RPKI Certificate
Location:                 rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4858c596-7435-4281-b29f-2ec4d90b7d4e.cer (download)

Subject key identifier:   52:C8:DB:0C:53:28:6C:E6:CF:22:F5:12:77:4F:83:18:C1:FB:82:2F
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Manifest:                 rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4858c596-7435-4281-b29f-2ec4d90b7d4e/4858c596-7435-4281-b29f-2ec4d90b7d4e.mft
CA Repository:            rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4858c596-7435-4281-b29f-2ec4d90b7d4e/
Notification URL:         https://rrdp.arin.net/notification.xml
Subordinate resources:
    1: AS: 16556
    1: IP: 198.38.76.0/22
    2: IP: 199.58.176.0/22
    3: IP: 208.76.80.0/21
    4: IP: 2605:89c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4858c596-7435-4281-b29f-2ec4d90b7d4e.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:81:f3:39:15:3a:26:95:e1:22:c3:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul  7 14:19:06 2021 GMT
            Not After : Jul  7 14:19:06 2031 GMT
        Subject: CN=4858c596-7435-4281-b29f-2ec4d90b7d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a8:9f:67:b1:85:b8:6b:1c:9a:2e:fc:24:40:
                    84:86:31:9c:51:87:2e:51:38:c1:95:7b:2f:04:58:
                    41:b4:75:d3:cd:08:14:68:8c:a0:7a:55:e0:cd:0e:
                    86:37:96:e3:4f:53:87:d0:ab:5b:24:cf:8d:1e:ab:
                    7d:1b:07:c8:b6:3a:4e:b6:0d:37:7a:21:20:e2:05:
                    c1:21:07:e8:6d:7e:86:84:cf:87:bd:e3:b6:f2:70:
                    35:d5:21:17:bf:8e:31:b0:7d:74:75:71:f5:be:ab:
                    fa:17:04:eb:12:cc:be:53:3e:ca:c2:5e:c3:17:57:
                    75:0c:5d:26:10:bd:81:fd:82:33:ed:7b:72:a9:e5:
                    49:20:6e:b6:18:ed:8b:00:72:00:aa:c2:8e:d3:f9:
                    ef:e4:c8:88:e2:f9:07:bd:36:3c:f9:85:45:bb:71:
                    71:e9:40:1e:2e:39:41:47:48:b8:cd:c8:21:ed:5f:
                    56:e8:13:75:3b:5b:73:cd:af:44:69:e5:4b:92:5e:
                    ab:95:c7:71:5b:af:0b:36:d9:c4:49:ca:1e:9c:0d:
                    ad:c9:7f:dd:63:4c:7c:e9:35:ac:e1:be:ac:4c:6e:
                    58:58:08:66:39:21:ef:a8:3b:43:6c:55:0c:70:f7:
                    f6:4e:7e:8b:16:a8:42:ed:25:f7:fa:ec:fb:38:ec:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                52:C8:DB:0C:53:28:6C:E6:CF:22:F5:12:77:4F:83:18:C1:FB:82:2F
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4858c596-7435-4281-b29f-2ec4d90b7d4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4858c596-7435-4281-b29f-2ec4d90b7d4e/4858c596-7435-4281-b29f-2ec4d90b7d4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier: 
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.76.0/22
                  199.58.176.0/22
                  208.76.80.0/21
                IPv6:
                  2605:89c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16556

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:1d:e3:39:04:65:bd:e8:9f:cf:fa:c7:fa:3d:b2:c0:5a:
         ff:78:33:3b:32:4b:18:b5:e4:24:eb:16:a3:fb:f6:c0:61:13:
         15:9c:66:e6:1f:60:92:00:2b:0a:d0:43:21:68:e3:41:77:07:
         3b:34:6f:e0:64:0e:59:9b:78:4f:7d:a6:34:d4:81:e3:35:12:
         77:70:a3:2a:0a:e3:25:4f:1c:3a:31:76:a7:23:d9:01:da:99:
         bd:fe:49:63:3b:cb:91:61:7e:9e:3b:34:55:dc:e7:87:a4:0c:
         bc:46:67:cb:8e:09:28:f0:7c:95:b1:b8:99:9d:62:37:82:98:
         16:dd:07:3d:8c:8a:7f:59:66:d3:0e:af:4d:3b:da:49:b4:1b:
         3a:c8:a1:29:ab:57:a8:eb:aa:b1:90:e9:0c:8a:18:66:e8:1a:
         e0:2d:70:fd:c3:fe:26:7b:55:f2:4f:9b:7a:36:4d:02:c3:3d:
         30:aa:58:49:cb:aa:14:f9:cb:01:d9:4d:d5:1c:5f:db:35:7d:
         58:58:fe:31:4f:e0:cc:dc:6b:13:15:21:98:09:cd:59:18:aa:
         10:76:ef:37:19:2a:7d:b1:d4:25:68:be:38:7b:06:5d:4a:f2:
         5d:18:b2:63:26:2f:40:96:fe:bc:64:3b:e2:eb:71:ad:40:e5:
         da:18:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 10:46:18 2021 by LibreSSL & rpki-client.