Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
File:                     35Ti668FVkXR68M9dxpKkrH1obo.cer (raw, json)
Hash identifier:          vEwehIfCNPARczgTZgA+/QB7kZkCE31ntgYPRAY12SY=
Subject key identifier:   DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       172F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:19:39 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 165.90.192.0/20
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5935 (0x172f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:19:39 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36B4943AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:bc:08:75:19:80:10:7a:c4:3d:68:04:e2:
                    e0:b6:d1:43:fb:a0:f3:dc:ee:78:4e:69:a3:47:e8:
                    15:d7:13:75:3f:49:55:42:1d:a4:a1:0a:4c:2e:2b:
                    27:89:4a:89:6f:31:31:6d:d5:1f:ec:20:4a:67:2b:
                    1e:73:45:27:b8:1b:2d:d7:d5:a8:c5:8e:ad:8d:a3:
                    7d:4b:bd:d2:73:52:68:eb:9d:4e:83:69:e7:6e:48:
                    36:39:55:a0:a5:96:b8:96:5e:48:6b:a6:f0:51:44:
                    73:f9:c1:39:2d:3b:ae:ed:7f:99:0c:62:6c:94:62:
                    e9:57:8a:2a:bf:34:40:0d:b6:71:4e:da:9d:59:c1:
                    b3:6e:d3:b2:65:61:10:ad:24:9c:23:22:3c:34:e8:
                    4b:ac:c7:62:7c:a6:d5:e5:d1:f5:e7:73:e9:06:97:
                    0a:5e:57:20:54:b9:4f:21:70:d5:e8:8c:8f:37:b0:
                    fb:62:5b:4b:68:4c:2e:3f:ca:2b:d0:f9:2b:ee:7c:
                    9a:d2:f1:24:c8:b5:97:42:29:f1:2a:d8:ec:77:c1:
                    c1:d2:97:cb:be:f4:fa:8f:74:eb:7e:71:07:95:da:
                    e3:4e:ed:10:63:23:88:d2:18:ea:6a:c0:e1:c0:d0:
                    86:84:63:8e:e7:31:06:2d:96:13:9b:7d:c5:06:c1:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:41:11:ef:68:28:1f:61:7d:8e:f7:09:cb:c5:c9:b5:2b:9a:
         c0:f2:4d:25:5c:33:06:a0:2a:9c:e1:09:df:be:77:fb:60:e1:
         a1:dc:ac:4d:bd:35:02:48:f1:db:02:cb:81:31:92:63:79:b1:
         f3:04:cb:30:ff:6a:c7:b3:5f:62:63:69:a3:0e:88:a6:ec:a7:
         03:16:d3:95:8e:d5:12:12:ea:66:6f:98:eb:49:b8:73:97:20:
         c2:16:54:aa:b3:c1:9c:dc:13:dd:34:bf:86:44:f7:a2:60:78:
         d7:6a:f4:ff:5f:54:5b:43:55:fd:2b:d0:03:f0:d6:cd:e1:71:
         8f:e3:98:9c:7a:c7:13:8f:c9:44:29:60:c4:76:b3:2f:50:a6:
         04:d0:15:1b:8a:c3:9f:7a:93:15:32:66:75:8e:65:e3:ef:91:
         e4:27:10:d5:52:2f:14:8e:db:62:0c:10:42:58:d0:4b:62:15:
         44:cb:ee:b5:b8:07:ac:9c:f5:3c:5d:71:d3:a6:6b:e9:2c:40:
         f8:ff:9a:64:d3:88:83:77:9b:5c:80:78:26:b4:37:c5:6d:2a:
         5b:ad:8d:dc:a7:08:bc:42:44:b0:e2:cf:53:38:3f:2c:3c:fe:
         15:e5:ec:93:13:03:dc:dc:c1:94:b6:9c:70:4b:5a:98:85:3a:
         aa:be:8d:f1
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFy8wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTE5MzlaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkI0OTQzQVIxMTAvBgNVBAUTKERGOTRFMkVCQUYwNTU2NDVE
MUVCQzMzRDc3MUE0QTkyQjFGNUExQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDVP7wIdRmAEHrEPWgE4uC20UP7oPPc7nhOaaNH6BXXE3U/SVVCHaSh
CkwuKyeJSolvMTFt1R/sIEpnKx5zRSe4Gy3X1ajFjq2No31LvdJzUmjrnU6Daedu
SDY5VaCllriWXkhrpvBRRHP5wTktO67tf5kMYmyUYulXiiq/NEANtnFO2p1ZwbNu
07JlYRCtJJwjIjw06Eusx2J8ptXl0fXnc+kGlwpeVyBUuU8hcNXojI83sPtiW0to
TC4/yivQ+SvufJrS8STItZdCKfEq2Ox3wcHSl8u+9PqPdOt+cQeV2uNO7RBjI4jS
GOpqwOHA0IaEY47nMQYtlhObfcUGwUinAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
35Ti668FVkXR68M9dxpKkrH1obowHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI0OTQzLzE5M0Y2
NDI4MzQzOTExRUQ4NDk3RDE4N0YxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCNDk0My8xOTNGNjQyODM0MzkxMUVEODQ5N0QxODdGMTIyMjQ2
OC8zNVRpNjY4RlZrWFI2OE05ZHhwS2tySDFvYm8ubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEpVrAMA0GCSqGSIb3DQEBCwUAA4IBAQAZQRHvaCgfYX2O
9wnLxcm1K5rA8k0lXDMGoCqc4Qnfvnf7YOGh3KxNvTUCSPHbAsuBMZJjebHzBMsw
/2rHs19iY2mjDoim7KcDFtOVjtUSEupmb5jrSbhzlyDCFlSqs8Gc3BPdNL+GRPei
YHjXavT/X1RbQ1X9K9AD8NbN4XGP45icescTj8lEKWDEdrMvUKYE0BUbisOfepMV
MmZ1jmXj75HkJxDVUi8UjttiDBBCWNBLYhVEy+61uAesnPU8XXHTpmvpLED4/5pk
04iDd5tcgHgmtDfFbSpbrY3cpwi8QkSw4s9TOD8sPP4V5eyTEwPc3MGUtpxwS1qY
hTqqvo3x
-----END CERTIFICATE-----