Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
File:                     7D425251D51803E61C820ADEF2945E50184448D0.cer (raw, json)
Hash identifier:          BKSVRmZQ9VhkL8HxsksvYM/hgWE5dSfi6/B/+XS4HUI=
Subject key identifier:   7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       22224B3FBC24EF6308787A21557E95FEE3C9D569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
caRepository:             rsync://rpki.avsisp.com/repo/AVSISP/4/
Notify URL:               https://rpki.avsisp.com/rrdp/notification.xml
Certificate not before:   Fri 31 Oct 2025 12:46:44 +0000
Certificate not after:    Fri 30 Oct 2026 12:51:44 +0000
Subordinate resources:    IP: 85.155.228.0/24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:22:4b:3f:bc:24:ef:63:08:78:7a:21:55:7e:95:fe:e3:c9:d5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Oct 31 12:46:44 2025 GMT
            Not After : Oct 30 12:51:44 2026 GMT
        Subject: CN=7D425251D51803E61C820ADEF2945E50184448D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:68:46:fb:62:b0:d5:00:31:72:44:c1:e7:
                    5b:1b:04:57:ae:c7:0f:6f:49:3d:cb:2d:9c:52:2c:
                    15:10:2a:fc:06:9d:05:f0:e7:71:c2:5d:e8:06:13:
                    62:7f:00:2e:a1:9d:b4:c8:82:cc:fc:a1:b9:f3:21:
                    19:1d:2c:99:13:f7:bd:6a:16:bb:c5:64:19:db:f8:
                    05:20:18:de:66:5b:12:51:e6:47:94:f5:12:87:1d:
                    8f:34:1c:0b:57:47:8e:5d:a6:62:c1:c4:1e:bb:3b:
                    d5:6d:53:0a:30:f8:eb:30:24:b8:7a:5a:bd:18:31:
                    7f:be:6b:4d:08:20:e5:f1:b3:83:76:dc:d7:85:bf:
                    e2:f2:f5:96:93:02:54:61:a3:57:e6:79:e4:1b:88:
                    17:4f:0c:b2:7f:c6:8b:61:0c:95:69:86:b6:77:2f:
                    bf:4c:6a:ce:ed:4c:ed:70:ca:c6:9a:b2:84:22:eb:
                    dc:74:cf:c4:14:05:a5:4c:b8:05:9a:73:fb:6e:b2:
                    83:09:90:cd:c6:a8:90:b3:78:95:17:bf:3a:17:23:
                    ba:44:49:ea:df:0f:7a:c8:e3:4b:1b:09:5d:57:e6:
                    90:ac:cc:60:45:94:3c:63:1b:3a:2a:7c:ef:2c:50:
                    7e:e8:9c:ab:3e:eb:ec:4a:cb:f3:d9:73:dd:c1:c9:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.avsisp.com/repo/AVSISP/4/
                RPKI Manifest - URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
                RPKI Notify - URI:https://rpki.avsisp.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:9a:2d:92:f4:77:96:11:4b:35:ed:9b:c7:2a:1b:7f:86:
         ad:74:8c:5f:41:08:64:61:10:e6:22:ac:03:d2:05:f8:a1:f1:
         c4:27:8a:1b:15:90:5c:07:a0:5e:de:1c:10:3c:7e:a6:05:c9:
         0d:43:51:21:a4:0e:16:c8:0e:42:92:fb:0f:0f:42:9c:32:71:
         01:b9:eb:3b:6c:b6:9e:60:4e:1f:09:97:61:19:11:67:8f:7e:
         7e:6c:9c:0b:6b:52:ad:60:f5:9f:ff:57:f1:71:1b:f5:4b:f0:
         22:48:4d:4f:9f:64:f2:a0:03:0c:48:43:f2:59:0c:cc:d5:13:
         44:75:f1:59:3b:62:ee:51:a6:48:74:85:13:5f:f0:8a:5c:4b:
         b1:7e:7e:53:d7:cf:02:c1:d2:85:e1:38:0e:17:3a:5c:fc:c0:
         4a:77:11:d6:df:5c:bc:0a:d1:01:2c:0d:e9:83:1b:cb:65:7d:
         cc:3f:ad:df:1c:0b:19:dc:a0:f2:4e:b8:67:f3:e3:1d:3d:e6:
         39:a6:db:7b:ac:cc:0b:29:b7:1c:b5:38:4b:f6:64:12:e1:f3:
         39:22:c6:4e:79:36:bc:b3:03:b8:ce:0a:8e:ea:36:45:37:af:
         db:67:cf:db:e1:1c:3a:9d:75:6a:cb:4d:0f:40:8e:96:2f:a1:
         3e:07:fd:05
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUIiJLP7wk72MIeHohVX6V/uPJ1WkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTEwMzExMjQ2NDRaFw0yNjEwMzAxMjUxNDRaMDMxMTAvBgNV
BAMTKDdENDI1MjUxRDUxODAzRTYxQzgyMEFERUYyOTQ1RTUwMTg0NDQ4RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgeGhG+2Kw1QAxckTB51sbBFeu
xw9vST3LLZxSLBUQKvwGnQXw53HCXegGE2J/AC6hnbTIgsz8obnzIRkdLJkT971q
FrvFZBnb+AUgGN5mWxJR5keU9RKHHY80HAtXR45dpmLBxB67O9VtUwow+OswJLh6
Wr0YMX++a00IIOXxs4N23NeFv+Ly9ZaTAlRho1fmeeQbiBdPDLJ/xothDJVphrZ3
L79Mas7tTO1wysaasoQi69x0z8QUBaVMuAWac/tusoMJkM3GqJCzeJUXvzoXI7pE
SerfD3rI40sbCV1X5pCszGBFlDxjGzoqfO8sUH7onKs+6+xKy/PZc93BybspAgMB
AAGjggJwMIICbDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9QlJR1RgD5hyC
Ct7ylF5QGERI0DAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAyBggrBgEFBQcwBYYmcnN5bmM6
Ly9ycGtpLmF2c2lzcC5jb20vcmVwby9BVlNJU1AvNC8wXgYIKwYBBQUHMAqGUnJz
eW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQLzQvN0Q0MjUyNTFENTE4
MDNFNjFDODIwQURFRjI5NDVFNTAxODQ0NDhEMC5tZnQwOQYIKwYBBQUHMA2GLWh0
dHBzOi8vcnBraS5hdnNpc3AuY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAVZvkMA0GCSqGSIb3DQEBCwUAA4IBAQBJKpotkvR3lhFLNe2bxyobf4atdIxf
QQhkYRDmIqwD0gX4ofHEJ4obFZBcB6Be3hwQPH6mBckNQ1EhpA4WyA5CkvsPD0Kc
MnEBues7bLaeYE4fCZdhGRFnj35+bJwLa1KtYPWf/1fxcRv1S/AiSE1Pn2TyoAMM
SEPyWQzM1RNEdfFZO2LuUaZIdIUTX/CKXEuxfn5T188CwdKF4TgOFzpc/MBKdxHW
31y8CtEBLA3pgxvLZX3MP63fHAsZ3KDyTrhn8+MdPeY5ptt7rMwLKbcctThL9mQS
4fM5IsZOeTa8swO4zgqO6jZFN6/bZ8/b4Rw6nXVqy00PQI6WL6E+B/0F
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:05 2025 by rpki-client