Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
File:                     TpKdLt9gOvd04YalOhkf_QUMzgY.cer (raw, json)
Hash identifier:          8HsOduUjlAwR/wPBsu99YZyhh0Clg+pf2NbguGV+Olk=
Subject key identifier:   4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1BA5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 15 Jul 2026 13:42:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.224.0.0/15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7077 (0x1ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jul 15 13:42:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362E4AFAR, serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:f7:60:fc:bb:d0:c9:91:28:f0:5b:b6:3c:
                    e9:f0:1f:06:ac:ce:c5:9e:45:9b:29:4b:73:c1:20:
                    a4:4d:16:a7:08:21:47:bf:7e:d4:16:03:8e:74:79:
                    24:9b:6d:7f:30:a6:d2:31:81:8f:10:e2:45:49:3b:
                    9a:eb:b3:f2:77:97:ca:72:0a:6b:2c:02:3f:22:a6:
                    cd:ae:e1:2c:e9:4f:bf:e1:28:53:47:bf:6c:ec:a0:
                    4b:57:e7:4a:88:84:ea:8c:1a:40:29:8b:78:bd:20:
                    db:1a:9e:9d:b8:26:51:c8:33:e9:9b:26:e2:43:29:
                    0f:95:3a:53:7f:b3:21:56:52:4f:42:07:72:fe:e1:
                    3a:bc:37:4f:58:df:c2:ff:c4:b1:0a:93:f4:cd:bd:
                    e9:87:e5:46:d6:a2:78:f6:31:7a:e9:f8:14:67:80:
                    b5:4b:c6:7a:f1:3d:f9:ef:b3:e9:23:e1:f5:e4:9f:
                    79:f0:40:58:85:06:3f:23:df:50:b7:2e:06:ae:28:
                    08:35:3b:3d:0a:a4:d0:9c:46:ea:2a:fa:c3:b6:a1:
                    29:a3:8a:a7:f0:c5:29:d5:6f:d0:86:a9:59:a5:1d:
                    a2:13:1f:fd:63:ad:24:3f:25:36:bd:96:21:1c:a2:
                    1a:13:60:61:41:b3:df:e1:e1:6b:cf:a4:84:40:f5:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.224.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:28:57:92:aa:a4:2f:16:0c:dd:28:b5:de:06:f3:52:cc:
         9b:59:66:3a:54:3e:e4:2a:00:38:bc:d3:aa:fa:89:ac:3a:99:
         c5:fb:70:ba:e2:80:77:cb:f4:e2:3d:60:23:d6:7f:4b:c8:85:
         d0:db:70:11:90:e7:34:f8:33:36:4b:73:91:54:a1:9e:fb:89:
         df:e1:d3:f7:47:ca:6b:55:bd:81:9c:4e:f1:12:ee:f7:7d:c5:
         29:0f:e4:cb:5a:66:57:4e:a4:c2:7a:8c:c3:d6:f4:cb:74:e8:
         84:1d:2a:f6:7b:9d:ee:7c:18:82:77:2b:22:57:78:7c:20:05:
         2e:df:36:a7:b4:2f:b6:2c:31:29:2b:5f:66:e3:9e:c3:95:a0:
         aa:6f:77:5a:97:96:34:b0:1f:69:b7:5c:36:22:6a:08:27:3f:
         7d:05:5a:50:d7:bb:90:fe:49:1d:64:bd:6e:ac:4c:76:4a:0f:
         25:6e:a7:3e:5d:d1:a4:d3:d5:c0:d5:7e:da:9d:1d:8b:24:f3:
         cf:3d:8c:0c:0b:87:ec:a6:d3:c4:26:d4:51:9c:60:c2:93:a7:
         78:7e:a9:c2:b8:97:cc:e3:d7:97:82:05:38:ec:49:19:0e:a5:
         2f:43:3a:e7:a9:46:c5:08:cd:85:e4:3a:37:10:fe:ba:d7:70:
         94:70:17:51
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICG6UwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjA3MTUxMzQyNTBaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjJFNEFGQVIxMTAvBgNVBAUTKDRFOTI5RDJFREY2MDNBRjc3
NEUxODZBNTNBMTkxRkZEMDUwQ0NFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQClifdg/LvQyZEo8Fu2POnwHwaszsWeRZspS3PBIKRNFqcIIUe/ftQW
A450eSSbbX8wptIxgY8Q4kVJO5rrs/J3l8pyCmssAj8ips2u4SzpT7/hKFNHv2zs
oEtX50qIhOqMGkApi3i9INsanp24JlHIM+mbJuJDKQ+VOlN/syFWUk9CB3L+4Tq8
N09Y38L/xLEKk/TNvemH5UbWonj2MXrp+BRngLVLxnrxPfnvs+kj4fXkn3nwQFiF
Bj8j31C3LgauKAg1Oz0KpNCcRuoq+sO2oSmjiqfwxSnVb9CGqVmlHaITH/1jrSQ/
JTa9liEcohoTYGFBs9/h4WvPpIRA9X63AgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
TpKdLt9gOvd04YalOhkf/QUMzgYwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJFNEFGLzBENUVB
NjcyODA1MzExRjFCOTRCMzJBQUNFMUQzOEIwLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYyRTRBRi8wRDVFQTY3MjgwNTMxMUYxQjk0QjMyQUFDRTFEMzhC
MC9UcEtkTHQ5Z092ZDA0WWFsT2hrZl9RVU16Z1kubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMBoOAwDQYJKoZIhvcNAQELBQADggEBADULKFeSqqQvFgzd
KLXeBvNSzJtZZjpUPuQqADi806r6iaw6mcX7cLrigHfL9OI9YCPWf0vIhdDbcBGQ
5zT4MzZLc5FUoZ77id/h0/dHymtVvYGcTvES7vd9xSkP5MtaZldOpMJ6jMPW9Mt0
6IQdKvZ7ne58GIJ3KyJXeHwgBS7fNqe0L7YsMSkrX2bjnsOVoKpvd1qXljSwH2m3
XDYiaggnP30FWlDXu5D+SR1kvW6sTHZKDyVupz5d0aTT1cDVftqdHYsk8889jAwL
h+ym08Qm1FGcYMKTp3h+qcK4l8zj15eCBTjsSRkOpS9DOuepRsUIzYXkOjcQ/rrX
cJRwF1E=
-----END CERTIFICATE-----