Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.cer (raw, json)
Hash identifier:          8QyY3ZvyekxRBhkUebBUIzuFpVdTyEyvTK+H9jkuq1Q=
Subject key identifier:   C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1731
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:20:03 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 156.192.0.0/11
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5937 (0x1731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:20:03 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36B49FAAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:e0:cf:2e:6a:dc:91:79:a6:24:24:72:04:
                    8f:7f:e9:3a:99:81:df:20:57:b2:c8:f9:ad:eb:ff:
                    b9:ab:20:aa:08:97:11:ae:0f:bd:bf:27:8f:49:1b:
                    bf:54:99:b9:f4:a3:ab:d3:fc:ef:64:91:fb:c4:0c:
                    e7:59:da:2c:53:ed:c2:b7:16:8e:82:a9:3f:02:ae:
                    27:7e:4e:cc:dc:fb:d5:22:9c:2d:f3:d8:94:ae:2e:
                    d2:36:97:4b:31:ee:c4:7f:32:73:5a:47:37:6e:9a:
                    70:46:c6:06:0f:a9:d0:3b:ae:e5:ba:8e:d1:84:55:
                    d4:8b:e5:33:9b:a4:58:e9:0d:66:a9:8e:df:47:52:
                    1a:f8:ff:44:74:8c:b4:d5:0a:c9:89:f4:3a:f6:bc:
                    eb:7c:17:b4:16:fe:3c:88:a4:cd:66:08:e0:11:70:
                    1b:e8:77:56:19:97:ba:a9:c9:36:f5:7f:5b:12:9d:
                    c6:68:ac:12:40:82:5b:35:7b:36:fa:d8:2d:ab:fe:
                    98:2a:03:f1:2b:85:7f:cd:78:8d:fc:53:d5:de:54:
                    cc:bb:18:89:e5:a3:ec:6a:49:75:17:45:e0:59:e0:
                    0a:0a:1c:35:91:17:fd:01:79:35:7c:4d:0b:d3:8f:
                    16:25:8d:31:c5:5a:8c:5c:ff:23:f7:0e:21:85:8b:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:e1:99:02:5a:5d:58:0e:55:b7:14:e2:66:9d:21:ab:c6:
         84:3b:86:cc:6a:7d:22:e7:ed:e8:b7:58:97:80:cc:a7:ef:1f:
         61:81:cd:45:93:ad:90:8a:b3:1e:e8:c3:54:aa:38:93:cc:54:
         b4:51:82:2d:c7:b0:77:6d:f2:5f:b4:ee:e1:e4:5b:2a:54:5c:
         68:0b:7c:dc:55:8a:6b:9f:99:85:86:60:45:aa:5e:85:b5:cd:
         d6:76:24:e3:3c:70:7a:a6:82:86:73:6d:1e:8e:5c:8c:7f:2b:
         d7:1f:27:c3:9b:04:17:c2:e9:b6:ed:2f:fd:57:3a:be:92:f0:
         7d:68:1b:58:98:93:84:2c:cd:08:d7:fb:f3:26:c6:90:f2:3b:
         3b:11:a4:4d:dd:79:fc:06:65:df:d1:12:49:fb:c8:e0:a6:02:
         83:ff:35:12:ba:2a:cc:5c:58:33:27:1d:7c:05:54:d4:99:16:
         6e:f7:77:4e:cd:87:b2:07:2c:a3:68:41:5c:91:77:29:e5:b6:
         3c:4b:c4:2e:a7:97:0a:1f:1e:fc:e5:ff:3a:d3:b5:70:af:dc:
         eb:dd:bb:14:c0:03:34:dc:32:25:be:6b:07:bb:af:12:8c:4c:
         56:aa:5c:41:5b:4e:71:e3:9d:f2:db:8f:34:0b:e4:99:2c:57:
         0a:aa:1c:c6
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICFzEwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTIwMDNaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkI0OUZBQVIxMTAvBgNVBAUTKEM0RjNFMkVBQkRFOUUzOTAx
QURCQkMzMUM5RjI1MzVDREUzQjFDNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC74eDPLmrckXmmJCRyBI9/6TqZgd8gV7LI+a3r/7mrIKoIlxGuD72/
J49JG79Umbn0o6vT/O9kkfvEDOdZ2ixT7cK3Fo6CqT8Crid+Tszc+9UinC3z2JSu
LtI2l0sx7sR/MnNaRzdumnBGxgYPqdA7ruW6jtGEVdSL5TObpFjpDWapjt9HUhr4
/0R0jLTVCsmJ9Dr2vOt8F7QW/jyIpM1mCOARcBvod1YZl7qpyTb1f1sSncZorBJA
gls1ezb62C2r/pgqA/ErhX/NeI38U9XeVMy7GInlo+xqSXUXReBZ4AoKHDWRF/0B
eTV8TQvTjxYljTHFWoxc/yP3DiGFi3E/AgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
xPPi6r3p45Aa27wxyfJTXN47HG8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI0OUZBL0I1NDQ4
NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCNDlGQS9CNTQ0ODQ1MjFDMUMxMUU2OUY3Qzc1MENGOEFFQTIy
OC94UFBpNnIzcDQ1QWEyN3d4eWZKVFhONDdIRzgubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMFnMAwDQYJKoZIhvcNAQELBQADggEBAG1f4ZkCWl1YDlW3
FOJmnSGrxoQ7hsxqfSLn7ei3WJeAzKfvH2GBzUWTrZCKsx7ow1SqOJPMVLRRgi3H
sHdt8l+07uHkWypUXGgLfNxVimufmYWGYEWqXoW1zdZ2JOM8cHqmgoZzbR6OXIx/
K9cfJ8ObBBfC6bbtL/1XOr6S8H1oG1iYk4QszQjX+/MmxpDyOzsRpE3defwGZd/R
Ekn7yOCmAoP/NRK6KsxcWDMnHXwFVNSZFm73d07Nh7IHLKNoQVyRdynltjxLxC6n
lwofHvzl/zrTtXCv3OvduxTAAzTcMiW+awe7rxKMTFaqXEFbTnHjnfLbjzQL5Jks
VwqqHMY=
-----END CERTIFICATE-----