$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer File: C284E54726A876081FA2857EF4AF5B1A78D096B4.cer (raw, json) Hash identifier: QiviKz4BW0fjSQ75b3rqjad7YDNfDDAH9aMxwoRxIsI= Subject key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 17B895D0778851084CD4F712445DAA0722BC4322 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 05 Jun 2026 14:59:46 +0000 Certificate not after: Fri 04 Jun 2027 15:04:46 +0000 Subordinate resources: IP: 2a07:54c0::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b8:95:d0:77:88:51:08:4c:d4:f7:12:44:5d:aa:07:22:bc:43:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 14:59:46 2026 GMT Not After : Jun 4 15:04:46 2027 GMT Subject: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:77:2c:2c:68:af:25:61:3b:4b:d5:b0:95: e4:55:6b:63:fd:23:48:0f:82:af:8c:5a:69:c3:26: 75:51:3e:b4:c2:b2:95:08:1d:8c:fa:40:18:f1:ac: 53:dc:96:6a:09:ac:50:08:10:bf:29:6a:f2:c1:7c: 7b:93:c5:bc:d7:c5:64:1d:9b:e5:77:dc:b1:92:85: c7:4b:01:d7:43:5b:92:62:b0:04:f8:7b:9d:71:30: 14:3c:db:57:5d:7d:87:96:d9:d0:ed:81:8e:92:af: e9:6b:c9:8e:aa:69:ef:66:7c:0f:cc:8b:ca:11:67: ef:7e:3c:07:0e:15:9c:28:d4:9a:66:89:f2:ea:29: 21:17:46:ca:f3:f7:d0:11:cf:0d:15:96:97:9f:97: 4b:15:8e:71:2c:e6:02:ee:e9:c9:cc:f9:09:4f:86: ce:26:89:10:c7:01:b1:de:0d:22:81:45:7b:a2:32: af:78:6f:4a:1e:e7:ce:25:b2:c3:17:9b:85:b1:7e: 9e:d7:ec:17:c3:d2:0b:53:bc:bd:61:0d:28:55:83: e0:2e:95:2b:77:fe:dd:91:50:85:fa:3a:b3:8b:5c: 47:85:d7:23:d5:70:3c:a4:6a:b5:30:f4:75:f5:75: 39:46:33:18:89:e6:5b:98:f2:1d:d1:50:02:1e:8c: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0::/32 Signature Algorithm: sha256WithRSAEncryption 99:a4:8e:a5:1b:26:83:14:c2:03:8f:22:40:66:e5:16:a8:3c: af:b3:66:09:99:b2:0a:57:54:c6:e7:2a:2b:3f:d4:16:83:91: 41:41:39:8b:bf:70:13:1f:c4:1d:ad:ea:8a:3f:43:2c:63:eb: 2f:7e:9e:f3:ce:48:09:36:61:a3:27:3c:b3:26:51:78:03:1e: bd:15:19:a7:a1:9e:55:c5:96:fb:60:07:4f:aa:a0:14:4b:ad: ee:5c:f5:d2:1d:b4:95:fd:5d:99:b0:e7:9f:b6:a6:81:17:ec: c3:cb:7c:0b:94:a8:1d:77:c1:19:ff:e5:cf:29:fb:4c:6f:43: 56:91:dc:34:f4:1d:f9:c9:ba:d9:87:50:e3:be:39:ca:85:60: 47:23:f3:99:85:86:3b:c0:a2:9c:ee:80:fe:92:aa:9f:d8:ea: 8c:bf:ea:05:f2:20:72:1e:84:bd:5b:2c:d7:c3:a7:ae:be:4e: ab:5f:3d:96:45:73:0f:fb:62:82:af:c4:f7:59:bb:47:b6:ab: 8b:e5:39:ee:fb:e3:26:f6:9a:1c:20:60:ba:65:0d:5b:f6:4e: d9:6a:e8:06:83:e4:c8:ed:fd:6e:8f:2f:7c:31:dc:3d:c2:64: 94:2d:28:05:3e:8c:7c:76:0c:bc:46:7b:8c:67:41:59:c8:e0: 3b:dd:97:47 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUF7iV0HeIUQhM1PcSRF2qByK8QyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUxNDU5NDZaFw0yNzA2MDQxNTA0NDZaMDMxMTAvBgNV BAMTKEMyODRFNTQ3MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCncsLGivJWE7S9WwleRVa2P9 I0gPgq+MWmnDJnVRPrTCspUIHYz6QBjxrFPclmoJrFAIEL8pavLBfHuTxbzXxWQd m+V33LGShcdLAddDW5JisAT4e51xMBQ821ddfYeW2dDtgY6Sr+lryY6qae9mfA/M i8oRZ+9+PAcOFZwo1JpmifLqKSEXRsrz99ARzw0Vlpefl0sVjnEs5gLu6cnM+QlP hs4miRDHAbHeDSKBRXuiMq94b0oe584lssMXm4Wxfp7X7BfD0gtTvL1hDShVg+Au lSt3/t2RUIX6OrOLXEeF1yPVcDykarUw9HX1dTlGMxiJ5luY8h3RUAIejBGVAgMB AAGjggMSMIIDDjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTChOVHJqh2CB+i hX70r1saeNCWtDAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzUv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2Qv NS9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VGNEFGNUIxQTc4RDA5NkI0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAqB1TAMA0GCSqGSIb3DQEBCwUAA4IBAQCZpI6l GyaDFMIDjyJAZuUWqDyvs2YJmbIKV1TG5yorP9QWg5FBQTmLv3ATH8QdreqKP0Ms Y+svfp7zzkgJNmGjJzyzJlF4Ax69FRmnoZ5VxZb7YAdPqqAUS63uXPXSHbSV/V2Z sOeftqaBF+zDy3wLlKgdd8EZ/+XPKftMb0NWkdw09B35ybrZh1DjvjnKhWBHI/OZ hYY7wKKc7oD+kqqf2OqMv+oF8iByHoS9WyzXw6euvk6rXz2WRXMP+2KCr8T3WbtH tquL5Tnu++Mm9pocIGC6ZQ1b9k7ZaugGg+TI7f1ujy98Mdw9wmSULSgFPox8dgy8 RnuMZ0FZyOA73ZdH -----END CERTIFICATE-----Generated at Sat Jun 13 18:11:52 2026 by rpki-client