Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
File:                     01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer (raw, json)
Hash identifier:          cyNRdXw58S91o6syfe4uSZ4H+zcyF5CUAe3gF7ZnBaU=
Subject key identifier:   A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority key identifier: 65:21:7C:6E:F2:43:AA:49:DB:58:1E:FE:47:99:1D:54:9D:A8:92:F5
Certificate issuer:       /CN=26ce408d-5581-483d-90b3-5119fc830064
Certificate serial:       010D0C9F432858489A9481B83F17B54958DC7C40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
Manifest:                 rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
caRepository:             rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/
Notify URL:               https://rpki.leitecastro.com/notification.xml
Certificate not before:   Mon 20 Jan 2025 05:00:36 +0000
Certificate not after:    Sun 25 Apr 2027 04:00:36 +0000
Subordinate resources:    AS: 19577
                          AS: 33733
                          IP: 23.147.168.0/24
                          IP: 208.85.8.0/22
                          IP: 2602:faa5::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:94:81:b8:3f:17:b5:49:58:dc:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ce408d-5581-483d-90b3-5119fc830064
        Validity
            Not Before: Jan 20 05:00:36 2025 GMT
            Not After : Apr 25 04:00:36 2027 GMT
        Subject: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:15:c5:91:33:c8:46:85:38:6c:0e:e2:ee:
                    78:bc:1e:af:ea:ca:df:2b:ab:60:e6:b4:0a:0b:84:
                    a9:27:42:84:39:da:a8:af:e2:61:0d:6d:fd:49:64:
                    09:7c:2a:ee:27:e4:e6:8a:8e:2e:54:01:1f:53:62:
                    d1:d2:9e:57:f6:11:8d:79:ea:7f:22:04:b3:3e:ec:
                    91:7e:fa:b1:c9:c8:bf:fd:60:81:0b:3e:3a:b0:af:
                    bb:8e:0e:38:9b:b6:bd:60:87:78:8f:30:26:00:3b:
                    e7:1b:cd:c6:f2:1f:61:c4:bd:73:24:e9:cd:44:c3:
                    63:99:49:5a:bb:25:f5:c3:e5:87:8e:76:dc:7b:c5:
                    aa:92:06:8e:56:61:4f:4b:66:ac:2b:b8:b0:3c:a8:
                    6a:81:70:75:ea:63:7a:60:b4:09:8a:e8:cd:d2:b3:
                    e8:8b:4c:59:6c:0e:8a:88:9d:f1:08:3f:bb:1c:05:
                    fa:7f:cf:40:78:d3:45:0c:f2:73:68:14:a5:9f:7a:
                    73:08:fa:9f:47:80:0f:43:ca:c5:2e:62:4b:ee:16:
                    e1:a6:f4:5d:4c:82:fb:73:9c:b6:c3:b2:9d:42:6d:
                    e3:f4:99:a6:89:4c:19:78:78:42:48:10:9b:0a:b6:
                    3e:7a:ac:eb:32:5c:52:f4:8c:de:07:fe:0c:93:2e:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
            Subject Information Access:
                CA Repository - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/
                RPKI Manifest - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                RPKI Notify - URI:https://rpki.leitecastro.com/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl

            X509v3 Authority Key Identifier:
                keyid:65:21:7C:6E:F2:43:AA:49:DB:58:1E:FE:47:99:1D:54:9D:A8:92:F5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.168.0/24
                  208.85.8.0/22
                IPv6:
                  2602:faa5::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19577
                  33733

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:21:20:65:90:77:2e:56:03:7b:3a:2f:ba:fb:a4:2e:b6:17:
         55:aa:a9:b6:ce:19:8b:d6:82:42:29:5e:20:8e:e8:df:39:30:
         58:ae:02:3f:b6:10:33:d4:60:99:98:f1:87:e3:fe:db:a9:10:
         e3:fc:2c:03:b3:2c:5c:24:4b:c8:95:5c:54:41:d1:04:67:e9:
         b3:12:46:55:8a:d5:4f:71:0c:2b:ce:77:ea:01:b7:42:c4:4b:
         aa:ef:bd:bf:6b:27:e0:9b:88:39:44:03:73:7f:21:99:24:28:
         a8:28:bf:c5:22:0b:f1:68:f9:48:23:dc:32:7d:23:70:2d:6a:
         14:f2:1a:41:89:70:c5:4f:1a:f4:ed:23:55:12:1c:47:ca:6c:
         88:7e:cd:3f:7e:d4:42:d3:79:df:10:b2:45:4f:fa:1f:49:c8:
         49:79:32:ae:21:b3:80:3b:80:2e:4e:0d:8b:c0:a3:c1:8b:8e:
         e7:df:e9:77:ae:16:37:ef:2e:13:3b:84:f8:b8:71:12:cb:44:
         99:79:4a:7b:de:6c:f2:71:bc:15:6f:64:c6:d3:ab:62:eb:66:
         b8:de:a9:26:72:c0:01:be:ab:b9:f7:05:99:4f:ea:ed:55:87:
         bb:76:51:c3:d6:7f:f1:95:8e:91:b0:54:57:bd:0d:d3:c1:48:
         0b:bc:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:17 2025 by rpki-client