Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
File:                     Gty1eCVKwMgZscFo71XAG7LCSpM.cer (raw, json)
Hash identifier:          1/tw0Kkf0TlHSGsIafuICnZuqEkReejwEAjAKb4Jytg=
Subject key identifier:   1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1678
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:44:17 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 146.196.128.0/17
                          IP: 155.251.0.0/16
                          IP: 160.182.0.0/15
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5752 (0x1678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:44:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365062AAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:6d:b8:f5:e5:50:0f:b4:10:e9:f7:2f:b9:
                    e6:3a:bb:e7:3f:dd:c1:35:7d:20:e1:3d:b8:d2:d2:
                    dd:eb:e9:35:f7:d8:ba:55:b7:90:29:6e:79:d2:3d:
                    8e:04:2b:86:48:6b:ff:a8:cd:b4:a8:d5:95:05:75:
                    93:d3:f7:79:17:de:5f:fa:1f:63:80:5d:4f:f5:c0:
                    98:d5:ec:d0:46:96:db:63:fe:d6:33:45:7f:41:28:
                    85:65:fa:43:85:9d:fe:88:d6:88:40:87:69:91:57:
                    fb:70:03:ee:5c:a3:27:14:1f:5b:e9:06:e9:3a:d0:
                    15:5d:8e:8d:3d:55:4d:e9:2c:b5:31:f5:81:4c:da:
                    d7:1f:52:5e:90:f4:c1:46:dc:68:b6:16:1f:36:3b:
                    28:77:8b:d9:c0:7d:51:bf:1e:f1:c2:ed:33:b4:c1:
                    28:23:b0:70:d7:c4:02:fa:9f:a3:5c:60:e1:09:0c:
                    dc:f4:18:71:44:d0:f0:06:29:a7:74:26:d9:70:a3:
                    2a:f8:39:b9:2d:59:2a:b6:09:67:54:53:86:a9:fe:
                    a9:18:53:93:86:34:86:ba:37:1f:45:65:d3:1b:b5:
                    93:1c:64:7a:e2:f8:40:4f:52:1d:f1:89:a6:7c:d4:
                    40:7d:a2:88:c6:53:13:53:e2:62:84:8b:8c:2b:62:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.128.0/17
                  155.251.0.0/16
                  160.182.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ac:cb:ec:b6:36:d8:67:55:0a:07:e6:ec:5c:43:bd:6f:4c:92:
         6f:e4:78:53:4f:fc:a3:18:fd:b5:87:d3:3d:ca:70:d3:26:a5:
         af:61:3c:ec:e8:78:ae:24:32:c1:37:55:cc:3e:0c:cb:97:d7:
         83:bc:0f:90:87:ff:7c:5f:a3:05:32:45:2f:2c:63:99:47:58:
         13:9a:cf:83:5b:50:01:97:15:8e:46:aa:28:fd:f3:ff:a1:ba:
         a3:d2:61:2b:a7:f1:0d:b8:00:83:2e:ec:3b:48:04:de:7a:25:
         a1:8a:d0:40:1b:a8:86:c3:92:26:49:af:fb:f4:81:7c:bb:4b:
         52:84:e5:91:dc:e8:d2:17:ff:2c:11:b1:35:b0:67:17:25:31:
         cd:ca:d0:e7:ca:80:fc:f6:da:ac:eb:5f:0c:41:91:f2:8b:6d:
         2a:04:87:5a:0c:68:f2:f1:2d:c1:84:8c:fe:6b:27:fc:90:3a:
         92:ec:fe:bd:b8:1a:f7:54:84:88:90:76:0e:e5:cb:b9:5c:75:
         fa:2d:e3:d8:55:e5:5f:2b:05:81:43:9f:01:81:f7:66:d6:d9:
         98:de:7b:56:bb:38:dd:35:19:9b:65:25:87:19:18:0a:70:c2:
         0e:3b:ff:ab:35:a2:c9:45:06:8f:dd:52:b3:34:eb:dd:1e:d4:
         75:84:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:57 2025 by rpki-client