$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer (raw, json) Hash identifier: vSnSEfwMUvp+CizU5RdTCbcvGS/57JT1m6bCK0sVjOU= Subject key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 1CAC990FAE7CDA9025F98BB8FA45260C5B375266 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft caRepository: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 09:40:18 +0000 Certificate not after: Tue 02 Nov 2027 09:45:18 +0000 Subordinate resources: IP: 2a07:54c1:c000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ac:99:0f:ae:7c:da:90:25:f9:8b:b8:fa:45:26:0c:5b:37:52:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Nov 3 09:40:18 2026 GMT Not After : Nov 2 09:45:18 2027 GMT Subject: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:dd:2a:c5:2a:ca:07:64:3a:90:38:3f:c1: 74:70:ac:e9:ec:d1:0d:f5:f7:7c:ab:6d:11:14:6e: fc:c7:ff:b4:42:87:a9:8d:c5:51:e2:56:c4:32:06: de:ec:b3:55:c6:5b:65:49:70:e8:88:f1:d3:0a:27: f9:b6:29:86:fc:c9:06:74:ee:6e:8d:17:99:34:73: 7f:3e:d1:48:a3:4e:99:11:5e:1e:41:73:5e:4a:cf: c2:e5:db:ef:eb:e3:45:4c:8f:0c:6b:d4:e4:6f:66: 2c:51:48:80:9c:9c:ff:a6:99:8b:c1:b8:0f:11:31: b2:fd:96:e9:86:8a:02:45:0c:d5:50:ab:1b:fe:69: 92:8a:5a:de:9b:cf:c2:05:04:f9:8d:68:af:9f:0d: 79:70:62:42:3a:4a:f5:1c:0c:9b:d3:fc:a8:2d:29: cd:e9:c2:c7:55:1c:be:85:75:23:e3:7c:be:ca:ed: ce:10:6b:2b:65:cd:13:5a:e6:3e:2c:e2:ec:b4:c4: ac:76:9f:74:26:5d:8f:83:65:16:2a:af:db:46:6f: e0:07:74:1e:f9:34:2e:81:31:00:2f:80:f7:a2:25: ca:3c:e2:59:a4:e8:65:f6:b3:c7:77:82:87:59:b3: a9:97:98:82:56:8a:d4:59:b6:01:30:66:6e:d0:90: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c000::/40 Signature Algorithm: sha256WithRSAEncryption 57:04:ec:e8:fc:d2:a2:a2:21:0d:c3:2d:bf:d3:2e:cf:60:63: 2d:49:7b:4f:4d:f0:fc:4d:ff:c2:b1:57:62:7c:d4:dc:17:99: b8:d3:84:6a:99:02:3c:d4:a9:32:da:93:ff:61:d7:52:89:20: 99:67:a5:fb:37:e2:c1:e8:15:fc:04:d5:bb:2a:49:05:45:ea: da:43:58:7c:f9:fc:9d:b6:ee:e5:c5:24:e2:bd:f7:a8:b9:98: 86:52:11:aa:b9:75:77:5f:36:a2:cb:dc:33:6f:1e:4d:6e:da: eb:b1:a5:65:0d:c7:68:8e:c2:df:5e:d4:6f:53:69:25:72:58: 58:d5:64:cd:67:54:b5:d3:95:92:f7:a4:8f:30:c3:cd:f5:58: 84:3b:52:93:4e:b3:8c:10:30:8f:47:82:b0:53:a6:48:7e:a2: 0c:bf:4f:3a:5f:39:e8:3f:aa:bf:8c:4a:53:c6:02:f0:9d:bf: 72:f9:ec:6e:f4:c5:12:91:7e:a8:14:74:62:fc:8b:dc:6c:3c: d9:23:b9:9c:52:98:e1:ed:50:5a:c1:92:a0:44:31:86:24:59: 06:cd:36:fa:0e:3d:8a:46:ea:f0:fd:83:16:a3:01:05:3f:cb: 3b:2a:f8:1d:f3:e5:b1:03:be:24:1a:40:73:6c:23:12:3f:ae: 45:5a:2f:85 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUHKyZD6582pAl+Yu4+kUmDFs3UmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjExMDMwOTQwMThaFw0yNzExMDIwOTQ1MThaMDMxMTAvBgNV BAMTKEVENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMxRkZBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcd0qxSrKB2Q6kDg/wXRwrOns 0Q3193yrbREUbvzH/7RCh6mNxVHiVsQyBt7ss1XGW2VJcOiI8dMKJ/m2KYb8yQZ0 7m6NF5k0c38+0UijTpkRXh5Bc15Kz8Ll2+/r40VMjwxr1ORvZixRSICcnP+mmYvB uA8RMbL9lumGigJFDNVQqxv+aZKKWt6bz8IFBPmNaK+fDXlwYkI6SvUcDJvT/Kgt Kc3pwsdVHL6FdSPjfL7K7c4QaytlzRNa5j4s4uy0xKx2n3QmXY+DZRYqr9tGb+AH dB75NC6BMQAvgPeiJco84lmk6GX2s8d3godZs6mXmIJWitRZtgEwZm7QkPbLAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtRUuZwrDkcqlU L5CUSevo8x/62TAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS9jZWE1YjM0ODRjMmI0NTBmYjI3NzNiMWI5ODFmNTA4Ny8xLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jZWE1YjM0 ODRjMmI0NTBmYjI3NzNiMWI5ODFmNTA4Ny8xL0VENDU0Qjk5QzJCMEU0NzJBOTU0 MkY5MDk0NDlFQkU4RjMxRkZBRDkubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoHVMHAMA0G CSqGSIb3DQEBCwUAA4IBAQBXBOzo/NKioiENwy2/0y7PYGMtSXtPTfD8Tf/CsVdi fNTcF5m404RqmQI81Kky2pP/YddSiSCZZ6X7N+LB6BX8BNW7KkkFReraQ1h8+fyd tu7lxSTivfeouZiGUhGquXV3Xzaiy9wzbx5NbtrrsaVlDcdojsLfXtRvU2klclhY 1WTNZ1S105WS96SPMMPN9ViEO1KTTrOMEDCPR4KwU6ZIfqIMv086XznoP6q/jEpT xgLwnb9y+exu9MUSkX6oFHRi/IvcbDzZI7mcUpjh7VBawZKgRDGGJFkGzTb6Dj2K Rurw/YMWowEFP8s7Kvgd8+WxA74kGkBzbCMSP65FWi+F -----END CERTIFICATE-----Generated at Thu Nov 5 18:50:37 2026 by rpki-client