Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer (raw, json)
Hash identifier:          Opb3bVfWox87+unRwjDWhqNtKFrH2dB07U+ZnZBQsyQ=
Subject key identifier:   EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1739
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:21:36 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 160.242.192.0/18
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5945 (0x1739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:21:36 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36BD97CAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:83:71:8c:5a:49:d2:a3:fe:73:6c:26:84:
                    7d:e2:a8:79:c9:f1:25:b4:81:a2:17:51:8a:5a:43:
                    9f:f6:e4:7c:aa:bb:0f:98:c8:a3:62:a9:01:9a:a8:
                    f4:6d:56:7c:c4:86:12:28:8e:4e:c2:d9:d8:f6:e6:
                    8e:0d:61:0b:38:c8:4d:e2:cb:ab:ad:13:dd:17:b7:
                    51:18:dc:7d:ab:c4:c5:50:22:14:03:e8:b9:4a:e2:
                    69:85:2e:5e:70:ab:02:ec:1e:35:f2:78:1c:ca:0c:
                    32:55:7c:97:6a:ee:36:8c:57:e4:04:14:7a:52:3b:
                    8b:59:f9:7b:22:85:a7:d6:f2:0c:f1:7f:4f:4b:e6:
                    11:cb:61:b4:c0:93:8c:00:48:2d:20:fa:d3:1c:55:
                    c1:33:06:7f:55:8a:68:d3:2b:e6:f8:a1:b6:6f:0a:
                    59:05:8e:b0:8b:28:f9:dd:6f:9a:17:11:1e:99:60:
                    1f:b8:8d:f7:b1:d0:c1:45:ec:8d:62:fc:c0:09:ee:
                    ca:6c:14:45:0b:bc:8f:86:b9:1c:aa:84:5b:df:fa:
                    e3:dc:94:05:20:e9:27:6b:b7:e0:d4:04:8a:9a:af:
                    19:51:49:39:8b:0e:fa:a6:80:6b:d7:7f:e9:44:68:
                    ca:5e:25:73:f5:72:4b:28:1c:a0:1f:65:44:3d:f9:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:ea:69:e4:5a:38:65:67:3a:c1:04:bf:a9:1d:63:53:3b:
         55:ae:4f:96:34:d5:7d:1e:4f:24:77:74:ec:f6:4b:11:75:e3:
         d0:fc:11:d4:e8:f6:6f:98:55:2d:7e:bb:3c:c8:2c:c6:ed:1d:
         8f:50:c3:00:74:c2:18:42:b7:3a:39:e4:32:cf:43:73:24:b9:
         2d:76:b2:9a:d8:82:f6:b0:4e:b3:95:b4:5a:28:5d:7b:6f:f3:
         3d:c3:d2:8e:72:2b:dd:f3:61:19:05:11:47:96:ec:5e:02:4d:
         8e:7b:21:0b:fe:a5:98:3b:94:45:b4:83:21:6c:42:9f:ad:ed:
         e9:dc:0d:32:d8:6d:e5:4c:c1:b1:82:fe:1b:79:88:44:c3:0b:
         91:92:05:40:bd:c0:73:be:ad:57:2b:ef:23:2f:c1:d6:76:fe:
         a4:d7:f0:0b:60:4b:79:d3:6a:5c:88:ff:3b:56:fc:df:3c:a9:
         1e:b8:6f:dd:fc:1b:d4:14:c9:33:97:8d:49:0f:f1:12:42:83:
         4d:75:89:4d:ba:df:98:5f:9e:74:cc:e0:52:0a:be:9f:9a:4b:
         44:0f:a6:09:7b:c5:6a:29:b8:93:46:dd:c3:30:c5:9c:6b:64:
         81:27:63:72:a3:2a:90:7a:a7:aa:54:0a:98:79:aa:5a:74:b1:
         27:55:19:63
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFzkwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTIxMzZaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkJEOTdDQVIxMTAvBgNVBAUTKEVGRjQwNjFGMzU1NzJFNkJG
QTFDMjRCQjIzNjhGQ0ZFMkVBRTYwNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCw6INxjFpJ0qP+c2wmhH3iqHnJ8SW0gaIXUYpaQ5/25Hyquw+YyKNi
qQGaqPRtVnzEhhIojk7C2dj25o4NYQs4yE3iy6utE90Xt1EY3H2rxMVQIhQD6LlK
4mmFLl5wqwLsHjXyeBzKDDJVfJdq7jaMV+QEFHpSO4tZ+XsihafW8gzxf09L5hHL
YbTAk4wASC0g+tMcVcEzBn9VimjTK+b4obZvClkFjrCLKPndb5oXER6ZYB+4jfex
0MFF7I1i/MAJ7spsFEULvI+GuRyqhFvf+uPclAUg6Sdrt+DUBIqarxlRSTmLDvqm
gGvXf+lEaMpeJXP1cksoHKAfZUQ9+RuVAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
7/QGHzVXLmv6HCS7I2j8/i6uYFowHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkJEOTdDL0U0MjRB
RTJBMkQ5NDExRUM5NzJDQTE0NUQ4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCRDk3Qy9FNDI0QUUyQTJEOTQxMUVDOTcyQ0ExNDVEOEEwMTRD
RS83X1FHSHpWWExtdjZIQ1M3STJqOF9pNnVZRm8ubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQGoPLAMA0GCSqGSIb3DQEBCwUAA4IBAQBDoepp5Fo4ZWc6
wQS/qR1jUztVrk+WNNV9Hk8kd3Ts9ksRdePQ/BHU6PZvmFUtfrs8yCzG7R2PUMMA
dMIYQrc6OeQyz0NzJLktdrKa2IL2sE6zlbRaKF17b/M9w9KOcivd82EZBRFHluxe
Ak2OeyEL/qWYO5RFtIMhbEKfre3p3A0y2G3lTMGxgv4beYhEwwuRkgVAvcBzvq1X
K+8jL8HWdv6k1/ALYEt502pciP87VvzfPKkeuG/d/BvUFMkzl41JD/ESQoNNdYlN
ut+YX550zOBSCr6fmktED6YJe8VqKbiTRt3DMMWca2SBJ2NyoyqQeqeqVAqYeapa
dLEnVRlj
-----END CERTIFICATE-----