Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
File:                     W6zoN39KxIJPmq_HsThFyWtgsko.cer (raw, json)
Hash identifier:          BguGmdwYhtx2wrw9JdWwVpnx8xONDtpDM16EFuzBoJA=
Subject key identifier:   5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1654
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:37:17 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 165.16.224.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5716 (0x1654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:37:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F363E214AR, serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:3e:39:eb:0e:ee:1f:a3:3f:c3:ee:62:56:
                    e9:94:83:5d:fc:44:91:2a:0a:7a:7c:b5:89:48:7b:
                    60:b7:b7:1d:fe:1c:9f:81:fc:90:c5:d1:fb:c6:a7:
                    5f:b8:d4:46:23:e9:4e:10:e6:f9:d9:0a:dc:01:ef:
                    a4:e7:ac:68:0d:62:ec:13:09:bd:aa:d6:92:ea:87:
                    3a:6f:ef:26:72:6d:96:92:de:f4:1b:25:58:39:11:
                    40:21:cd:00:b6:c4:52:45:bd:e7:9c:45:36:b8:84:
                    68:67:1a:e1:22:db:c2:22:72:ef:c5:be:88:50:95:
                    cd:b8:56:5d:52:be:0c:75:95:cd:b8:2a:95:20:fe:
                    f8:60:db:3c:0f:19:7a:b6:ab:80:79:0b:68:5a:98:
                    a0:67:0d:b7:b3:84:04:a0:db:0d:7f:d3:17:b1:ce:
                    80:2a:46:cd:ea:05:28:b5:b7:4d:aa:b1:5d:f8:1b:
                    f3:31:ac:48:41:2e:04:59:dd:dc:c8:f9:bf:3a:ff:
                    e5:74:d7:89:8e:2c:42:83:2a:bf:ef:64:2f:38:77:
                    96:0c:1d:17:6b:86:e0:b0:d2:c8:e3:da:d7:f6:ea:
                    b6:98:5e:81:c9:af:45:40:6e:8e:71:07:46:cc:3d:
                    ff:26:d8:16:aa:b3:37:11:94:49:ae:0b:b7:ae:d2:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:10:77:c6:08:1e:8d:0e:0c:b8:2a:1e:94:0f:87:6c:4b:fb:
         c4:20:21:03:92:d1:4a:8e:b7:75:15:be:b6:8b:23:ac:ff:9d:
         80:53:bb:85:11:87:c5:55:bd:db:ed:e2:da:57:e8:f7:76:36:
         d0:0e:cb:6d:40:3d:ea:1a:46:ef:fb:2f:f1:c8:5f:c3:0d:cb:
         e1:14:67:94:0e:f2:3c:cd:e6:4c:d8:64:9f:7b:9e:62:68:40:
         86:6c:20:2c:84:48:5b:a3:3a:a2:cd:39:a8:b9:e7:bd:ab:0b:
         e3:b7:30:0b:d5:85:98:b8:dd:41:ab:d3:57:49:0e:18:2c:0f:
         cc:e7:e2:7e:e6:1b:a3:97:0d:ce:32:92:9e:06:9a:3c:9e:f2:
         df:59:88:b1:f1:cc:5f:b3:be:6a:e1:d6:32:2c:9c:bb:ac:58:
         de:f1:e1:6c:e5:fb:b1:50:39:b6:66:84:33:ad:33:cf:cd:29:
         d6:16:fb:2e:c2:c3:28:13:f8:52:68:fb:23:7f:10:42:31:d3:
         4b:be:59:68:20:5b:de:e7:70:5b:31:17:13:68:8b:1b:f9:be:
         70:b7:bc:bd:9d:b1:55:22:57:0f:a3:9c:44:ee:9a:8a:82:54:
         da:62:f5:00:ee:60:89:57:81:d5:81:26:a0:1a:84:b3:88:e4:
         eb:33:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:58 2025 by rpki-client