Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/AYvG6wsixR0xQ87wil8LrzmatDk.cer
File:                     AYvG6wsixR0xQ87wil8LrzmatDk.cer (raw, json)
Hash identifier:          ppdNMoQUAH9ZO7m3XAn0IIPAE4qpzpEmiiEI7+Um28g=
Subject key identifier:   01:8B:C6:EB:0B:22:C5:1D:31:43:CE:F0:8A:5F:0B:AF:39:9A:B4:39
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       0E69
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/AYvG6wsixR0xQ87wil8LrzmatDk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:21:27 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 45.221.200.0/21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3689 (0xe69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:21:27 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36B2DFEAR/serialNumber=018BC6EB0B22C51D3143CEF08A5F0BAF399AB439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f0:d8:1f:a8:5b:18:80:10:2c:75:4a:57:07:
                    d7:ee:41:7d:7f:7b:62:e5:e9:af:3c:1d:37:f9:9e:
                    9c:fa:bc:1b:5e:f2:ed:1a:27:b1:83:91:03:0b:02:
                    b2:a7:d3:65:a9:8a:84:f3:38:8b:51:ab:58:cc:4e:
                    e2:fb:40:e3:53:75:8a:5d:ab:2a:c9:bf:04:d9:c5:
                    15:8a:7c:02:a7:20:a4:36:b2:93:85:a5:52:66:22:
                    98:0a:2b:8b:5f:56:df:eb:38:80:90:39:b0:e9:34:
                    f1:74:a0:83:34:98:4d:7b:6c:23:fc:28:f8:af:39:
                    1b:8e:d5:5a:b3:91:ed:48:c1:8a:fd:69:27:23:dd:
                    57:e9:f4:ab:1b:58:aa:5a:49:0a:05:a6:56:1d:ea:
                    92:5f:7b:e4:6e:7d:59:bf:87:a4:2b:5c:ad:6e:8e:
                    f9:a9:df:55:39:b5:dc:41:ba:23:e3:bd:01:51:a9:
                    17:34:01:05:cf:6c:7c:c9:8d:f3:f4:ba:be:77:63:
                    dc:b9:d1:6b:7c:b4:77:9b:8e:ab:cc:ff:d4:6d:6d:
                    be:10:e0:c1:5f:13:17:0a:50:1a:78:b8:4a:86:61:
                    9a:89:d9:9f:f3:35:90:1b:6a:4d:b0:44:ab:63:46:
                    cc:d7:f6:63:59:30:26:1f:06:ab:5d:37:7d:92:ac:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:C6:EB:0B:22:C5:1D:31:43:CE:F0:8A:5F:0B:AF:39:9A:B4:39
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/AYvG6wsixR0xQ87wil8LrzmatDk.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:ea:bf:51:04:a1:d2:5c:a2:b8:50:1a:b8:ba:6f:6e:27:c3:
         7b:9d:53:f1:41:fe:5a:57:f0:44:37:30:5a:2b:6e:cc:e3:e1:
         bb:71:b4:73:11:e6:29:2a:85:2e:71:eb:bd:27:21:32:a6:c5:
         7d:15:0c:43:39:7d:2b:08:4a:ff:2c:42:5d:78:86:c3:5b:a2:
         e0:f3:53:4e:42:18:46:c9:5d:30:d6:7a:53:4d:17:88:b1:3e:
         6e:84:1b:4e:19:52:d4:47:31:36:c1:5a:32:20:32:96:03:5c:
         02:11:17:10:13:21:79:19:ea:6a:93:52:cd:64:85:3a:97:3c:
         c9:13:5f:b5:c7:d5:13:de:96:0b:e5:46:05:a6:2f:cf:b2:f6:
         e6:20:ca:39:3a:7e:f0:14:3d:84:6e:16:6d:2f:f0:85:4b:3b:
         3a:91:ba:4a:94:3c:9f:81:6a:79:2f:6f:b9:c0:d3:ea:d9:42:
         a9:21:95:02:81:f0:db:15:2b:d6:41:b4:af:46:e1:63:63:83:
         f3:ed:46:50:22:91:9f:cb:07:04:08:38:1f:f1:bd:60:a2:1d:
         51:46:dc:a5:38:d9:55:27:69:ac:ec:48:aa:0b:dc:bb:9d:ba:
         39:14:f7:07:bb:65:bc:c0:ab:28:38:cb:a1:ba:4a:17:9b:f0:
         db:27:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----