$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer File: EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer (raw, json) Hash identifier: ZHFpGA9BIfwhj8a8DBWaTUj/DHt54o0M6M1v4RLiVU0= Subject key identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 223D63D89540213A6A9FB8707ED06ABA323E77C8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 06 Jun 2026 23:46:23 +0000 Certificate not after: Sat 05 Jun 2027 23:51:23 +0000 Subordinate resources: IP: 2a07:54c1:d000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3d:63:d8:95:40:21:3a:6a:9f:b8:70:7e:d0:6a:ba:32:3e:77:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 6 23:46:23 2026 GMT Not After : Jun 5 23:51:23 2027 GMT Subject: CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:97:2e:8c:23:fb:4f:ec:b4:e8:07:4a:1a: c4:43:1c:4e:23:b3:83:09:f4:c1:8c:94:78:9e:ef: a1:a2:53:f8:0f:7e:cc:85:9f:1d:0f:a4:75:78:71: 35:4a:c6:c8:db:f8:1b:cf:76:c7:88:a3:83:f8:36: aa:0a:f9:b7:06:e9:84:ea:d8:6f:f2:4c:13:0a:95: e3:61:c6:7c:24:23:de:1b:e6:bf:83:98:48:5e:f0: 6f:46:4f:d7:11:a4:69:a8:fd:a6:96:48:c9:12:fe: 3a:54:1a:af:f6:3e:b4:fa:43:34:f7:59:f4:f3:26: 70:22:ee:48:21:0d:63:da:6b:63:61:c6:8c:9c:f2: 70:31:32:dd:7b:3a:24:4a:71:d3:0f:79:84:80:b0: 0d:37:c5:80:42:e3:be:f5:b6:dd:46:ec:20:be:e7: 50:de:da:4e:f9:91:0e:a5:86:08:f4:dd:18:55:12: 50:2f:14:3a:41:8c:d0:e2:e3:d3:52:7a:92:c8:b8: 64:2e:57:a7:b3:44:5a:4c:55:50:e7:08:30:de:f7: 04:86:bd:4e:51:4e:7a:4b:95:b6:81:e6:1f:7c:95: 68:d5:39:ee:55:22:19:43:5a:57:be:2c:e8:f9:b9: e0:d6:a9:b0:f4:28:40:b2:9e:01:a7:7f:4a:f8:ed: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:d000::/36 Signature Algorithm: sha256WithRSAEncryption 99:bd:0f:be:f8:75:fb:00:9b:ac:ff:53:71:4a:7e:f2:22:77: ac:5f:88:0e:47:06:2a:44:68:71:3e:39:9f:8f:59:83:e7:80: 92:45:97:8f:00:03:e6:1f:a5:da:f5:2a:6f:23:4a:e1:1d:6f: ed:0d:64:3a:77:d2:d7:9b:47:7b:b5:1f:97:bd:55:4d:b1:7d: 0b:9e:12:57:5f:cf:c8:af:59:9b:cb:f1:e5:f7:1f:07:ac:77: 01:34:20:94:bd:78:82:40:4f:c2:79:57:0a:c4:68:68:6d:6f: 19:3d:be:16:d1:20:cf:24:1d:ec:ec:3f:5f:38:32:25:46:af: 94:41:63:3d:e5:a9:40:13:50:1d:7b:25:7d:bd:9c:64:15:eb: 64:25:7b:c0:a9:c5:0f:a8:70:11:fd:da:9e:ce:a9:cc:c6:c9: 8f:9d:ed:d8:61:33:56:31:56:59:e1:29:a6:76:a8:1d:d2:57: d8:07:eb:ec:1f:15:e9:62:c2:41:0c:49:b4:c1:4d:b3:48:79: ac:a1:f5:5a:a4:1b:88:df:22:c3:e2:1e:78:ca:c8:71:8d:ee: 39:91:70:e9:4c:ef:c1:85:8d:1a:d4:1f:0c:3a:5c:1d:f4:e2: b3:ab:72:73:af:33:35:f5:e6:5c:10:56:d7:b1:3b:ef:55:bd: 13:72:ea:f4 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUIj1j2JVAITpqn7hwftBqujI+d8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDYyMzQ2MjNaFw0yNzA2MDUyMzUxMjNaMDMxMTAvBgNV BAMTKEVERUE0OTFFMzY2OTUyQkIzNUUxNEM1N0IyQzdEQzYwNEMyOTA4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UpcujCP7T+y06AdKGsRDHE4j s4MJ9MGMlHie76GiU/gPfsyFnx0PpHV4cTVKxsjb+BvPdseIo4P4NqoK+bcG6YTq 2G/yTBMKleNhxnwkI94b5r+DmEhe8G9GT9cRpGmo/aaWSMkS/jpUGq/2PrT6QzT3 WfTzJnAi7kghDWPaa2Nhxoyc8nAxMt17OiRKcdMPeYSAsA03xYBC4771tt1G7CC+ 51De2k75kQ6lhgj03RhVElAvFDpBjNDi49NSepLIuGQuV6ezRFpMVVDnCDDe9wSG vU5RTnpLlbaB5h98lWjVOe5VIhlDWle+LOj5ueDWqbD0KECyngGnf0r47fAxAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTt6kkeNmlSuzXh TFeyx9xgTCkIwTAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZTkxZmI0M2I0MDE5MmJhY2I3YWJiN2EyOC80LzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk ZTkxZmI0M2I0MDE5MmJhY2I3YWJiN2EyOC80L0VERUE0OTFFMzY2OTUyQkIzNUUx NEM1N0IyQzdEQzYwNEMyOTA4QzEubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoHVMHQMA0G CSqGSIb3DQEBCwUAA4IBAQCZvQ+++HX7AJus/1NxSn7yInesX4gORwYqRGhxPjmf j1mD54CSRZePAAPmH6Xa9SpvI0rhHW/tDWQ6d9LXm0d7tR+XvVVNsX0LnhJXX8/I r1mby/Hl9x8HrHcBNCCUvXiCQE/CeVcKxGhobW8ZPb4W0SDPJB3s7D9fODIlRq+U QWM95alAE1AdeyV9vZxkFetkJXvAqcUPqHAR/dqezqnMxsmPne3YYTNWMVZZ4Smm dqgd0lfYB+vsHxXpYsJBDEm0wU2zSHmsofVapBuI3yLD4h54yshxje45kXDpTO/B hY0a1B8MOlwd9OKzq3JzrzM19eZcEFbXsTvvVb0Tcur0 -----END CERTIFICATE-----Generated at Sat Jun 13 13:18:58 2026 by rpki-client