Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
File:                     PuGjQpUbwSAiYnHzC4UKh356oZs.cer (raw, json)
Hash identifier:          2IKpSJXH00HitvbqB6NCkE425tXNRjI1cWYDDobG0os=
Subject key identifier:   3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1409
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:15:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.222.0.0/19
                          IP: 169.255.0.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5129 (0x1409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:15:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:27:74:41:fd:c6:f8:bf:c1:90:a5:44:d8:
                    b8:26:3b:5f:4a:16:2f:9e:62:dc:d9:80:a6:ae:08:
                    1f:f4:a4:5d:ca:d2:26:57:33:e4:c8:2e:ca:f1:93:
                    4b:37:46:08:a2:d4:6d:ba:83:a0:a8:88:60:d7:61:
                    f1:7b:5d:1f:74:54:26:05:d6:98:13:32:98:56:dc:
                    32:30:38:d7:3f:da:a3:ad:bc:e8:5f:78:dd:53:0b:
                    e9:5f:e3:73:82:64:35:cd:8a:a7:50:b1:5a:dc:5a:
                    88:1f:a5:37:58:e4:56:5d:91:bf:81:2b:a2:79:eb:
                    44:07:0b:a7:bf:6a:66:68:0f:c9:3d:c1:5c:91:fe:
                    d9:a6:c9:8f:d5:fd:34:04:53:f9:a9:d5:e4:63:d8:
                    7e:9f:95:d3:34:41:e0:13:18:92:9d:79:36:40:7b:
                    33:ee:a8:e0:c8:55:c6:24:50:2d:e5:d9:17:bf:74:
                    52:ca:f1:fe:8f:58:29:37:0b:e8:d0:c7:0e:87:3c:
                    4c:d4:75:ce:e0:df:0c:9f:f0:4a:cb:28:8f:ac:2d:
                    2f:46:d5:65:9a:3a:a7:3b:6f:84:9e:bd:f0:f0:82:
                    91:8c:84:12:df:e1:b9:7b:bc:a0:e4:1c:88:d0:8c:
                    57:d2:f9:55:0c:a7:5b:74:b8:cd:a9:f9:49:07:c5:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.0.0/19
                  169.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:70:73:e6:c3:ba:e3:13:27:a9:1b:ce:33:73:3e:de:08:22:
         85:fe:6e:7c:79:de:66:41:21:15:b1:c4:34:33:f6:20:12:0d:
         5b:05:ec:f5:c5:93:ba:80:2d:9d:5e:88:59:9b:c9:3e:52:7f:
         aa:c2:07:e9:e6:35:e7:f1:11:70:be:ea:b9:5a:20:bc:84:e4:
         75:c9:72:81:b3:ae:b4:34:4b:63:c3:59:57:91:72:7a:da:1f:
         7d:be:36:4c:fc:4e:08:2a:7d:e7:2c:c5:18:38:1f:97:d2:37:
         74:0b:27:ce:3e:5e:ba:4f:ba:ce:93:5b:2f:7b:40:9e:a8:3e:
         34:f7:3a:18:ef:7f:66:f1:7b:9f:c9:d7:4d:93:bf:2e:ce:e0:
         73:ab:66:26:c6:a4:37:94:c0:0a:3d:b3:4b:31:0d:4d:46:1d:
         91:73:9a:13:2e:f8:0d:72:62:4e:e1:c7:8f:df:cc:be:aa:c4:
         39:cd:71:41:cf:26:7e:0d:47:cb:43:69:8f:88:e6:c6:e9:d8:
         b9:fc:5f:c9:1c:50:1b:59:bb:f0:c4:54:21:60:5f:93:aa:fc:
         8d:21:1b:5c:58:44:c2:9c:e9:83:a8:18:45:c6:4b:29:28:a2:
         7d:b7:ee:0b:4c:9a:cc:73:4a:88:6e:d2:3e:70:b5:36:9f:fe:
         c4:78:b1:29
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgICFAkwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTE1MzJaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkI5NURFQVIxMTAvBgNVBAUTKDNFRTFBMzQyOTUxQkMxMjAy
MjYyNzFGMzBCODUwQTg3N0U3QUExOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDSnyd0Qf3G+L/BkKVE2LgmO19KFi+eYtzZgKauCB/0pF3K0iZXM+TI
Lsrxk0s3Rgii1G26g6CoiGDXYfF7XR90VCYF1pgTMphW3DIwONc/2qOtvOhfeN1T
C+lf43OCZDXNiqdQsVrcWogfpTdY5FZdkb+BK6J560QHC6e/amZoD8k9wVyR/tmm
yY/V/TQEU/mp1eRj2H6fldM0QeATGJKdeTZAezPuqODIVcYkUC3l2Re/dFLK8f6P
WCk3C+jQxw6HPEzUdc7g3wyf8ErLKI+sLS9G1WWaOqc7b4SevfDwgpGMhBLf4bl7
vKDkHIjQjFfS+VUMp1t0uM2p+UkHxVCpAgMBAAGjggL3MIIC8zAdBgNVHQ4EFgQU
PuGjQpUbwSAiYnHzC4UKh356oZswHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI5NURFLzExMzhG
OEIyQ0E1RTExRUE5M0ZBRjg4NEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCOTVERS8xMTM4RjhCMkNBNUUxMUVBOTNGQUY4ODRGOEFFQTIy
OC9QdUdqUXBVYndTQWlZbkh6QzRVS2gzNTZvWnMubWZ0MCUGCCsGAQUFBwEHAQH/
BBYwFDASBAIAATAMAwQFLd4AAwQCqf8AMA0GCSqGSIb3DQEBCwUAA4IBAQCBcHPm
w7rjEyepG84zcz7eCCKF/m58ed5mQSEVscQ0M/YgEg1bBez1xZO6gC2dXohZm8k+
Un+qwgfp5jXn8RFwvuq5WiC8hOR1yXKBs660NEtjw1lXkXJ62h99vjZM/E4IKn3n
LMUYOB+X0jd0CyfOPl66T7rOk1sve0CeqD409zoY739m8XufyddNk78uzuBzq2Ym
xqQ3lMAKPbNLMQ1NRh2Rc5oTLvgNcmJO4ceP38y+qsQ5zXFBzyZ+DUfLQ2mPiObG
6di5/F/JHFAbWbvwxFQhYF+TqvyNIRtcWETCnOmDqBhFxkspKKJ9t+4LTJrMc0qI
btI+cLU2n/7EeLEp
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org