Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.cer (raw, json)
Hash identifier:          hXilfTzVwq4N2GzfnltJHw2/I7dbaN4sr9qWSpEquEs=
Subject key identifier:   55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       16D1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:01:40 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 155.0.0.0/16
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5841 (0x16d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:01:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367DA9BAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:10:96:ae:56:a4:39:55:91:ac:36:74:26:
                    74:75:9f:03:6c:63:13:c0:0d:87:90:d7:82:61:ff:
                    cf:59:b5:04:4f:91:2e:83:cd:90:d8:64:27:20:35:
                    61:93:fd:2a:64:ae:66:e4:36:55:03:1a:47:99:db:
                    78:5f:91:8f:d1:95:f4:de:5a:21:31:aa:32:cd:63:
                    d3:25:f4:9b:e5:c6:e0:33:ea:60:28:24:51:af:76:
                    2c:d6:36:65:34:de:8c:fb:18:bd:5f:a5:cb:14:5f:
                    a4:b3:b8:60:58:fe:a7:c1:3f:e3:67:c2:7d:2a:7b:
                    81:34:70:1f:f5:0f:ae:3c:3a:49:c9:b6:6e:f2:ae:
                    a1:c0:bd:8a:c9:83:2e:eb:a4:84:0a:a0:56:6d:7a:
                    f4:e7:7a:d3:fe:a4:8a:41:60:55:86:bf:c0:2f:18:
                    59:3d:aa:5a:45:6c:48:e6:7c:20:b0:32:9a:68:6f:
                    e4:9a:54:76:86:5d:15:92:13:25:54:a5:5e:44:b1:
                    20:07:ce:4b:6b:35:62:e1:7a:b3:a7:05:74:0b:cb:
                    44:ac:e0:02:02:de:60:68:8e:a4:9d:54:1e:e2:dc:
                    11:8f:96:64:03:09:05:58:19:e1:0d:94:54:62:62:
                    59:80:15:15:70:f1:4a:1f:4f:53:31:bd:4f:34:12:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:25:ee:37:74:06:54:40:d9:57:e4:09:fb:8e:01:32:a4:
         35:82:cf:62:2b:98:e5:82:85:aa:5c:7c:ac:7d:29:17:1a:f0:
         db:bb:14:fa:0f:3b:21:7d:d6:2f:c3:47:68:55:78:6a:b6:51:
         1a:9a:0e:0a:72:59:89:a7:95:38:95:6e:7f:95:07:2f:cb:7b:
         cb:82:07:8b:a1:ae:60:30:d3:0d:2e:76:7d:99:e7:f4:02:61:
         55:f3:f7:b8:db:77:8c:8d:fc:21:b7:c0:e8:5a:8d:9e:c5:2d:
         3c:e4:b4:f6:31:b6:f2:da:1c:af:c6:46:b7:9a:17:91:e6:b2:
         d1:d3:c5:21:92:b0:ce:ac:a4:3a:65:ac:f7:ca:e5:76:a3:32:
         b3:d4:ee:b6:01:12:86:fe:93:12:e7:5e:b3:41:82:fc:13:43:
         cd:4f:93:09:98:d1:91:26:eb:a5:a1:fd:2e:a3:d2:08:93:a7:
         a7:50:9b:32:97:4c:6c:0f:45:2b:c2:29:62:cf:d1:d6:be:65:
         c8:ab:32:36:b7:7f:1b:35:d5:e6:7d:8f:4b:8c:de:76:04:0a:
         dc:30:d7:d9:7a:bd:9d:9d:bb:ac:78:d2:26:c3:97:f7:7f:95:
         4a:ce:a2:81:a1:ec:e8:93:09:bf:7c:c1:22:b0:23:cf:fb:0d:
         76:d3:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----