Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer
File:                     XuBLf4yg0sW2I59B08fM98XuNU0.cer (raw, json)
Hash identifier:          A8IOwtEjkIEefuyDPNQ+wNsevvOfPAopetYyODARIAc=
Subject key identifier:   5E:E0:4B:7F:8C:A0:D2:C5:B6:23:9F:41:D3:C7:CC:F7:C5:EE:35:4D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1B6E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 29 May 2026 06:35:49 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.73.128.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7022 (0x1b6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: May 29 06:35:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F369974AAR, serialNumber=5EE04B7F8CA0D2C5B6239F41D3C7CCF7C5EE354D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:1d:df:ec:04:26:0b:30:2a:00:4f:93:87:
                    f3:fc:31:56:a0:f3:93:99:ea:f1:16:3e:b0:ed:78:
                    63:2c:b1:ad:31:2d:c7:02:fc:51:bd:d8:b9:76:f6:
                    ef:8e:b8:c3:0d:de:bf:83:87:2d:8b:8b:a1:f8:4d:
                    01:46:4e:e3:3a:8e:50:47:a1:01:29:cc:33:55:bc:
                    dd:57:7c:e8:a7:10:f9:ef:c3:ad:11:ed:c1:01:d9:
                    30:bb:59:3b:ac:ba:02:1b:26:57:22:11:ad:4d:13:
                    66:0e:f5:0f:8e:d4:c2:8c:2a:ac:38:5d:62:5a:66:
                    5f:f1:d1:71:b1:b5:2f:36:50:e4:c3:0c:a2:1b:fa:
                    3f:d2:1d:02:26:41:5c:dc:e8:71:11:20:80:cc:32:
                    6e:a7:80:71:59:d6:8f:7f:aa:ff:98:95:99:38:9c:
                    b9:47:12:05:64:66:34:15:29:9a:f9:35:1f:c6:4a:
                    bf:20:80:3e:e8:4f:4e:9a:49:cc:42:86:04:46:25:
                    d4:61:12:b5:dd:c3:61:f0:f5:9d:7f:75:8c:32:b6:
                    68:64:ee:fc:65:1e:67:27:c6:47:bc:1b:bf:09:c0:
                    a2:68:94:30:db:fe:aa:60:6a:42:69:f2:c7:b8:c3:
                    a6:09:8a:4f:45:0c:59:ec:cf:9b:77:c2:54:54:72:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E0:4B:7F:8C:A0:D2:C5:B6:23:9F:41:D3:C7:CC:F7:C5:EE:35:4D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.73.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:e2:5b:89:b6:76:ca:97:53:9a:b7:20:f6:ae:db:cb:5e:
         95:3e:70:3a:a4:1d:0d:89:24:77:be:22:54:48:7f:67:c7:b7:
         49:e3:dd:ed:82:f4:40:ef:57:02:f0:df:69:59:21:44:e7:65:
         49:4a:2a:31:29:dd:3a:3a:c8:b4:3d:17:c7:1d:99:3e:23:19:
         b9:1f:1e:82:11:88:96:a3:89:16:a3:9e:28:32:98:3b:34:a4:
         77:a7:83:91:64:d2:27:4b:c4:1b:16:1a:63:f2:22:f8:52:2e:
         c5:60:43:83:2a:fc:21:df:86:fa:9b:b4:47:ee:d3:1b:4e:d6:
         ab:d4:17:14:b0:51:c0:9f:7c:f0:1f:a1:a9:28:38:6d:91:ce:
         c3:95:16:c3:8c:c0:86:4f:19:1b:5d:a7:b4:b7:ec:a2:c0:24:
         d7:5b:6b:e4:1c:63:33:19:52:44:32:f9:2a:42:82:51:34:8e:
         b9:c4:63:e8:f5:bf:18:62:18:f2:80:e9:27:60:7a:88:0d:46:
         ef:06:79:e5:fc:a0:7b:25:b4:b2:95:a5:fd:a2:20:b4:35:f3:
         8d:3d:7a:48:7e:ca:8c:5e:b5:c1:84:84:94:a7:13:96:bd:86:
         4e:6c:d8:ee:65:d2:a4:5e:8a:bf:f2:f3:6f:ba:d3:51:e6:0b:
         0a:f2:02:09
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICG24wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjA1MjkwNjM1NDlaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjk5NzRBQVIxMTAvBgNVBAUTKDVFRTA0QjdGOENBMEQyQzVC
NjIzOUY0MUQzQzdDQ0Y3QzVFRTM1NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC42h3f7AQmCzAqAE+Th/P8MVag85OZ6vEWPrDteGMssa0xLccC/FG9
2Ll29u+OuMMN3r+Dhy2Li6H4TQFGTuM6jlBHoQEpzDNVvN1XfOinEPnvw60R7cEB
2TC7WTusugIbJlciEa1NE2YO9Q+O1MKMKqw4XWJaZl/x0XGxtS82UOTDDKIb+j/S
HQImQVzc6HERIIDMMm6ngHFZ1o9/qv+YlZk4nLlHEgVkZjQVKZr5NR/GSr8ggD7o
T06aScxChgRGJdRhErXdw2Hw9Z1/dYwytmhk7vxlHmcnxke8G78JwKJolDDb/qpg
akJp8se4w6YJik9FDFnsz5t3wlRUckXTAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
XuBLf4yg0sW2I59B08fM98XuNU0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjk5NzRBLzlEMjZC
RDk0NUIyODExRjFCMUJDNUFDNkNFMUQzOEIwLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY5OTc0QS85RDI2QkQ5NDVCMjgxMUYxQjFCQzVBQzZDRTFEMzhC
MC9YdUJMZjR5ZzBzVzJJNTlCMDhmTTk4WHVOVTAubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCpUmAMA0GCSqGSIb3DQEBCwUAA4IBAQAeweJbibZ2ypdT
mrcg9q7by16VPnA6pB0NiSR3viJUSH9nx7dJ493tgvRA71cC8N9pWSFE52VJSiox
Kd06Osi0PRfHHZk+Ixm5Hx6CEYiWo4kWo54oMpg7NKR3p4ORZNInS8QbFhpj8iL4
Ui7FYEODKvwh34b6m7RH7tMbTtar1BcUsFHAn3zwH6GpKDhtkc7DlRbDjMCGTxkb
Xae0t+yiwCTXW2vkHGMzGVJEMvkqQoJRNI65xGPo9b8YYhjygOknYHqIDUbvBnnl
/KB7JbSylaX9oiC0NfONPXpIfsqMXrXBhISUpxOWvYZObNjuZdKkXoq/8vNvutNR
5gsK8gIJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:51 2026 by rpki-client