RPKI Certificate
Location:                 ./rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer (download)

Subject key identifier:   49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Manifest:                 rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
CA Repository:            rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/
Notification URL:         https://rrdp.arin.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2031-10-11T21:20:30Z
    Resources:
    1: AS: 395003
    1: IP: 134.195.156.0/22
    2: IP: 158.51.12.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:8e:c6:08:40:5b:77:cf:57:0b:66:8e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct 11 21:20:30 2021 GMT
            Not After : Oct 11 21:20:30 2031 GMT
        Subject: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:b8:ee:06:f0:1c:5a:df:6d:82:75:c1:ec:
                    a6:5c:5f:ca:6b:ab:c6:bf:22:ed:57:da:b8:ce:90:
                    0e:5a:96:55:01:9f:d5:ed:7f:47:8a:da:dc:ae:27:
                    34:0f:8f:ff:65:81:ae:17:96:ff:46:db:02:cd:4a:
                    a8:89:db:1a:9c:60:0d:16:8c:95:c7:ae:65:d9:6b:
                    84:36:b2:00:4e:dc:0e:50:71:c5:b1:99:91:f8:74:
                    60:35:bc:6d:52:f0:dd:d5:52:fb:c7:aa:82:57:98:
                    af:d7:d2:41:01:21:a4:14:47:40:b5:3f:72:27:e2:
                    64:87:9a:bf:1b:f6:1a:51:0b:cb:bb:34:2b:db:fb:
                    4c:ee:29:56:85:92:04:cf:3e:c5:4d:f9:32:d3:86:
                    8b:9f:61:1b:68:bc:ac:06:a4:10:0c:70:6f:f4:ec:
                    29:aa:95:a3:1d:40:e3:6e:af:e8:4f:2d:72:4b:17:
                    96:94:23:56:01:ad:2e:31:c4:61:e0:b5:a5:f9:c6:
                    be:c0:47:08:7c:a1:0d:0b:f2:0f:80:8c:78:96:98:
                    b7:4c:bb:96:9c:5b:77:47:68:72:83:75:ae:ed:26:
                    73:a5:1c:09:4c:65:34:75:76:26:1f:a7:9f:63:55:
                    92:96:50:02:e4:55:40:fb:91:20:e1:de:55:40:52:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.156.0/22
                  158.51.12.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395003

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e1:12:e8:db:df:f6:f1:ec:3b:6b:06:f8:6c:22:72:a7:8f:
         47:2a:da:ce:38:17:89:39:2b:fb:8d:e5:df:06:53:13:b4:cb:
         52:44:3f:74:ae:49:37:fb:3d:e1:10:30:4b:3d:f1:50:31:1b:
         91:a4:ff:a4:b0:83:41:ea:b2:8e:8a:c9:30:37:0e:75:76:b4:
         d8:32:aa:db:7f:41:59:a7:33:ae:aa:68:bf:da:28:fe:17:c9:
         ae:5e:a7:9f:e0:8e:08:bb:cb:4e:aa:97:85:9b:5d:97:ee:20:
         5d:6c:f3:81:fe:bf:f5:58:0e:4e:92:62:25:e7:89:2a:4f:f9:
         4b:c3:c1:b3:ba:57:5a:e0:23:21:75:1a:d9:35:bb:83:ec:7c:
         86:14:43:3a:30:d1:e7:e7:4b:f8:6b:94:76:5b:54:7b:5d:47:
         56:c9:c7:28:23:14:b4:68:f3:df:93:c6:88:3c:44:5c:7d:d7:
         12:f4:94:05:65:2c:6e:08:f0:5a:77:b7:29:1a:4d:d5:10:60:
         e3:51:e8:8d:07:92:7c:3c:e7:b1:91:c5:c3:73:c7:4c:e4:06:
         c2:50:1e:53:00:59:b5:bd:c5:9f:b0:21:da:5e:7d:bc:5e:2f:
         06:f6:b4:1c:7f:b5:a0:e0:bc:cf:08:e3:42:4d:a9:ae:70:91:
         ab:93:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Oct 11 22:58:52 2021 by LibreSSL & rpki-client.