Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.cer (raw, json)
Hash identifier:          ZWaXnDZJVJOiAdZKrENS5jvv1B07JMnZpZ3XbIt0GFo=
Subject key identifier:   06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1384
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:41:55 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.0.234.0/23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4996 (0x1384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:41:55 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:2f:35:4b:57:fe:59:e3:7b:cd:9d:62:12:
                    4f:48:54:2c:85:70:ff:be:1c:c3:e5:24:e8:8b:af:
                    42:2b:80:b9:39:f8:d1:57:9f:ca:46:73:43:b8:94:
                    cf:ad:9b:9c:ec:d9:52:26:85:d0:23:52:58:9c:c0:
                    47:e2:cb:f8:f2:9f:2c:14:20:a5:c6:e7:03:60:82:
                    c1:6b:52:65:fb:c3:8c:6f:93:a9:89:aa:14:4a:a3:
                    72:ad:eb:ad:8d:04:19:78:ec:0c:eb:cf:fe:11:95:
                    ab:29:68:e5:9d:76:4a:f0:55:f2:d1:30:78:e7:e7:
                    b7:3f:b8:49:dc:a0:1d:ae:95:05:83:6f:80:e4:7d:
                    04:f8:aa:0b:4e:b3:ae:34:60:f0:34:a8:f3:45:04:
                    00:fe:fc:ed:73:5d:8f:3b:d9:59:00:67:4a:a4:07:
                    6f:58:5e:39:62:8f:ff:1b:f0:1f:08:f5:95:0c:eb:
                    5c:1f:a1:35:e5:c7:f1:92:97:90:e7:1b:e8:e2:4e:
                    bc:70:0b:e1:70:f5:7d:be:a5:b5:17:46:6b:dd:81:
                    8a:cc:8d:cf:9c:8f:30:07:a5:53:d2:e9:db:b6:49:
                    e1:a2:93:be:c9:e9:42:8e:9f:77:71:80:f3:5c:bf:
                    89:08:11:9b:c7:54:9c:75:bc:a2:ff:82:3e:e7:34:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:a9:3d:f9:a3:ba:ad:12:9e:56:b7:0b:53:39:18:eb:8d:2d:
         d0:cd:72:ee:e0:19:47:27:48:6d:0f:63:04:f2:60:47:5c:eb:
         8b:ad:f9:0e:c0:11:86:a6:39:e0:6b:17:68:10:7d:9b:36:b9:
         3b:64:db:e0:99:67:b2:a3:dd:7b:23:5a:6e:af:77:ff:17:cb:
         7d:48:30:2b:f6:8e:34:e6:22:7c:aa:cc:c7:f2:c9:db:db:83:
         b0:4b:b7:ae:34:5c:39:f0:8f:15:d2:5a:1d:59:89:0d:76:dd:
         37:4d:5a:a9:34:31:e4:8d:22:e3:fc:61:2a:ce:16:56:4b:ca:
         ce:2c:71:11:a3:f6:d7:70:eb:26:b9:58:2b:e1:cd:43:5a:c3:
         b5:21:50:e0:3a:a6:ab:00:13:ab:fa:7a:48:f5:35:d6:48:4f:
         33:02:94:a6:61:e6:d0:98:f9:b3:aa:e2:da:d2:42:cf:56:9f:
         fb:3b:78:a6:37:1f:0d:0b:11:c3:e9:83:67:d1:94:9b:1b:ad:
         9d:ba:08:2d:59:4f:ef:80:24:0a:cd:e5:cb:7c:64:8a:e8:76:
         b3:21:8c:54:07:39:1d:2c:a4:12:57:75:cd:72:c1:51:a3:c9:
         84:6c:00:7e:a7:50:1d:c6:5d:9f:93:74:21:36:93:ee:fd:07:
         8f:65:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org