$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer File: E19302BE91C9D4211CDF4AFF091055A173B3593B.cer (raw, json) Hash identifier: uILTHAAHWvIkZgnoclcBUKepZe7s8IaQ+sl3DZ79FDw= Subject key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 0A77CC3A58AB378CB73EC9FF35383D08445A6B73 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 07 Jun 2026 03:40:21 +0000 Certificate not after: Sun 06 Jun 2027 03:45:21 +0000 Subordinate resources: IP: 2a07:54c1:4200::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:77:cc:3a:58:ab:37:8c:b7:3e:c9:ff:35:38:3d:08:44:5a:6b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 7 03:40:21 2026 GMT Not After : Jun 6 03:45:21 2027 GMT Subject: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:19:f2:7a:2f:3a:b6:dd:9d:95:44:b0:7b: 52:5e:b0:29:98:bb:c1:d9:bb:cd:2f:07:89:65:df: e7:02:36:f1:8b:f7:89:56:e0:19:f8:36:42:ab:04: 98:e8:d9:2e:08:0d:96:e5:23:00:7c:7e:60:82:db: 0f:a7:c4:6d:8d:57:fc:a8:c4:5f:63:ad:ce:24:40: b5:b7:95:77:ec:3f:38:ca:a2:d1:d3:a1:86:a9:d6: 4d:63:c2:23:c6:49:64:8b:f0:68:c4:32:d3:96:a8: 14:cc:ba:8b:9d:51:8f:38:32:cf:59:e6:70:65:82: 59:06:2f:c0:eb:79:e0:c1:8b:1e:6c:eb:2d:d2:3d: e9:66:b6:61:c0:81:ed:eb:4f:2d:5d:04:e0:3c:62: 01:33:c1:89:a7:5e:a0:bd:b4:cd:6b:f8:81:56:87: 16:0b:29:ac:5b:94:7e:da:fa:73:7c:7a:f6:b3:54: 3f:1f:63:a2:77:7c:fd:84:bd:2a:bc:d4:69:28:66: 7f:21:c2:20:f8:ba:06:5b:ac:6f:9c:a9:2b:cd:35: d4:e5:fe:51:10:29:6b:b4:85:42:d8:1f:7c:aa:55: 47:75:b3:ce:77:a0:9d:c5:5f:cf:1d:a6:7e:65:ea: 05:e8:60:19:97:76:5b:c2:43:d8:be:67:31:c6:42: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4200::/40 Signature Algorithm: sha256WithRSAEncryption 2c:92:81:0a:59:79:f2:94:91:b2:87:2c:f1:c0:82:e4:65:0d: cf:23:52:83:15:e3:38:fc:81:a3:1a:e6:76:98:61:74:eb:e0: d9:a1:10:bf:12:c1:cb:32:c6:ae:22:a4:68:07:bc:5e:1d:17: 4b:34:d9:7c:ad:16:20:24:bc:ca:35:d5:b9:9f:d9:8f:4c:fd: 2d:17:51:85:a4:79:4c:27:e5:d8:62:35:da:8f:c3:b8:12:47: 94:de:6c:0d:b9:e1:97:b8:84:da:41:af:0b:07:9a:64:f9:cc: d2:be:57:91:d0:dd:f4:be:81:dd:18:12:10:52:ea:69:d0:82: a0:b9:bf:22:e9:a5:32:b7:e5:74:92:97:98:64:5e:49:64:8d: 33:06:9d:ac:84:1d:18:c2:a2:99:a3:7a:10:0f:60:a1:2b:5e: f3:05:4e:95:2f:75:e8:df:8f:d0:25:51:63:03:e2:7b:28:ec: fd:97:40:3b:4e:7e:29:bf:ed:b7:e5:0f:a6:da:c7:46:a0:d9: de:5e:90:99:06:6a:1f:c8:45:64:14:75:f7:d0:43:3e:65:03: 27:f8:1a:c5:0f:e8:f7:dd:54:7d:92:ab:b2:b9:87:fc:3d:bf: fb:e7:68:ce:f5:f9:63:55:68:24:51:6e:6f:29:01:7a:70:c2: e1:7d:fd:1c -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgIUCnfMOlirN4y3Psn/NTg9CERaa3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDcwMzQwMjFaFw0yNzA2MDYwMzQ1MjFaMDMxMTAvBgNV BAMTKEUxOTMwMkJFOTFDOUQ0MjExQ0RGNEFGRjA5MTA1NUExNzNCMzU5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZxnyei86tt2dlUSwe1JesCmY u8HZu80vB4ll3+cCNvGL94lW4Bn4NkKrBJjo2S4IDZblIwB8fmCC2w+nxG2NV/yo xF9jrc4kQLW3lXfsPzjKotHToYap1k1jwiPGSWSL8GjEMtOWqBTMuoudUY84Ms9Z 5nBlglkGL8DreeDBix5s6y3SPelmtmHAge3rTy1dBOA8YgEzwYmnXqC9tM1r+IFW hxYLKaxblH7a+nN8evazVD8fY6J3fP2EvSq81GkoZn8hwiD4ugZbrG+cqSvNNdTl /lEQKWu0hULYH3yqVUd1s853oJ3FX88dpn5l6gXoYBmXdlvCQ9i+ZzHGQpjVAgMB AAGjggMWMIIDEjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThkwK+kcnUIRzf Sv8JEFWhc7NZOzAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCAUIGCCsGAQUFBwELBIIBNDCCATAw YAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzEw LzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl OC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1m dDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9u b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TBQjANBgkqhkiG9w0BAQsFAAOCAQEA LJKBCll58pSRsocs8cCC5GUNzyNSgxXjOPyBoxrmdphhdOvg2aEQvxLByzLGriKk aAe8Xh0XSzTZfK0WICS8yjXVuZ/Zj0z9LRdRhaR5TCfl2GI12o/DuBJHlN5sDbnh l7iE2kGvCweaZPnM0r5XkdDd9L6B3RgSEFLqadCCoLm/IumlMrfldJKXmGReSWSN MwadrIQdGMKimaN6EA9goSte8wVOlS916N+P0CVRYwPieyjs/ZdAO05+Kb/tt+UP ptrHRqDZ3l6QmQZqH8hFZBR199BDPmUDJ/gaxQ/o991UfZKrsrmH/D2/++dozvX5 Y1VoJFFubykBenDC4X39HA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:46:35 2026 by rpki-client