Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
File:                     I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer (raw, json)
Hash identifier:          wY0pt3YMNCX9/N58oCrRkN7QWNjqDVh8/7i93RlK8LA=
Subject key identifier:   23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1638
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:31:51 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 137.63.128.0/17
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5688 (0x1638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:31:51 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F362B38EAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:55:67:f3:56:35:c7:f3:b6:bd:e2:1f:0b:
                    96:8b:29:a1:3f:74:29:c1:e9:59:e2:63:b7:72:e3:
                    df:57:fa:67:25:72:23:64:d6:1a:74:a0:77:92:41:
                    1c:f0:7c:ee:3c:34:09:36:8a:ef:bb:85:8a:cb:ee:
                    8d:56:ac:e5:2d:f6:a3:7f:65:08:82:81:12:31:47:
                    a4:fc:ed:18:b8:b4:36:6c:81:2c:ea:f3:20:55:fe:
                    e2:bf:a2:31:88:4c:c2:34:e9:a7:6e:14:4c:57:25:
                    8b:83:48:23:cf:da:67:6b:c6:39:db:38:db:a7:41:
                    b5:93:c6:55:fb:07:6a:40:7c:bc:42:ea:01:cb:ee:
                    88:43:be:3f:8e:96:4e:cc:bf:2d:ad:b7:b9:30:e1:
                    7d:3d:cb:cc:80:33:b2:83:b3:9f:e3:71:69:1d:a1:
                    2d:4a:4d:5b:ba:19:25:38:0c:74:b2:a3:cb:c2:7d:
                    bc:11:71:bc:97:15:8b:4e:31:8b:64:1a:d2:6d:5c:
                    8d:5e:74:99:45:16:d4:4e:ff:1e:72:62:d6:60:fc:
                    c3:7c:38:e7:ba:64:b9:a1:75:3f:d4:d9:9d:ba:09:
                    6e:86:7b:97:a9:49:10:2f:8f:20:0e:0e:82:90:fe:
                    f0:5b:e2:cd:e4:d1:8a:9e:b7:8e:64:24:e7:92:58:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:72:94:43:d7:04:dc:c8:64:f3:fc:f8:42:43:70:aa:ff:
         52:14:04:ec:46:a7:2d:bf:3c:c2:e0:c0:84:0e:7f:23:55:88:
         eb:f8:0f:ac:b3:73:21:89:2e:ac:9f:91:a6:e3:07:d4:64:b8:
         c0:11:7b:82:22:11:f9:ed:40:30:8a:0b:10:29:5f:ee:69:db:
         87:b6:a3:b7:3c:5d:bb:96:20:e7:09:55:66:43:86:a3:a1:c2:
         4c:48:f6:65:51:6a:af:18:05:e2:56:f8:d8:a7:2a:53:aa:23:
         05:e1:3c:24:cb:bc:b3:86:1a:86:77:39:33:2a:63:24:b9:0b:
         53:43:30:8c:fb:3d:f9:06:32:51:20:14:76:32:89:7b:56:d6:
         e7:ab:65:cc:13:3b:cd:63:28:6e:c2:4a:7f:14:68:81:e8:7f:
         c9:1e:e2:c3:11:b5:ac:6c:26:e8:70:a6:42:ad:96:f8:72:e0:
         d0:3d:f5:06:d6:3f:2e:8b:7f:94:5d:43:8b:63:3d:a4:a3:de:
         63:6f:3d:0b:b3:57:1f:92:83:ce:14:e4:00:57:bd:57:b2:54:
         a9:16:bc:c7:04:31:28:2a:fc:42:d9:11:c4:76:ec:f1:60:91:
         bf:34:7c:99:50:13:63:ea:22:1a:8e:db:b4:05:d2:72:db:d0:
         53:1c:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:31 2025 by rpki-client