Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
File:                     bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer (raw, json)
Hash identifier:          0HM9rSdpGhihzCyXc6sFXeBpb9iKXfxpl8pYG2vvchA=
Subject key identifier:   6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       165E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:39:14 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 156.160.0.0/11
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5726 (0x165e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:39:14 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36432B6AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:d1:ba:c4:55:ea:b5:c0:b1:80:6c:be:a5:
                    77:98:75:86:9a:9f:da:d6:0e:ce:2e:ad:f7:c3:d6:
                    c3:c3:57:ca:23:8c:6f:ed:55:2f:70:d8:9f:c0:3d:
                    f8:21:9d:f1:8c:17:33:d9:0d:7c:82:08:7c:bc:08:
                    51:5a:ca:f6:58:b9:05:b9:52:f6:a8:67:31:ed:71:
                    f7:98:10:ea:03:df:dc:9c:7e:0e:85:c4:a3:df:a4:
                    4f:49:91:98:41:90:a7:c1:a5:ee:51:ee:7b:e7:29:
                    55:68:72:88:b7:b3:cc:c5:bf:66:60:94:2a:85:9b:
                    11:88:35:1a:e2:f6:7c:42:0d:cc:12:bf:93:96:c8:
                    47:f5:41:6c:f6:26:3c:61:90:ea:c5:50:90:8d:0a:
                    9d:fd:90:93:b7:ac:04:a4:a8:0b:ea:db:10:71:02:
                    3d:47:dd:7e:79:19:36:98:a2:a7:4b:ff:74:e2:76:
                    16:e4:0c:6e:9d:1b:67:1a:bc:46:67:b8:94:ac:f8:
                    09:d0:ba:96:1b:08:4f:e7:35:71:69:74:f0:57:53:
                    07:83:c1:f2:4c:ee:5d:15:f8:15:22:89:2f:cd:d2:
                    d2:fc:26:19:13:d3:43:bb:a2:c6:88:14:43:a2:d4:
                    5d:fc:89:bb:4b:ac:d3:86:88:23:d0:90:0e:fa:d9:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:e0:bb:67:b4:ad:f7:f4:92:21:58:df:93:1f:d0:8a:d3:
         a0:f1:b6:be:14:5c:56:62:ab:ba:ec:93:bd:b8:d0:63:b5:70:
         eb:eb:02:78:ee:70:98:5e:09:cd:d3:b6:6a:a1:d3:e4:1e:0d:
         a0:c8:a1:ee:27:be:43:b3:0e:f0:ce:e4:f0:03:04:46:10:65:
         f1:30:d5:83:87:b3:33:58:8a:ec:c1:5b:6e:68:e8:65:b2:b0:
         ca:2d:35:e8:cb:9b:5e:ac:99:a8:50:83:ab:47:dd:82:07:e3:
         c7:21:40:6c:7f:01:b3:af:3f:2b:92:cc:30:cf:75:aa:3a:70:
         26:1e:9a:93:3c:1e:4a:34:e5:c1:37:b5:d1:d7:99:aa:7d:c8:
         e5:0a:47:2c:6d:bb:da:fb:12:ef:9f:88:92:0d:c8:e7:ac:e6:
         1c:cc:80:18:12:e1:ab:00:04:9f:55:58:c4:08:7e:e2:5d:4e:
         72:f6:fc:c4:28:9d:63:79:4b:26:80:87:60:a9:c4:36:26:66:
         7f:14:ed:bf:16:bd:85:a5:0d:41:6f:b6:b3:c0:15:05:2d:55:
         fe:96:16:6b:bf:4e:5e:16:69:68:c1:49:6b:c1:35:22:20:75:
         5e:77:c2:3f:ec:24:64:55:a2:3e:19:58:90:0f:94:00:87:e9:
         b2:b9:8d:82
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICFl4wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMDM5MTRaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjQzMkI2QVIxMTAvBgNVBAUTKDZFQTk4MDEzRUUxMEJGQjUz
QTMwMjczQjZDNENGQjVFQ0U3NDYxOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDNYtG6xFXqtcCxgGy+pXeYdYaan9rWDs4urffD1sPDV8ojjG/tVS9w
2J/APfghnfGMFzPZDXyCCHy8CFFayvZYuQW5UvaoZzHtcfeYEOoD39ycfg6FxKPf
pE9JkZhBkKfBpe5R7nvnKVVocoi3s8zFv2ZglCqFmxGINRri9nxCDcwSv5OWyEf1
QWz2JjxhkOrFUJCNCp39kJO3rASkqAvq2xBxAj1H3X55GTaYoqdL/3TidhbkDG6d
G2cavEZnuJSs+AnQupYbCE/nNXFpdPBXUweDwfJM7l0V+BUiiS/N0tL8JhkT00O7
osaIFEOi1F38ibtLrNOGiCPQkA762UjXAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
bqmAE+4Qv7U6MCc7bEz7Xs50YYswHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjQzMkI2LzBFOTQx
ODRBQjc1OTExRURBMTVGMkM5MEYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY0MzJCNi8wRTk0MTg0QUI3NTkxMUVEQTE1RjJDOTBGMTIyMjQ2
OC9icW1BRS00UXY3VTZNQ2M3YkV6N1hzNTBZWXMubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMFnKAwDQYJKoZIhvcNAQELBQADggEBAB+q4LtntK339JIh
WN+TH9CK06Dxtr4UXFZiq7rsk7240GO1cOvrAnjucJheCc3Ttmqh0+QeDaDIoe4n
vkOzDvDO5PADBEYQZfEw1YOHszNYiuzBW25o6GWysMotNejLm16smahQg6tH3YIH
48chQGx/AbOvPyuSzDDPdao6cCYempM8Hko05cE3tdHXmap9yOUKRyxtu9r7Eu+f
iJINyOes5hzMgBgS4asABJ9VWMQIfuJdTnL2/MQonWN5SyaAh2CpxDYmZn8U7b8W
vYWlDUFvtrPAFQUtVf6WFmu/Tl4WaWjBSWvBNSIgdV53wj/sJGRVoj4ZWJAPlACH
6bK5jYI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:35:08 2025 by rpki-client