0:0f:b6:fe:1d:c6:bc: 66:43:d7:71:52:9e:23:7a:9f:e2:2d:bc:9e:65:b8:82:7f:ff: 10:8e:57:93:30:32:ff:a0:78:24:24:42:40:eb:47:b9:5e:57: 84:14:de:f8:c7:42:d2:91:31:9f:ae:7b:ae:2e:63:9a:12:47: f1:54:47:b5:25:f6:22:09:1c:f0:83:f5:a8:d1:ec:5a:69:bf: ab:fe:8b:cb:37:9e:1b:ab:b9:d4:3f:3e:01:72:91:e4:dd:4a: 26:ec:37:ab:0b:ba:5d:0a:bc:e7:21:13:bc:63:8a:95:fa:af: f1:8f:91:71:58:33:43:1a:b2:3b:2b:d1:93:75:ec:2f:b7:b8: 1b:c8:20:81:8f:ae:4d:2c:07:5a:7d:cf:81:cb:1e:82:8a:1f: 67:1a:83:f9:c5:00:9d:94:e3:9b:34:35:69:6b:c4:09:25:85: 05:69:88:37:59:49:2f:4a:d5:da:3c:05:1d:3d:0e:ce:73:66: 76:eb:97:73:cb:43:d1:ff:eb:12:82:73:67:98:d8:c3:9d:fb: 3f:27:e9:be -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUXFTmhfWh6EiEEhAxxrvRvimccHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwODEzMzZaFw0yNjA3MDMwODE4MzZaMDMxMTAvBgNV BAMTKEMyODRFNTQ3MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCncsLGivJWE7S9WwleRVa2P9 I0gPgq+MWmnDJnVRPrTCspUIHYz6QBjxrFPclmoJrFAIEL8pavLBfHuTxbzXxWQd m+V33LGShcdLAddDW5JisAT4e51xMBQ821ddfYeW2dDtgY6Sr+lryY6qae9mfA/M i8oRZ+9+PAcOFZwo1JpmifLqKSEXRsrz99ARzw0Vlpefl0sVjnEs5gLu6cnM+QlP hs4miRDHAbHeDSKBRXuiMq94b0oe584lssMXm4Wxfp7X7BfD0gtTvL1hDShVg+Au lSt3/t2RUIX6OrOLXEeF1yPVcDykarUw9HX1dTlGMxiJ5luY8h3RUAIejBGVAgMB AAGjggMSMIIDDjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTChOVHJqh2CB+i hX70r1saeNCWtDAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzUv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2Qv NS9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VGNEFGNUIxQTc4RDA5NkI0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAqB1TAMA0GCSqGSIb3DQEBCwUAA4IBAQCaLMiH Fb8dbi/vZnnt8OaWE006Rkr8knBJIrafTtoemZsIci45FXJZy5aSe/K0reAPtv4d xrxmQ9dxUp4jep/iLbyeZbiCf/8QjleTMDL/oHgkJEJA60e5XleEFN74x0LSkTGf rnuuLmOaEkfxVEe1JfYiCRzwg/Wo0exaab+r/ovLN54bq7nUPz4BcpHk3Uom7Der C7pdCrznIRO8Y4qV+q/xj5FxWDNDGrI7K9GTdewvt7gbyCCBj65NLAdafc+Byx6C ih9nGoP5xQCdlOObNDVpa8QJJYUFaYg3WUkvStXaPAUdPQ7Oc2Z265dzy0PR/+sS gnNnmNjDnfs/J+m+ -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:12 2025 by rpki-client