$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer File: 6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer (raw, json) Hash identifier: cSyeur9x53P0nPJdYATZblW/a9RWp2McJbSwk80hmDw= Subject key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 15B41AF7A8898229BEE99A543E786ED12E48B342 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 18:40:57 +0000 Certificate not after: Tue 10 Feb 2026 18:45:57 +0000 Subordinate resources: IP: 2a0a:6044:a800::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 00:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b4:1a:f7:a8:89:82:29:be:e9:9a:54:3e:78:6e:d1:2e:48:b3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 11 18:40:57 2025 GMT Not After : Feb 10 18:45:57 2026 GMT Subject: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:df:f1:b6:b7:ea:2b:fd:38:26:6b:20:0c: 53:b4:10:4d:3a:be:3c:b5:d5:fa:db:21:6f:e4:db: db:a8:40:7f:a3:8c:bf:d8:cd:00:83:da:f5:f0:da: 7c:09:16:79:7d:ac:ce:55:f0:00:5e:7d:62:eb:88: 0f:9e:46:e2:9e:fa:65:10:1a:9c:a8:cc:aa:be:11: 39:49:27:3e:3b:16:f4:0e:a0:f0:c0:e1:1e:71:40: 29:75:0f:d8:34:d9:ba:04:de:8b:4a:49:66:60:5d: d7:b6:3f:42:6c:75:fb:cb:98:91:1b:3d:83:26:44: fc:ef:a0:56:81:ba:f2:ea:07:1c:f9:38:36:f9:68: 63:a0:e5:27:0c:4d:95:89:fb:26:2e:95:e1:d5:bd: 6e:d4:d5:a9:c2:ee:00:7b:b5:d4:bc:d1:dd:2e:32: 43:a9:62:26:4b:ab:ef:81:ea:a8:be:fb:07:36:fc: 0f:22:c6:40:35:f8:26:d7:b5:2b:f5:96:49:f2:95: 41:5b:f1:34:8c:a5:c0:7a:f8:80:4c:37:41:91:32: f1:48:9f:35:26:46:a3:86:8a:9b:51:24:e2:58:3a: 3e:f5:db:4d:d1:ef:f5:10:81:36:d9:5b:f1:99:55: f6:b3:75:68:de:de:54:94:1d:fe:c7:dc:42:17:6b: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/40 Signature Algorithm: sha256WithRSAEncryption 07:cc:ed:45:45:b5:0a:b8:d6:e0:39:e9:d5:2b:c5:e3:66:41: 74:71:e9:40:e8:1d:21:a7:54:98:2c:4d:ff:c8:6a:df:7c:1a: b5:c3:50:bf:67:ac:40:bd:5a:4c:84:3e:d3:84:3e:ef:0b:f3: e1:6a:b5:ea:36:96:4c:08:2b:08:82:0f:5a:de:a7:a1:d6:45: 24:b3:07:3d:4c:28:18:35:33:55:64:f1:a9:a0:5a:f9:db:ba: eb:9d:a4:d7:25:fd:b3:f1:26:b7:17:2b:2a:33:4e:13:3b:7a: cc:33:bc:9f:79:89:dc:b7:05:3d:bf:18:1a:b5:ae:0d:2b:09: 0c:c6:72:1e:2d:87:22:fc:28:ba:62:7c:c5:a7:43:30:cd:b4: 30:e1:57:64:71:0a:cf:4d:96:23:d1:84:a1:84:5e:95:d4:f3: 1e:93:4b:3e:7a:b8:a8:c0:c1:63:aa:2b:59:ef:d4:83:3d:e1: d9:fe:2e:8c:eb:d6:47:30:0f:65:28:fe:a5:c9:14:ab:ba:e1: 22:a6:9b:60:48:98:a0:88:87:2b:62:9d:c5:b5:e8:89:a2:fb: 78:a5:92:d0:16:5d:4d:78:b6:1d:5b:e3:ce:35:53:9c:49:0a: 2d:29:e2:3f:be:5e:33:c3:4d:23:63:7c:83:d1:1c:b7:3d:02: aa:a6:79:ba -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUFbQa96iJgim+6ZpUPnhu0S5Is0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTExODQwNTdaFw0yNjAyMTAxODQ1NTdaMDMxMTAvBgNV BAMTKDZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0Mzg5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ON/xtrfqK/04JmsgDFO0EE06 vjy11frbIW/k29uoQH+jjL/YzQCD2vXw2nwJFnl9rM5V8ABefWLriA+eRuKe+mUQ GpyozKq+ETlJJz47FvQOoPDA4R5xQCl1D9g02boE3otKSWZgXde2P0JsdfvLmJEb PYMmRPzvoFaBuvLqBxz5ODb5aGOg5ScMTZWJ+yYuleHVvW7U1anC7gB7tdS80d0u MkOpYiZLq++B6qi++wc2/A8ixkA1+CbXtSv1lknylUFb8TSMpcB6+IBMN0GRMvFI nzUmRqOGiptRJOJYOj71203R7/UQgTbZW/GZVfazdWje3lSUHf7H3EIXa4v7AgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrfWbCMUHnebX0 m9sw2ZoV/EOJGzAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNkNTgzNmZmMWIyOS8zLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFk ZjkyZWU0ZDg0MDE5NDNkNTgzNmZmMWIyOS8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0 OUJEQjMwRDk5QTE1RkM0Mzg5MUIubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoKYESoMA0G CSqGSIb3DQEBCwUAA4IBAQAHzO1FRbUKuNbgOenVK8XjZkF0celA6B0hp1SYLE3/ yGrffBq1w1C/Z6xAvVpMhD7ThD7vC/PharXqNpZMCCsIgg9a3qeh1kUkswc9TCgY NTNVZPGpoFr527rrnaTXJf2z8Sa3FysqM04TO3rMM7yfeYnctwU9vxgata4NKwkM xnIeLYci/Ci6YnzFp0MwzbQw4VdkcQrPTZYj0YShhF6V1PMek0s+eriowMFjqitZ 79SDPeHZ/i6M69ZHMA9lKP6lyRSruuEipptgSJigiIcrYp3FteiJovt4pZLQFl1N eLYdW+PONVOcSQotKeI/vl4zw00jY3yD0Ry3PQKqpnm6 -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:53 2025 by rpki-client