Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
File:                     PX4rsaW_d2MBah9006PUVz6rsIk.cer (raw, json)
Hash identifier:          JEIuT71eQi5fZygaRb7Em1JEyZqgYZobQmOJ2vcsm/A=
Subject key identifier:   3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1BE2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 09 Sep 2026 00:11:57 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.184.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7138 (0x1be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Sep  9 00:11:57 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3678120AR, serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:56:f8:da:9a:53:72:3a:14:3e:e0:20:ca:
                    25:e5:f7:e9:c4:32:14:16:df:a6:d4:48:4d:ba:35:
                    46:49:0a:27:aa:bd:63:7b:f6:45:9b:85:fc:cb:dc:
                    8e:51:72:bc:77:b9:13:06:9a:6f:91:68:74:a8:90:
                    65:02:1f:f5:d9:e0:04:61:c3:fe:32:46:c8:fe:ee:
                    34:6f:8b:21:57:16:1c:17:f6:da:46:e9:c3:9b:1b:
                    36:bd:4b:aa:92:11:0c:da:5c:f6:93:43:93:7f:3b:
                    45:50:29:49:1a:c4:62:7a:5e:cd:5c:7f:25:e3:de:
                    9d:3b:bf:95:38:1f:41:12:33:67:ab:9f:22:68:d2:
                    2c:4a:bb:83:60:51:ac:ec:10:e7:44:e1:e7:55:b2:
                    f6:27:1e:91:8e:65:d2:a6:b2:d3:b6:00:de:31:d6:
                    64:86:8f:5a:dd:cb:6e:a2:b2:8a:23:f9:8b:79:62:
                    f7:51:df:21:5b:05:17:20:e9:94:14:a7:f8:4a:b3:
                    ff:ed:80:63:c2:99:d4:a5:80:0b:ce:8c:1b:25:38:
                    f4:27:53:5e:5f:88:1b:1e:bc:4a:17:bb:e8:2f:ab:
                    a5:bb:50:ad:63:a8:d4:df:41:d4:86:43:50:9a:a3:
                    5e:59:78:4d:40:e6:49:7c:a0:80:bf:df:d3:64:4a:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:68:e8:18:5c:82:60:3b:b4:59:43:e9:a1:12:ff:84:bb:9e:
         e8:27:dd:b8:f9:23:39:ef:08:5c:e9:81:f9:81:86:8c:a8:74:
         60:d2:e2:aa:f5:9d:35:4c:7c:56:36:b9:9f:9e:c8:92:23:c9:
         d7:9b:42:db:6e:6f:56:cf:6b:09:a9:e4:ea:31:1e:62:6e:09:
         fb:38:e2:f3:c8:02:be:aa:73:88:b8:3d:16:d3:51:05:36:87:
         d9:a9:41:23:91:13:7d:80:7b:67:33:68:7b:cc:b9:77:6f:f2:
         94:a2:ac:fd:86:d1:29:45:59:38:34:67:1f:ed:6a:04:70:af:
         72:46:d1:3e:95:77:a6:2b:7e:86:bc:c6:2c:db:5d:6a:a4:ba:
         d2:4a:28:27:cd:70:4f:c5:ac:6e:6c:a5:3d:e5:78:3c:54:e9:
         52:0f:7a:5b:71:cf:38:7a:46:a2:16:fb:17:20:6f:c7:92:5c:
         51:85:1b:af:90:88:a5:a3:4e:2d:ed:50:04:b2:f3:79:ec:c0:
         69:99:0c:ac:f5:2d:31:ed:38:42:0a:78:45:ee:e4:83:2d:9d:
         3c:e0:e0:6b:ac:35:48:fd:0c:3c:bd:19:75:82:e0:02:7d:2d:
         92:4b:b8:dc:eb:fe:89:fd:90:71:74:0b:4d:cc:c9:c3:36:b0:
         7a:c3:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:38:42 2026 by rpki-client