Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/acTmnBikpPpiNxFnY9x8nZs3VvI.cer
File:                     acTmnBikpPpiNxFnY9x8nZs3VvI.cer (raw, json)
Hash identifier:          PPJAKZ3AaUJFvvvNakrYM70UGM5+MblRs5vhfmTjLJk=
Subject key identifier:   69:C4:E6:9C:18:A4:A4:FA:62:37:11:67:63:DC:7C:9D:9B:37:56:F2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1097
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 00:33:58 +0000
Certificate not after:    Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:    IP: 45.220.32.0/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4247 (0x1097)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:33:58 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=F3668CAAAR/serialNumber=69C4E69C18A4A4FA6237116763DC7C9D9B3756F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:32:c0:34:bd:78:19:bb:fa:00:53:b1:10:
                    b5:e2:fd:35:99:6a:db:9b:2c:58:7b:bc:06:f3:5b:
                    f1:13:61:be:c8:d5:59:72:a9:1b:ee:74:8f:ca:89:
                    fb:22:ac:6c:de:1c:ae:86:93:3e:f2:f6:a9:fa:20:
                    be:a8:0b:f1:d7:21:24:0b:25:8d:49:c2:d7:72:5a:
                    2c:b7:b6:bd:aa:d4:73:41:cf:3e:dd:1d:13:38:a7:
                    f2:a0:08:a6:6e:2d:8a:02:31:78:e3:96:80:72:aa:
                    0a:4c:c5:a3:aa:af:75:1a:e5:30:6c:de:91:10:18:
                    69:90:c6:5f:c1:f8:45:43:4c:9a:62:04:08:31:9a:
                    f3:c8:44:f9:e0:e5:5c:e6:d5:cf:d3:91:58:bf:44:
                    b1:b3:bf:5e:ac:fd:d2:3d:d5:31:4b:51:b2:28:36:
                    b9:90:39:fe:e6:19:2e:c5:60:58:19:68:71:31:ea:
                    f4:ce:dc:e1:5c:e0:86:bd:8a:30:64:47:f1:e6:d5:
                    10:48:68:b0:0f:22:c6:ef:30:30:fd:83:a7:a6:dd:
                    eb:f3:4f:1c:74:73:66:11:2b:1f:e7:9b:ed:d6:8b:
                    d8:47:d7:4c:7d:98:00:1e:52:bf:02:7c:e5:dc:60:
                    bc:93:71:12:bd:7c:17:99:18:2e:bc:b9:26:72:29:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:E6:9C:18:A4:A4:FA:62:37:11:67:63:DC:7C:9D:9B:37:56:F2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.220.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:af:57:d2:93:b4:69:ad:9e:f7:37:81:99:7c:1a:4d:43:
         bb:99:08:28:6a:cc:09:76:e0:2c:be:a2:be:78:95:c0:22:83:
         b8:b3:11:c6:61:29:b3:71:d4:80:99:06:3e:59:47:5b:aa:3c:
         55:c7:08:b0:16:f2:39:96:a6:cc:43:a2:48:e7:7a:1f:bd:c1:
         b7:ac:a1:3e:8c:8b:8f:7a:66:14:9a:ff:bd:ea:41:84:4e:bc:
         93:f2:e8:17:b4:b5:1e:3c:77:e9:19:77:88:35:a7:96:5a:d3:
         6b:4f:65:ba:7e:19:74:d2:b3:35:71:fc:35:a4:42:ef:ff:26:
         00:5f:f8:26:dd:ad:8d:66:8f:af:ba:78:62:d6:68:21:e8:e2:
         eb:69:ad:92:83:94:74:39:94:ea:10:01:1b:71:54:8b:a7:89:
         33:9a:3b:16:4e:5a:11:46:29:30:1d:19:a8:b5:a1:5e:d0:57:
         03:cf:4f:26:1f:f3:84:ff:8e:c4:02:e9:da:e4:5f:7d:28:9c:
         86:3e:d2:92:0c:a5:4b:99:60:15:7f:3f:21:f4:02:5e:9e:ce:
         c6:fe:4d:21:69:be:d9:e3:24:8f:24:88:c3:7a:d2:b1:f5:d8:
         69:59:63:ba:88:fb:a2:f0:05:a8:87:8e:20:70:f2:21:17:79:
         4c:ac:27:3c
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yMzAxMDEwMDMzNThaFw0yNDAzMzEwMDAwMDBaMEgx
EzARBgNVBAMMCkYzNjY4Q0FBQVIxMTAvBgNVBAUTKDY5QzRFNjlDMThBNEE0RkE2
MjM3MTE2NzYzREM3QzlEOUIzNzU2RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDU3zLANL14Gbv6AFOxELXi/TWZatubLFh7vAbzW/ETYb7I1VlyqRvu
dI/KifsirGzeHK6Gkz7y9qn6IL6oC/HXISQLJY1JwtdyWiy3tr2q1HNBzz7dHRM4
p/KgCKZuLYoCMXjjloByqgpMxaOqr3Ua5TBs3pEQGGmQxl/B+EVDTJpiBAgxmvPI
RPng5Vzm1c/TkVi/RLGzv16s/dI91TFLUbIoNrmQOf7mGS7FYFgZaHEx6vTO3OFc
4Ia9ijBkR/Hm1RBIaLAPIsbvMDD9g6em3evzTxx0c2YRKx/nm+3Wi9hH10x9mAAe
Ur8CfOXcYLyTcRK9fBeZGC68uSZyKUAzAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
acTmnBikpPpiNxFnY9x8nZs3VvIwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjY4Q0FBL0JGM0Qx
OEFBNUFBRjExRTk4RDFDRkU3N0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY2OENBQS9CRjNEMThBQTVBQUYxMUU5OEQxQ0ZFNzdGOEFFQTIy
OC9hY1RtbkJpa3BQcGlOeEZuWTl4OG5aczNWdkkubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQELdwgMA0GCSqGSIb3DQEBCwUAA4IBAQB9x69X0pO0aa2e
9zeBmXwaTUO7mQgoaswJduAsvqK+eJXAIoO4sxHGYSmzcdSAmQY+WUdbqjxVxwiw
FvI5lqbMQ6JI53ofvcG3rKE+jIuPemYUmv+96kGETryT8ugXtLUePHfpGXeINaeW
WtNrT2W6fhl00rM1cfw1pELv/yYAX/gm3a2NZo+vunhi1mgh6OLraa2Sg5R0OZTq
EAEbcVSLp4kzmjsWTloRRikwHRmotaFe0FcDz08mH/OE/47EAuna5F99KJyGPtKS
DKVLmWAVfz8h9AJens7G/k0hab7Z4ySPJIjDetKx9dhpWWO6iPui8AWoh44gcPIh
F3lMrCc8
-----END CERTIFICATE-----