Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
File:                     kz9w25gXuEj4wIYagksQEX3FGSw.cer (raw, json)
Hash identifier:          ixKdzohbtFaSnRdbvm0J7Dhw6XQ9IlksdzDVlPLNcz0=
Subject key identifier:   93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1351
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:29:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 139.26.0.0/16
                          IP: 164.160.68.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4945 (0x1351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:29:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:00:0e:a6:a8:39:fe:99:8d:5b:57:79:81:
                    4a:9f:c2:ef:ea:2f:6f:3d:94:39:fc:9e:9a:50:6e:
                    d5:5c:d5:61:03:ce:10:06:76:0d:f0:e1:65:42:4f:
                    b2:21:79:c6:ee:2d:83:de:83:88:0f:2e:e6:8a:1a:
                    58:42:a5:8e:78:28:36:61:ba:36:0c:44:e1:71:0c:
                    aa:d6:56:85:1d:49:2f:b4:2a:8f:01:cd:08:c0:94:
                    ad:09:c6:af:b2:8c:e6:ea:f0:1f:91:b8:e9:91:8f:
                    f2:e6:6b:10:ee:d5:a5:bb:c6:e4:d6:83:f6:27:ba:
                    7d:28:99:6a:32:71:f4:ed:cc:ff:76:e7:43:1b:38:
                    6b:b7:0c:e5:8f:d6:49:4c:39:41:ea:56:79:ec:70:
                    fb:18:81:c2:96:27:71:57:55:d7:cd:37:ef:6c:bf:
                    8d:3d:e4:b6:7a:83:64:87:65:9b:bc:54:9c:8a:18:
                    00:69:a7:33:3c:ac:bc:d1:13:98:14:58:f0:5e:5d:
                    aa:0a:d2:07:33:a9:01:15:fb:64:ca:6b:c0:e3:73:
                    a0:83:56:af:28:49:3d:ab:01:93:3e:9f:f2:fa:09:
                    53:a1:96:f1:34:cf:33:4f:82:b7:a2:d4:02:d5:67:
                    7a:cc:3b:fd:97:2c:c5:52:6c:8f:e8:6c:83:88:96:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.26.0.0/16
                  164.160.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d7:95:17:2c:57:c0:1e:98:f3:04:27:e2:56:19:9e:c2:36:
         72:99:3b:9e:25:0c:32:a2:55:26:ec:7d:9d:f5:67:6d:5e:e5:
         62:c4:b9:5d:26:55:6a:e7:56:6b:ae:58:c1:a6:89:c1:43:9f:
         42:5c:1f:45:8c:3d:e1:ca:f6:2a:f1:25:e9:93:79:85:7c:fd:
         7d:6a:9d:e0:6f:39:cf:e8:8f:a4:ab:26:2e:c7:6a:6b:72:69:
         f5:86:6c:b9:cc:04:2e:a8:4a:cd:d1:5c:5a:9b:ae:1f:39:4c:
         a8:fe:43:5f:a7:d9:a4:5e:a9:49:ac:df:e1:76:c5:4d:6f:77:
         75:f9:c0:5d:de:97:1c:4a:dc:bf:be:88:f2:10:0d:a6:86:50:
         e8:84:0a:15:99:7d:b6:9e:e2:47:08:a0:29:46:62:63:57:ec:
         17:17:91:07:e2:ea:87:64:f3:95:67:b0:26:2f:9d:16:40:c3:
         f7:da:21:49:a3:1a:4c:da:c8:ea:fb:6e:4d:c1:4f:b0:c0:72:
         4a:a7:a0:ba:09:d4:48:f9:5c:8c:52:89:01:6c:a2:13:37:35:
         8a:a1:f4:78:18:c8:b3:df:33:ed:67:96:0d:32:c8:9f:12:a7:
         88:ae:cd:a2:eb:18:a8:87:22:34:4a:9f:78:94:01:29:a2:ac:
         af:55:4c:88
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgICE1EwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMDI5MzFaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjQzMjFBQVIxMTAvBgNVBAUTKDkzM0Y3MERCOTgxN0I4NDhG
OEMwODYxQTgyNEIxMDExN0RDNTE5MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC3hAAOpqg5/pmNW1d5gUqfwu/qL289lDn8nppQbtVc1WEDzhAGdg3w
4WVCT7IhecbuLYPeg4gPLuaKGlhCpY54KDZhujYMROFxDKrWVoUdSS+0Ko8BzQjA
lK0Jxq+yjObq8B+RuOmRj/LmaxDu1aW7xuTWg/Ynun0omWoycfTtzP9250MbOGu3
DOWP1klMOUHqVnnscPsYgcKWJ3FXVdfNN+9sv4095LZ6g2SHZZu8VJyKGABppzM8
rLzRE5gUWPBeXaoK0gczqQEV+2TKa8Djc6CDVq8oST2rAZM+n/L6CVOhlvE0zzNP
grei1ALVZ3rMO/2XLMVSbI/obIOIlsB/AgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQU
kz9w25gXuEj4wIYagksQEX3FGSwwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjQzMjFBLzQ5M0U0
NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY0MzIxQS80OTNFNDYyRUJDREExMUVEQTFGQjBGQjBGMTIyMjQ2
OC9rejl3MjVnWHVFajR3SVlhZ2tzUUVYM0ZHU3cubWZ0MCQGCCsGAQUFBwEHAQH/
BBUwEzARBAIAATALAwMAixoDBAKkoEQwDQYJKoZIhvcNAQELBQADggEBAKrXlRcs
V8AemPMEJ+JWGZ7CNnKZO54lDDKiVSbsfZ31Z21e5WLEuV0mVWrnVmuuWMGmicFD
n0JcH0WMPeHK9irxJemTeYV8/X1qneBvOc/oj6SrJi7HamtyafWGbLnMBC6oSs3R
XFqbrh85TKj+Q1+n2aReqUms3+F2xU1vd3X5wF3elxxK3L++iPIQDaaGUOiEChWZ
fbae4kcIoClGYmNX7BcXkQfi6odk85VnsCYvnRZAw/faIUmjGkzayOr7bk3BT7DA
ckqnoLoJ1Ej5XIxSiQFsohM3NYqh9HgYyLPfM+1nlg0yyJ8Sp4iuzaLrGKiHIjRK
n3iUASmirK9VTIg=
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org