Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.cer (raw, json)
Hash identifier:          kuC9QzjOue9cBqdn8SQFm2lHAqXHciKpkXcU9VgZ7Dg=
Subject key identifier:   27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       17A5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 15 Jan 2025 12:11:38 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 169.239.20.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6053 (0x17a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan 15 12:11:38 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36A413FAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:3b:a7:cc:b1:42:7e:30:5b:55:87:0e:f8:
                    f0:70:e6:51:ad:80:4e:a5:1c:76:b6:63:a6:93:4c:
                    c4:1e:49:b9:15:b1:73:a7:d3:82:27:a6:5c:a4:15:
                    54:bd:49:20:cc:7b:b9:67:d8:09:f8:96:78:d3:d8:
                    e6:1f:bc:df:35:b6:93:22:85:89:0a:34:ff:61:de:
                    fa:75:8e:ec:72:dd:2b:86:37:86:5d:fc:85:3a:15:
                    60:88:b6:b2:cd:c0:cc:9c:46:89:10:99:94:75:a4:
                    94:45:6c:58:f7:e8:c0:63:b8:00:7b:0e:fd:f7:46:
                    25:f4:c5:27:7a:6c:d0:6a:de:cf:1b:8e:30:24:bd:
                    be:64:5a:93:07:91:2a:fc:de:87:cb:5f:9f:ab:f3:
                    36:d4:14:0c:57:e4:f0:7f:8d:5d:07:ee:d5:78:34:
                    24:db:99:94:81:55:69:c8:d1:6e:cb:80:80:7e:78:
                    ba:13:b3:f8:48:9f:ce:19:65:63:1d:09:39:4e:aa:
                    f4:63:b3:a1:c4:96:69:25:2e:08:79:0e:d8:fd:c5:
                    35:9e:45:e0:d8:d9:a8:5d:a7:ca:c7:16:09:cc:5d:
                    82:a9:7c:d0:1e:d5:10:a5:81:8f:de:9c:39:71:83:
                    96:98:c0:93:94:3a:4e:62:13:da:3e:f1:8e:4a:60:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:58:5c:be:32:bd:1d:83:36:03:8f:f1:d0:32:66:97:81:
         34:e7:14:b4:2c:82:f5:07:5e:b1:64:da:08:a9:fd:67:56:0d:
         41:9e:69:a0:8d:b8:86:52:4b:c1:25:2a:16:3f:10:d4:0b:40:
         35:d6:9c:ed:d9:73:b4:43:04:71:e8:11:3a:ba:38:7c:4a:01:
         c7:4a:e3:6f:21:a6:79:0b:f9:47:58:39:66:6a:d1:e6:b7:a6:
         ee:c3:f8:3b:06:ba:06:77:06:ce:31:36:bd:97:6c:69:1b:f6:
         c5:a5:a1:67:cc:fd:bf:8e:49:62:ab:d3:18:e5:95:1a:3b:09:
         e2:30:b5:2d:6c:02:fc:e2:ee:d2:9c:fc:c8:d7:a0:8b:75:2e:
         91:27:a4:0e:f2:55:5f:8b:c0:b2:28:90:40:34:3c:d0:38:29:
         f3:59:69:3f:05:3d:03:e7:20:6a:3c:f6:e5:6e:0a:d6:80:8e:
         4c:cd:ea:d1:2f:57:94:1b:a8:79:51:be:73:83:4e:d3:e5:9b:
         7a:2b:31:b3:1c:18:c2:84:36:fb:6d:a4:2b:63:3f:3f:d4:f1:
         91:d8:0b:59:d6:05:d9:07:a4:ed:59:97:c3:c9:23:fa:e2:d9:
         ae:52:c0:6f:47:da:ab:e7:60:af:55:8a:77:23:5b:ae:a7:af:
         e1:c9:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 23:06:39 2025 by rpki-client