Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
File:                     1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer (raw, json)
Hash identifier:          bcN/S3QCPRONfk26ayvOry5rjdwR75IHjKjxfdfMpL4=
Subject key identifier:   15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority key identifier: 55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7
Certificate issuer:       /CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f
Certificate serial:       010D0C9F43285846DAC793267956797BE133A180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml
Certificate not before:   Fri 31 May 2024 18:46:08 +0000
Certificate not after:    Thu 03 Sep 2026 18:46:08 +0000
Subordinate resources:    IP: 15.189.0.0/16
                          IP: 15.201.0.0/16
                          IP: 15.203.0.0/16
                          IP: 161.188.200.0/22
                          IP: 161.188.206.0 -- 161.188.209.255
                          IP: 161.188.213.0 -- 161.188.215.255
                          IP: 161.188.224.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:da:c7:93:26:79:56:79:7b:e1:33:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f
        Validity
            Not Before: May 31 18:46:08 2024 GMT
            Not After : Sep  3 18:46:08 2026 GMT
        Subject: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:15:8b:f1:ff:ea:2c:57:66:37:19:2c:44:
                    72:de:25:21:cb:6d:61:1a:47:00:67:ee:29:50:77:
                    ac:ab:37:38:94:66:63:8d:86:1a:2e:fb:39:29:83:
                    c6:e1:5e:ab:0e:89:78:aa:5e:d6:df:c4:6c:26:27:
                    cb:5b:e9:f1:84:27:4f:e8:63:3b:0e:32:7e:5d:b5:
                    b0:18:5e:31:8f:25:e5:03:84:d5:ce:15:c9:1e:5d:
                    a6:70:02:7a:6d:58:18:9e:3f:b7:e5:59:98:5a:fe:
                    4e:12:1e:78:41:dc:87:ca:9c:45:18:4a:6e:f6:02:
                    2d:52:d6:86:b4:8f:c6:8a:8a:0c:93:24:c1:1c:c7:
                    b8:8f:e7:80:c1:1f:fb:d3:96:a5:fa:45:2e:a5:0e:
                    14:0c:0d:4a:99:89:81:d3:2f:e2:6d:a5:4b:ea:b8:
                    15:34:eb:6f:d9:da:aa:d9:47:49:59:40:78:25:df:
                    80:6f:16:0a:84:73:66:c2:80:d0:15:73:2a:07:92:
                    d4:7c:7a:b0:65:ad:ce:80:1b:0a:6a:32:10:48:06:
                    ee:74:85:e4:2e:48:86:a5:a5:62:8c:c0:c5:29:f1:
                    e7:20:fa:ca:57:aa:56:03:55:b4:9d:ee:28:b1:d6:
                    e7:dd:0d:c3:55:70:d5:34:05:cf:a1:c4:0e:5f:26:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.189.0.0/16
                  15.201.0.0/16
                  15.203.0.0/16
                  161.188.200.0/22
                  161.188.206.0-161.188.209.255
                  161.188.213.0-161.188.215.255
                  161.188.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:7d:7a:7f:57:1d:ac:c3:c8:a1:67:f6:3f:f5:42:89:b8:
         d5:19:db:e1:7e:91:eb:9f:e1:3d:e7:43:23:e1:15:f9:ba:b6:
         58:6f:fb:62:14:b8:ba:6b:78:9d:a3:7e:ee:b2:0e:27:83:05:
         f7:fa:e2:81:91:fa:18:af:35:7b:80:db:34:dd:ac:15:fb:e1:
         58:df:df:ef:2a:2d:56:2f:34:53:95:24:1d:8a:0f:3b:69:5b:
         2c:45:c8:81:ff:c9:d1:9c:5e:9c:f7:57:9d:2c:e1:dd:b6:e2:
         5a:7f:c3:bd:0b:32:dc:0e:71:ba:76:82:93:00:b3:ec:69:b5:
         f7:65:90:7b:5f:3c:cd:f5:35:f1:ab:ce:44:2e:77:e3:4f:31:
         30:e2:18:ac:dd:14:73:94:3c:39:86:64:ab:f9:9b:09:47:75:
         77:5c:98:21:c3:8b:77:6a:f4:1c:a7:1c:a1:20:9c:35:e0:c6:
         ea:49:d8:95:69:10:d0:1b:02:de:6a:55:cd:b6:2c:a5:c7:95:
         d2:a8:fe:58:68:8d:33:fd:fa:3b:f3:06:39:93:f6:00:79:af:
         dd:b6:4e:5a:e8:74:23:b4:79:c3:21:6c:d1:b7:fa:2c:e8:f4:
         0e:2d:e1:e1:50:d9:37:d6:d8:2f:ea:85:ad:b7:13:23:82:eb:
         0d:93:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:53 2024 by rpki-client on console-fra.rpki-client.org