Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.cer (raw, json)
Hash identifier:          tVBLJvGBH1knnZ8wiirA2vdwVUIeun8deL0+P14BLY8=
Subject key identifier:   06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1694
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:49:48 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 156.0.234.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5780 (0x1694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:49:48 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3660C14AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:2f:35:4b:57:fe:59:e3:7b:cd:9d:62:12:
                    4f:48:54:2c:85:70:ff:be:1c:c3:e5:24:e8:8b:af:
                    42:2b:80:b9:39:f8:d1:57:9f:ca:46:73:43:b8:94:
                    cf:ad:9b:9c:ec:d9:52:26:85:d0:23:52:58:9c:c0:
                    47:e2:cb:f8:f2:9f:2c:14:20:a5:c6:e7:03:60:82:
                    c1:6b:52:65:fb:c3:8c:6f:93:a9:89:aa:14:4a:a3:
                    72:ad:eb:ad:8d:04:19:78:ec:0c:eb:cf:fe:11:95:
                    ab:29:68:e5:9d:76:4a:f0:55:f2:d1:30:78:e7:e7:
                    b7:3f:b8:49:dc:a0:1d:ae:95:05:83:6f:80:e4:7d:
                    04:f8:aa:0b:4e:b3:ae:34:60:f0:34:a8:f3:45:04:
                    00:fe:fc:ed:73:5d:8f:3b:d9:59:00:67:4a:a4:07:
                    6f:58:5e:39:62:8f:ff:1b:f0:1f:08:f5:95:0c:eb:
                    5c:1f:a1:35:e5:c7:f1:92:97:90:e7:1b:e8:e2:4e:
                    bc:70:0b:e1:70:f5:7d:be:a5:b5:17:46:6b:dd:81:
                    8a:cc:8d:cf:9c:8f:30:07:a5:53:d2:e9:db:b6:49:
                    e1:a2:93:be:c9:e9:42:8e:9f:77:71:80:f3:5c:bf:
                    89:08:11:9b:c7:54:9c:75:bc:a2:ff:82:3e:e7:34:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:45:ef:fb:76:47:10:ca:bb:a7:bd:84:31:ff:c1:8a:66:8e:
         ca:d6:ad:61:aa:0e:b0:07:44:e2:d3:61:eb:b1:e6:bd:2e:91:
         f4:cd:0c:f9:e4:21:d5:0b:20:73:dd:8c:aa:1f:b0:86:4e:95:
         54:4b:32:0c:fb:3e:7f:a6:b1:7d:77:32:29:3e:de:a9:52:da:
         3a:ed:6a:8a:d8:54:82:87:28:58:76:e2:06:b2:1b:05:9c:b1:
         ee:b5:54:cf:3a:8c:ca:6e:f7:eb:f2:66:7a:7e:c3:7e:c2:78:
         ce:bf:b7:6b:f3:67:0f:2b:dd:32:2a:9a:d9:d7:4e:16:49:88:
         26:49:af:77:f9:11:9a:36:d2:33:cc:3a:35:9f:c2:8f:72:fa:
         2f:d9:d1:57:fa:25:95:7f:24:f3:15:ca:cf:ab:63:37:48:66:
         c9:a3:15:bf:a5:37:f7:f5:20:ce:50:d2:d4:1c:5b:f5:da:16:
         78:17:65:dc:ec:69:e9:fe:19:44:87:7c:38:7c:7b:ab:2f:5d:
         57:8c:a1:df:02:e3:b1:4e:04:25:71:2b:a5:e0:5a:c7:8d:e5:
         d9:27:07:29:52:0d:86:2e:e2:bf:b9:8d:4e:14:35:58:95:ae:
         d6:f8:54:81:86:f4:ef:8e:78:42:95:30:27:20:82:74:79:22:
         b4:95:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:53 2025 by rpki-client