Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
File:                     rHITs7LocPtTc8MpQCO1C-Vd5gw.cer (raw, json)
Hash identifier:          epf39cXpN7uafYKD3RB1wfxUdaRy5gH1YFkHCwjnZT8=
Subject key identifier:   AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1BEA
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 14 Sep 2026 11:36:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.119.156.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7146 (0x1bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Sep 14 11:36:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36894B8AR, serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:0e:30:24:ea:86:60:c8:7f:be:ca:c4:1e:
                    da:7f:c5:3a:56:44:c6:1f:6b:c5:a1:54:10:ac:61:
                    98:59:4a:d7:9d:a9:5e:45:ce:d8:3d:72:c9:da:79:
                    87:5b:a5:53:4a:f9:e3:db:9f:4a:f2:29:da:d2:51:
                    ca:9a:1f:2b:28:9f:af:4a:ff:a1:b7:30:61:a6:9f:
                    fb:96:c3:48:d6:8e:5c:2b:57:06:3d:26:b3:bf:27:
                    16:1e:ea:39:c6:a4:6f:e9:42:cc:a2:e0:92:8a:cf:
                    60:d0:bf:04:b2:bb:08:d2:de:e4:64:56:68:96:75:
                    69:7a:c9:d3:e9:c4:c7:95:13:1c:7f:f9:b1:7e:ea:
                    03:cd:9b:74:7c:70:3b:35:58:0a:67:b8:bf:c7:aa:
                    68:2c:69:d0:e5:3e:80:4f:02:6e:1a:5c:57:15:dd:
                    ee:9a:fe:ab:91:00:42:90:28:d6:1e:13:de:0e:db:
                    4a:6b:cc:52:d6:32:39:66:6f:43:6a:47:70:7b:e5:
                    71:5d:c9:b8:9d:7b:ac:b8:28:cb:c7:7e:35:5f:9d:
                    d4:01:d1:32:a4:33:95:3e:0b:df:a3:8e:8d:80:0a:
                    02:f5:9a:96:48:64:f8:c8:b1:b7:1e:b5:c2:54:76:
                    42:8f:da:cf:d5:ae:e7:0e:a5:fc:fa:47:bb:d0:d1:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:61:6e:08:ad:83:c4:88:78:34:33:6a:af:ee:48:fd:05:29:
         a7:4b:ad:12:63:59:bb:fc:69:74:fa:41:c0:aa:5e:45:97:1c:
         d2:93:a8:26:fb:f8:de:34:ed:6e:b5:24:28:e0:65:cd:56:46:
         00:24:6f:ce:5f:fd:a1:71:d3:6c:d8:ea:37:90:69:bd:ad:d4:
         8d:2f:6f:fa:2a:34:39:60:72:25:a5:40:15:b2:f1:34:b5:74:
         72:7a:25:f1:91:60:69:aa:98:a5:8c:f3:cc:2e:08:ac:58:73:
         8e:6e:8d:a2:dc:98:c8:29:2f:65:51:c3:31:72:6b:a9:ae:6a:
         30:fa:07:00:1d:06:dd:8c:b4:05:51:44:90:45:28:44:6e:d7:
         43:db:36:ce:c5:d7:ce:d6:cf:9b:18:20:27:b4:ed:bf:2e:dc:
         4a:54:38:3c:e9:0f:8b:59:c1:3e:73:be:f6:2f:4d:8b:98:b7:
         4a:ab:09:42:fd:a5:04:80:a7:c5:c9:c4:d1:96:17:b1:58:8d:
         16:42:c7:f2:2e:35:1c:ae:5e:e3:d5:95:4a:b2:e9:c8:ae:9f:
         91:9a:73:61:cb:a5:00:8a:48:09:b6:4f:92:9b:57:c8:71:f2:
         f8:29:6a:a0:17:ea:4d:3b:09:18:9b:9b:6a:39:eb:32:cb:d7:
         bb:af:bd:a0
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICG+owDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjA5MTQxMTM2NTJaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjg5NEI4QVIxMTAvBgNVBAUTKEFDNzIxM0IzQjJFODcwRkI1
MzczQzMyOTQwMjNCNTBCRTU1REU2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDNuA4wJOqGYMh/vsrEHtp/xTpWRMYfa8WhVBCsYZhZStedqV5Fztg9
csnaeYdbpVNK+ePbn0ryKdrSUcqaHyson69K/6G3MGGmn/uWw0jWjlwrVwY9JrO/
JxYe6jnGpG/pQsyi4JKKz2DQvwSyuwjS3uRkVmiWdWl6ydPpxMeVExx/+bF+6gPN
m3R8cDs1WApnuL/HqmgsadDlPoBPAm4aXFcV3e6a/quRAEKQKNYeE94O20przFLW
Mjlmb0NqR3B75XFdybide6y4KMvHfjVfndQB0TKkM5U+C9+jjo2ACgL1mpZIZPjI
sbcetcJUdkKP2s/VrucOpfz6R7vQ0fXjAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
rHITs7LocPtTc8MpQCO1C+Vd5gwwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjg5NEI4LzhFRjMw
QUMyQjAzMDExRjE4MDY2MTBDQkNFMUQzOEIwLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY4OTRCOC84RUYzMEFDMkIwMzAxMUYxODA2NjEwQ0JDRTFEMzhC
MC9ySElUczdMb2NQdFRjOE1wUUNPMUMtVmQ1Z3cubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCoHecMA0GCSqGSIb3DQEBCwUAA4IBAQCoYW4IrYPEiHg0
M2qv7kj9BSmnS60SY1m7/Gl0+kHAql5FlxzSk6gm+/jeNO1utSQo4GXNVkYAJG/O
X/2hcdNs2Oo3kGm9rdSNL2/6KjQ5YHIlpUAVsvE0tXRyeiXxkWBpqpiljPPMLgis
WHOObo2i3JjIKS9lUcMxcmuprmow+gcAHQbdjLQFUUSQRShEbtdD2zbOxdfO1s+b
GCAntO2/LtxKVDg86Q+LWcE+c772L02LmLdKqwlC/aUEgKfFycTRlhexWI0WQsfy
LjUcrl7j1ZVKsunIrp+RmnNhy6UAikgJtk+Sm1fIcfL4KWqgF+pNOwkYm5tqOesy
y9e7r72g
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:38:42 2026 by rpki-client