Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.cer (raw, json)
Hash identifier:          St5eQK6h7/OF9EPwg9CEGhLxTk10Tbh0kUddLPHuJEg=
Subject key identifier:   8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       16FE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:10:12 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 69.67.32.0/20
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5886 (0x16fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:10:12 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3696E5FAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:1d:b5:af:8a:52:3a:38:bf:46:88:35:27:
                    98:e3:02:0f:7d:d1:68:fb:19:7d:b9:5b:21:6f:1b:
                    60:6d:ce:83:31:ee:ba:db:90:9c:8f:7e:12:32:01:
                    22:6f:61:60:1f:df:80:b0:b7:94:63:1d:11:68:e0:
                    64:23:e9:ad:ab:ea:5c:58:73:11:0b:19:ca:60:0b:
                    eb:e1:5e:ec:67:78:3e:d3:ba:5a:3f:3c:8b:c1:6c:
                    bd:da:d7:1b:ea:3b:97:f3:ec:3c:13:0b:0c:ba:88:
                    24:a1:d7:ba:ef:d6:4c:4b:79:80:68:ea:e0:d5:d6:
                    28:c8:f9:99:07:84:ad:8f:f1:43:9b:6b:0b:d2:d5:
                    b4:bb:65:bf:15:f2:4d:eb:92:3d:27:1e:29:9c:b4:
                    f9:81:5d:5f:a2:ec:82:c5:e6:ab:7a:7a:6e:bc:73:
                    5a:97:ca:4d:67:15:f8:03:d0:77:fa:5c:56:0f:d1:
                    63:5f:89:dc:b9:98:5a:a1:8f:41:15:51:65:ad:15:
                    aa:2c:aa:ac:31:5d:50:d1:85:c0:cb:d5:10:14:b1:
                    a0:9c:f2:a3:e9:38:c7:b9:43:20:ad:62:df:21:21:
                    30:61:73:a8:fb:8c:a0:8f:bc:a0:db:40:61:95:04:
                    f7:cb:0a:46:f4:e9:c9:39:dc:2c:8f:34:23:88:01:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:9b:a4:91:4f:a2:f3:27:ee:6e:3a:d6:f9:23:68:65:ea:
         f2:ad:c3:75:1e:f2:3d:4d:d8:07:46:1b:b2:e5:08:f2:c7:c9:
         a3:71:4a:d7:69:b6:cf:c9:a4:b9:12:9d:a7:f9:10:b7:60:a2:
         d5:3d:6a:62:7a:63:da:3c:72:22:1c:bd:d1:7f:86:d2:f4:3e:
         e4:97:fc:8f:89:88:7c:6c:15:54:05:49:25:ee:50:e6:97:e4:
         a4:6b:4d:27:c9:0b:67:69:0e:be:31:de:be:e6:55:30:f7:cf:
         78:c1:30:6a:c5:23:4b:06:f7:ae:17:c2:d8:85:a4:3f:91:a4:
         d1:74:cd:f1:6f:74:dc:4a:5d:b4:15:d8:25:7c:8b:26:74:f1:
         45:55:a4:55:3c:a3:04:3b:c4:ce:bf:f0:c9:88:b6:be:e2:6b:
         1b:06:5a:54:cb:c9:d1:25:25:db:01:54:b4:77:eb:d6:69:e9:
         1a:b2:98:eb:9a:38:e5:ab:27:76:de:9b:b6:07:2e:ca:b6:af:
         ce:71:ae:f9:57:69:b7:eb:f6:19:15:77:a7:14:31:ec:47:99:
         6d:11:c0:9a:21:61:36:36:36:85:44:6c:e4:98:51:01:bc:c9:
         ed:a9:48:d8:fa:23:07:5c:21:e8:3b:66:df:e8:cd:16:91:28:
         61:b0:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----