Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
File: GS9iV_wr5XP3WbXyvfg9aar_ouc.cer (raw, json)
Hash identifier: aojwq8aDyhQw44Ak37F+cGLv2mup23NutXno6ImPeZ0=
Subject key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 161C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:26:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.119.192.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5660 (0x161c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:26:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3615A48AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:b5:5d:ee:b8:a9:fa:a8:51:9f:cb:f8:ee:
0f:dd:b0:2b:a4:ba:ca:d5:d9:6d:6e:15:d3:cf:a7:
17:fc:61:be:27:24:f2:64:d6:79:59:83:17:bb:c1:
a2:e4:5d:74:d3:25:0d:13:32:7d:83:1c:9c:d6:e4:
32:e7:71:1c:1b:6b:b6:a3:c0:e4:d4:34:99:2d:b0:
81:44:e8:5e:88:66:c8:e7:9a:e9:a5:6c:61:34:92:
87:9b:fd:fa:e5:fe:fc:36:fe:8a:b0:95:a8:ef:92:
fd:81:ce:13:f9:59:ef:8a:36:29:a0:92:6e:90:36:
92:6c:6d:98:59:76:f7:3f:93:2b:cf:86:a8:e0:0c:
30:6d:c7:89:ce:e9:3c:5d:7a:7f:6e:fb:72:f8:73:
4d:7e:87:8a:51:67:e2:24:ae:30:7e:d6:71:79:e0:
b4:4d:8c:23:54:65:87:f6:0a:71:57:06:8c:1d:16:
d2:12:cc:cb:c6:4b:c2:0d:f1:ce:0f:ad:79:ab:69:
e2:2a:72:db:9d:7b:05:56:93:8d:4a:77:6c:3c:0a:
14:c7:2b:50:5d:1a:52:f4:20:d8:1f:eb:d4:44:88:
63:3d:1b:90:73:73:4f:aa:27:ac:85:63:80:59:f0:
9c:33:22:b2:e3:d1:eb:07:a3:da:30:c3:97:94:42:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
sbgp-ipAddrBlock: critical
IPv4:
160.119.192.0/22
Signature Algorithm: sha256WithRSAEncryption
83:c5:6a:7b:80:80:b9:0e:c9:0e:b7:09:9c:56:e3:bc:ca:28:
dc:5e:19:c3:ba:0e:51:14:e0:fe:f5:16:e0:de:57:b1:9b:81:
7e:59:d3:a7:5d:1d:71:2f:54:27:da:7f:bb:79:f8:2b:5b:cc:
b2:dd:98:5f:8d:bf:a3:63:27:0e:1f:00:97:4b:d4:7b:f3:b2:
00:d1:d7:c3:ec:18:36:64:f7:43:69:10:42:a5:7f:2a:8b:eb:
43:9b:55:bb:6a:30:a4:0c:db:72:78:2e:7d:c9:f9:f1:b2:f8:
08:90:0e:1c:f9:eb:e3:36:7e:4e:a0:d8:7d:53:80:1d:72:9e:
57:02:d0:45:43:13:bc:f8:83:39:c3:1a:42:c1:fb:87:75:f5:
00:8a:2e:f8:19:9f:cf:b4:62:b4:42:55:18:8d:3f:61:11:73:
ba:0f:2f:64:08:c2:da:6c:36:a1:b3:b1:f7:cb:73:d5:2d:0f:
e9:fd:1d:68:a7:64:33:da:d1:4b:56:aa:e3:14:9a:2c:dd:d3:
07:dc:b9:80:cd:7f:47:57:6f:fd:3f:df:04:77:cf:5b:5b:fd:
61:6c:7b:ba:b2:10:7c:56:b9:d8:db:1c:78:c7:6e:79:73:80:
b6:df:0c:5f:d8:4b:37:41:49:1e:12:01:60:f1:aa:ea:98:e7:
b1:d1:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:24:14 2025 by rpki-client