Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer
File:                     31D88CB143D07059AA4AFB0F208630E599269338.cer (raw, json)
Hash identifier:          AQw4z9B3ueYBnlEHFkF8jVydB/4JXHeEcM/Dl9mCQ+g=
Subject key identifier:   31:D8:8C:B1:43:D0:70:59:AA:4A:FB:0F:20:86:30:E5:99:26:93:38
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       03ED3ACC58331434AEE1136DF0909D418A078D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.mft
caRepository:             rsync://rpki.as219412.net/repo/axel-vir/1/
Notify URL:               https://rpki.as219412.net/rrdp/notification.xml
Certificate not before:   Mon 19 Oct 2026 21:20:25 +0000
Certificate not after:    Mon 18 Oct 2027 21:25:25 +0000
Subordinate resources:    IP: 185.121.178.0/24
                          IP: 2a0d:d904::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 17:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ed:3a:cc:58:33:14:34:ae:e1:13:6d:f0:90:9d:41:8a:07:8d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Oct 19 21:20:25 2026 GMT
            Not After : Oct 18 21:25:25 2027 GMT
        Subject: CN=31D88CB143D07059AA4AFB0F208630E599269338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:92:01:ae:16:0c:ce:66:b7:f6:b2:24:d6:
                    7e:32:8c:81:22:5e:cb:84:fa:f9:22:bb:11:88:0e:
                    0c:3d:0e:e4:f7:da:36:ef:09:6a:45:3d:52:67:a3:
                    8e:7b:c0:7b:db:29:5a:15:9d:4a:09:f2:ba:3c:bb:
                    88:4e:0c:47:40:5c:94:96:d4:ef:a4:e3:b0:9b:0a:
                    82:2f:0b:5f:81:45:bc:ed:f0:77:38:5f:c0:6c:eb:
                    c9:26:28:b7:0f:0d:c5:a1:c9:a9:e3:cb:cc:c0:bf:
                    d8:42:b7:25:5b:07:07:98:17:96:e1:b6:ea:3c:62:
                    1b:c1:05:4b:4f:f0:79:3c:56:4d:d3:d6:15:41:0c:
                    68:2a:47:73:dd:82:b8:0a:c7:4a:39:64:91:7e:0e:
                    b4:31:ea:34:38:6b:c8:f5:52:b8:f2:a4:25:a6:f1:
                    b8:29:96:19:8f:6f:2c:b1:05:7a:cb:05:c7:db:f1:
                    c9:42:ca:c2:17:70:47:4c:1b:4f:0e:71:fb:8d:2d:
                    71:d0:7e:3e:a3:da:a0:d8:55:0d:a4:6a:b7:47:73:
                    a8:b4:02:a4:07:60:23:65:c6:2a:35:96:07:a2:d2:
                    14:9e:96:69:2e:6b:bf:6c:e6:89:8d:51:86:cd:70:
                    5c:57:40:95:6f:bf:66:bb:36:80:d6:dc:2b:c5:8c:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:D8:8C:B1:43:D0:70:59:AA:4A:FB:0F:20:86:30:E5:99:26:93:38
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.as219412.net/repo/axel-vir/1/
                RPKI Manifest - URI:rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.mft
                RPKI Notify - URI:https://rpki.as219412.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.178.0/24
                IPv6:
                  2a0d:d904::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:91:5b:c1:ae:fe:f9:fc:59:5a:bc:1b:8e:25:8b:d3:3c:
         6e:1f:ed:8e:7a:a5:b1:86:81:36:d9:0d:8c:0c:8c:44:f9:63:
         dd:94:e1:5c:48:c8:1d:78:85:7d:35:10:31:ec:d7:3a:27:56:
         d0:97:67:d6:2d:6f:ce:cb:f7:63:4f:51:af:fe:f7:eb:31:47:
         60:3b:de:19:2c:8d:71:83:ae:2f:db:09:b2:e8:1c:fb:fb:2d:
         2d:55:ce:77:1e:cb:cd:6e:46:34:17:ca:07:cd:7b:3e:8d:3c:
         4b:dc:e7:b2:ed:98:6f:a9:84:ea:97:67:80:ed:da:e9:18:4b:
         5f:35:4c:b3:59:11:d3:ec:a5:c8:c7:c7:57:2f:b0:a0:9a:e8:
         17:f3:25:2c:13:0b:4f:b2:33:43:fd:4f:8a:cc:9a:64:79:16:
         34:95:34:fc:3b:73:55:8b:cd:37:d4:b8:ad:c8:c5:8b:1a:f1:
         08:d4:32:05:a8:eb:0b:92:35:bc:6c:25:9c:ac:b4:bc:4c:80:
         40:61:4a:d2:a6:e4:42:53:a4:3c:57:cb:3a:24:37:5f:09:3b:
         12:01:b2:01:89:0b:e0:0a:2b:8d:4d:27:24:fb:67:a2:2a:23:
         36:07:72:13:e0:90:c7:79:fe:1b:0e:53:34:07:65:97:e9:a2:
         d1:3c:a3:ef
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUA+06zFgzFDSu4RNt8JCdQYoHjYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjEwMTkyMTIwMjVaFw0yNzEwMTgyMTI1MjVaMDMxMTAvBgNV
BAMTKDMxRDg4Q0IxNDNEMDcwNTlBQTRBRkIwRjIwODYzMEU1OTkyNjkzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKJIBrhYMzma39rIk1n4yjIEi
XsuE+vkiuxGIDgw9DuT32jbvCWpFPVJno457wHvbKVoVnUoJ8ro8u4hODEdAXJSW
1O+k47CbCoIvC1+BRbzt8Hc4X8Bs68kmKLcPDcWhyanjy8zAv9hCtyVbBweYF5bh
tuo8YhvBBUtP8Hk8Vk3T1hVBDGgqR3PdgrgKx0o5ZJF+DrQx6jQ4a8j1UrjypCWm
8bgplhmPbyyxBXrLBcfb8clCysIXcEdMG08OcfuNLXHQfj6j2qDYVQ2kardHc6i0
AqQHYCNlxio1lgei0hSelmkua79s5omNUYbNcFxXQJVvv2a7NoDW3CvFjAA1AgMB
AAGjggKJMIIChTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQx2IyxQ9BwWapK
+w8ghjDlmSaTODAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIHpBggrBgEFBQcBCwSB3DCB2TA2BggrBgEFBQcwBYYqcnN5bmM6
Ly9ycGtpLmFzMjE5NDEyLm5ldC9yZXBvL2F4ZWwtdmlyLzEvMGIGCCsGAQUFBzAK
hlZyc3luYzovL3Jwa2kuYXMyMTk0MTIubmV0L3JlcG8vYXhlbC12aXIvMS8zMUQ4
OENCMTQzRDA3MDU5QUE0QUZCMEYyMDg2MzBFNTk5MjY5MzM4Lm1mdDA7BggrBgEF
BQcwDYYvaHR0cHM6Ly9ycGtpLmFzMjE5NDEyLm5ldC9ycmRwL25vdGlmaWNhdGlv
bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEALl5sjANBAIAAjAHAwUAKg3ZBDANBgkqhkiG9w0BAQsFAAOC
AQEAfHiRW8Gu/vn8WVq8G44li9M8bh/tjnqlsYaBNtkNjAyMRPlj3ZThXEjIHXiF
fTUQMezXOidW0Jdn1i1vzsv3Y09Rr/736zFHYDveGSyNcYOuL9sJsugc+/stLVXO
dx7LzW5GNBfKB817Po08S9znsu2Yb6mE6pdngO3a6RhLXzVMs1kR0+ylyMfHVy+w
oJroF/MlLBMLT7IzQ/1PisyaZHkWNJU0/DtzVYvNN9S4rcjFixrxCNQyBajrC5I1
vGwlnKy0vEyAQGFK0qbkQlOkPFfLOiQ3Xwk7EgGyAYkL4AorjU0nJPtnoiojNgdy
E+CQx3n+Gw5TNAdll+mi0Tyj7w==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:00 2026 by rpki-client