$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer File: 78739F607E14E11BD03439F7A388E78EDD031A1B.cer (raw, json) Hash identifier: mx+Rg5zFdPJxJhFIEQPxfo0iZ8UyVKZ6cZeNrbqPNMw= Subject key identifier: 78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 036A9ECC58F7E144370D9B6CE23C4BF4538E0F28 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft caRepository: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 11 Apr 2025 18:58:58 +0000 Certificate not after: Fri 10 Apr 2026 19:03:58 +0000 Subordinate resources: IP: 2a06:1281:9000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 19:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6a:9e:cc:58:f7:e1:44:37:0d:9b:6c:e2:3c:4b:f4:53:8e:0f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 11 18:58:58 2025 GMT Not After : Apr 10 19:03:58 2026 GMT Subject: CN=78739F607E14E11BD03439F7A388E78EDD031A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:fc:b6:94:a7:b2:be:a7:7d:22:06:7c:2a: 48:af:ad:c6:ad:7a:88:01:f0:60:70:c1:de:c0:63: 0f:d5:ea:cf:63:2e:90:04:f2:d4:12:07:ff:f3:15: 29:a2:2a:c7:f1:38:83:0d:2a:c4:14:ec:e3:e2:ad: 42:e4:55:d6:50:9b:33:b0:b3:7c:05:ba:34:f3:23: fa:7f:0b:d8:c8:bd:12:48:83:a4:d8:d0:aa:c2:f7: c6:a5:d6:bf:47:97:37:1a:4b:c8:aa:b6:60:24:74: ef:6e:c3:80:a3:16:0d:f9:b7:75:8e:c0:01:55:18: 31:de:33:73:6c:25:8a:e5:88:a1:3d:50:9c:d2:c1: 6e:e2:76:71:d7:72:e0:fc:cc:96:9e:89:97:7f:c4: 06:14:8d:f0:48:45:8c:f5:fd:bf:a8:b3:6c:a6:de: b7:d2:14:65:48:9e:4a:a6:dc:f3:2c:67:17:25:73: e8:2e:ac:06:5c:8f:41:39:92:4d:7b:69:64:35:08: 74:2e:46:ab:f9:16:d1:64:a7:af:09:32:b3:cb:46: 7e:a6:4a:80:45:91:38:90:18:8c:4e:5d:41:45:c9: 4d:03:80:70:59:85:90:63:ba:8f:03:68:de:84:45: 9f:cc:ea:d2:61:af:95:68:a2:95:0b:19:9a:a2:4a: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:9000::/36 Signature Algorithm: sha256WithRSAEncryption 4b:4a:9f:7c:aa:92:a5:63:05:32:5c:59:b5:fd:f2:33:83:f6: f2:ec:06:77:8a:71:16:e7:37:42:79:f6:64:52:79:15:ae:4f: c6:30:2d:4f:f3:b2:87:11:8d:96:3b:87:de:cf:03:7e:28:05: fb:3e:d7:15:8f:03:55:f3:70:29:d9:83:de:b5:b4:7f:29:8b: c2:9c:9d:df:c6:d0:69:2f:e2:b2:c7:69:9c:cb:43:21:72:48: f2:96:66:42:57:f3:91:02:c0:f9:09:1f:f4:26:7a:51:66:d0: 3e:8a:e4:19:5a:15:f1:86:b4:95:3b:40:c1:e5:85:43:ae:69: 3b:83:4f:b4:17:54:3b:50:39:9e:3f:3a:15:2b:4e:99:ad:f1: d9:a8:2f:90:e8:7a:da:05:94:d7:9b:8c:6d:19:52:b5:75:2c: 2d:62:85:76:e7:1f:97:4d:8b:e5:6b:3f:35:3e:40:98:31:e4: 47:fa:3d:77:e3:8e:45:1f:bc:d0:e7:5f:d3:ae:a2:03:94:26: 78:bc:a6:9e:35:cc:2e:81:ff:6d:5c:af:2f:2d:c0:c0:4a:22: 18:4d:68:8d:c2:1d:bc:fa:06:56:30:7b:d4:75:21:97:ab:50: ac:ac:59:e3:bf:f4:8b:00:ae:2b:a8:53:e6:ab:4b:05:d3:5b: f9:58:c4:9c -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUA2qezFj34UQ3DZts4jxL9FOODygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MTExODU4NThaFw0yNjA0MTAxOTAzNThaMDMxMTAvBgNV BAMTKDc4NzM5RjYwN0UxNEUxMUJEMDM0MzlGN0EzODhFNzhFREQwMzFBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQbvy2lKeyvqd9IgZ8Kkivrcat eogB8GBwwd7AYw/V6s9jLpAE8tQSB//zFSmiKsfxOIMNKsQU7OPirULkVdZQmzOw s3wFujTzI/p/C9jIvRJIg6TY0KrC98al1r9HlzcaS8iqtmAkdO9uw4CjFg35t3WO wAFVGDHeM3NsJYrliKE9UJzSwW7idnHXcuD8zJaeiZd/xAYUjfBIRYz1/b+os2ym 3rfSFGVInkqm3PMsZxclc+gurAZcj0E5kk17aWQ1CHQuRqv5FtFkp68JMrPLRn6m SoBFkTiQGIxOXUFFyU0DgHBZhZBjuo8DaN6ERZ/M6tJhr5VoopULGZqiSvUHAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4c59gfhThG9A0 OfejiOeO3QMaGzAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCASMGCCsGAQUFBwELBIIBFTCCAREw VAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4MjBmNS8yLzCBgAYIKwYBBQUH MAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2 NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4MjBmNS8yLzc4NzM5RjYwN0UxNEUxMUJEMDM0 MzlGN0EzODhFNzhFREQwMzFBMUIubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jy ZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoGEoGQMA0G CSqGSIb3DQEBCwUAA4IBAQBLSp98qpKlYwUyXFm1/fIzg/by7AZ3inEW5zdCefZk UnkVrk/GMC1P87KHEY2WO4fezwN+KAX7PtcVjwNV83Ap2YPetbR/KYvCnJ3fxtBp L+Kyx2mcy0MhckjylmZCV/ORAsD5CR/0JnpRZtA+iuQZWhXxhrSVO0DB5YVDrmk7 g0+0F1Q7UDmePzoVK06ZrfHZqC+Q6HraBZTXm4xtGVK1dSwtYoV25x+XTYvlaz81 PkCYMeRH+j13445FH7zQ51/TrqIDlCZ4vKaeNcwugf9tXK8vLcDASiIYTWiNwh28 +gZWMHvUdSGXq1CsrFnjv/SLAK4rqFPmq0sF01v5WMSc -----END CERTIFICATE-----Generated at Wed Apr 30 10:18:56 2025 by rpki-client