Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer
File:                     YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer (raw, json)
Hash identifier:          Y30Yfu6q8y2lERyxR1YPzjiLDsHXhjHf/6es4oo8XhM=
Subject key identifier:   60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1864
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 01 Jul 2025 06:27:56 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 165.73.0.0/17
                          IP: 165.255.0.0/16
                          IP: 169.0.0.0/15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6244 (0x1864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jul  1 06:27:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:42:26:9e:cb:7b:16:b1:ef:d3:b4:99:55:
                    60:18:40:ce:bb:b1:c7:71:07:d8:85:6a:af:8b:80:
                    40:91:04:ce:b1:e9:7d:40:78:46:20:d3:f9:53:ab:
                    ae:f7:4f:54:cf:bc:a6:f6:96:1e:0d:c8:45:21:3c:
                    7b:fb:3a:e7:16:6a:68:c0:dc:46:ff:86:c2:05:93:
                    06:92:04:9f:5c:1b:89:6d:07:61:02:e1:29:68:4c:
                    49:b8:36:9e:96:52:5e:8d:48:dc:24:f0:c2:34:f2:
                    fa:8b:3c:42:b7:1e:39:a9:5b:9e:21:a8:42:e4:7b:
                    9e:05:4b:05:a2:98:44:23:38:fa:ca:41:a2:fa:02:
                    40:40:8f:53:9b:64:17:ee:78:a2:9a:4b:5a:6d:bc:
                    74:93:81:45:32:18:ec:c7:71:b1:0b:74:90:48:b4:
                    83:2b:05:54:30:12:3d:8b:40:11:ed:3f:f1:be:0f:
                    e7:53:26:b0:48:63:56:66:40:bc:28:f4:4e:5c:4f:
                    56:87:4d:ce:a3:7b:66:ec:f5:c8:51:ab:ed:34:b3:
                    88:49:69:1e:d6:93:74:9f:52:df:58:45:0e:71:0f:
                    52:21:64:30:42:e8:a3:80:bb:de:60:c4:bb:c7:d3:
                    0e:30:e3:83:4f:90:37:f5:20:f3:f9:3d:3f:dd:ca:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.73.0.0/17
                  165.255.0.0/16
                  169.0.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         91:92:0e:1e:ee:00:58:79:21:13:50:23:38:57:20:0a:d5:80:
         8b:8d:bc:0f:db:23:71:3d:19:cc:05:fe:dc:df:c3:66:1f:b3:
         e4:c4:4a:3d:fe:8c:6d:0a:b4:cc:bd:b2:8f:7d:6b:65:b3:ef:
         2e:c5:8e:8f:97:1b:50:e6:a6:a3:e8:19:98:10:03:f5:0d:c7:
         77:9b:dc:25:c7:e6:23:a3:32:2e:e6:a4:a8:b9:40:64:ba:a4:
         5a:65:0a:33:3d:d0:a5:01:a9:11:cf:a9:27:40:cc:1a:d4:9b:
         dc:b0:9c:59:17:04:e9:40:2b:47:a2:af:e1:e9:25:22:5b:ba:
         63:bb:1f:ec:a7:fa:a0:93:52:2e:6f:1f:29:05:f9:f0:36:95:
         24:90:89:64:1f:97:4a:94:cb:1a:52:4f:ec:48:5e:57:9c:fb:
         7c:ec:e3:ac:bd:fe:84:e9:d8:19:62:93:80:1f:fb:62:df:a3:
         98:68:b9:2e:b7:ac:b3:72:d7:2e:b0:2d:7d:54:34:48:2e:10:
         ee:2b:04:2e:99:7b:67:4c:3c:a8:7e:a8:c7:76:4a:79:c2:17:
         3b:c3:de:62:da:28:af:64:7c:e1:66:70:a6:94:86:9c:2f:36:
         86:6d:6d:16:45:a4:79:ee:b5:8e:66:aa:21:2a:f4:0c:76:37:
         a8:f3:2c:d5
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTA3MDEwNjI3NTZaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjc0OTA4QVIxMTAvBgNVBAUTKDYwMkY5ODZEOURCRTMyMjE0
MTc0NTVENTRFRjIzMzYxRjU0NzZGRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC51EImnst7FrHv07SZVWAYQM67scdxB9iFaq+LgECRBM6x6X1AeEYg
0/lTq673T1TPvKb2lh4NyEUhPHv7OucWamjA3Eb/hsIFkwaSBJ9cG4ltB2EC4Slo
TEm4Np6WUl6NSNwk8MI08vqLPEK3HjmpW54hqELke54FSwWimEQjOPrKQaL6AkBA
j1ObZBfueKKaS1ptvHSTgUUyGOzHcbELdJBItIMrBVQwEj2LQBHtP/G+D+dTJrBI
Y1ZmQLwo9E5cT1aHTc6je2bs9chRq+00s4hJaR7Wk3SfUt9YRQ5xD1IhZDBC6KOA
u95gxLvH0w4w44NPkDf1IPP5PT/dyv3fAgMBAAGjggL7MIIC9zAdBgNVHQ4EFgQU
YC+YbZ2+MiFBdFXVTvIzYfVHb+IwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjc0OTA4LzdFQjgx
MkRFNTY0NDExRjBCQ0I0RDVFRERBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3NDkwOC83RUI4MTJERTU2NDQxMUYwQkNCNEQ1RUREQUU0RUM5
Qy9ZQy1ZYloyLU1pRkJkRlhWVHZJellmVkhiLUkubWZ0MCkGCCsGAQUFBwEHAQH/
BBowGDAWBAIAATAQAwQHpUkAAwMApf8DAwGpADANBgkqhkiG9w0BAQsFAAOCAQEA
kZIOHu4AWHkhE1AjOFcgCtWAi428D9sjcT0ZzAX+3N/DZh+z5MRKPf6MbQq0zL2y
j31rZbPvLsWOj5cbUOamo+gZmBAD9Q3Hd5vcJcfmI6MyLuakqLlAZLqkWmUKMz3Q
pQGpEc+pJ0DMGtSb3LCcWRcE6UArR6Kv4eklIlu6Y7sf7Kf6oJNSLm8fKQX58DaV
JJCJZB+XSpTLGlJP7EheV5z7fOzjrL3+hOnYGWKTgB/7Yt+jmGi5Lress3LXLrAt
fVQ0SC4Q7isELpl7Z0w8qH6ox3ZKecIXO8PeYtoor2R84WZwppSGnC82hm1tFkWk
ee61jmaqISr0DHY3qPMs1Q==
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:53:06 2025 by rpki-client