RPKI Certificate
Location:                 rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c9198ca-df8e-455c-ba7b-31973374ad0b.cer (download)

Subject key identifier:   56:89:9A:C1:D0:E5:95:D6:0A:67:37:CD:29:33:DA:01:68:AA:82:1D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Manifest:                 rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c9198ca-df8e-455c-ba7b-31973374ad0b/1c9198ca-df8e-455c-ba7b-31973374ad0b.mft
CA Repository:            rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c9198ca-df8e-455c-ba7b-31973374ad0b/
Notification URL:         https://rrdp.arin.net/notification.xml
Subordinate resources:
    1: AS: 397698
    1: IP: 104.219.0.0/21
    2: IP: 209.182.104.0/21
    3: IP: 2602:ff71::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c9198ca-df8e-455c-ba7b-31973374ad0b.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4e:40:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul  5 13:13:57 2019 GMT
            Not After : Jul  5 13:13:57 2029 GMT
        Subject: CN=1c9198ca-df8e-455c-ba7b-31973374ad0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:ea:7b:54:70:83:d9:9d:2e:63:71:c3:d6:
                    ed:ee:3a:44:80:5e:4a:5f:6d:a4:b3:29:4e:b4:e2:
                    50:64:e6:a2:25:c2:a2:12:99:f5:1f:6b:c5:31:ac:
                    43:13:b9:13:f8:49:a1:08:ca:0b:4d:b2:c8:89:e1:
                    c0:be:b2:7e:c4:77:2e:c9:f2:9d:fc:e5:81:40:c7:
                    04:9e:46:67:dc:20:cb:50:d0:40:22:8a:6d:1f:4f:
                    1f:e0:02:cf:98:72:9e:33:e1:b1:54:d6:ad:72:ef:
                    e8:78:0e:3e:3e:ab:0b:17:c4:a1:32:90:4a:44:ee:
                    83:d1:1c:71:b6:93:27:e6:52:ff:5f:ac:e0:7f:98:
                    1b:62:9f:4a:3b:65:d5:b4:96:73:b9:7c:13:e8:ed:
                    2b:b5:02:e3:05:98:24:cc:dd:aa:d0:38:d5:15:0e:
                    04:92:1e:51:86:a1:fb:01:cd:05:76:0e:71:7c:7e:
                    ae:62:10:18:66:85:27:87:ca:6a:08:cf:40:cc:d6:
                    47:34:0c:55:25:5e:b7:f8:11:33:14:1b:75:c2:3e:
                    1b:ea:34:13:3a:17:02:ac:41:05:62:09:d5:c4:bd:
                    32:cd:19:26:1d:e2:63:a5:d2:0a:48:29:5b:17:a1:
                    66:c2:01:9a:82:e2:aa:9a:73:db:09:f7:95:59:8c:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                56:89:9A:C1:D0:E5:95:D6:0A:67:37:CD:29:33:DA:01:68:AA:82:1D
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c9198ca-df8e-455c-ba7b-31973374ad0b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c9198ca-df8e-455c-ba7b-31973374ad0b/1c9198ca-df8e-455c-ba7b-31973374ad0b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier: 
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.0.0/21
                  209.182.104.0/21
                IPv6:
                  2602:ff71::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397698

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:94:3a:cb:97:cb:8b:9e:0f:e9:b5:28:6e:86:a9:6e:3a:
         42:34:ab:cc:4f:4d:39:da:de:66:bd:e1:7d:41:1e:e6:a8:b5:
         d0:af:89:c8:39:1d:e1:68:65:a1:25:70:b5:61:65:83:f9:5f:
         10:d6:60:b8:3e:b8:fd:0e:23:ff:28:5e:8d:49:87:09:6b:20:
         79:2c:d7:15:26:03:29:7a:9d:2e:88:27:90:68:60:b0:b0:9f:
         a1:04:b3:53:5c:02:78:be:40:d0:f6:97:47:88:57:83:f5:cf:
         f4:37:3f:08:ce:5e:59:0f:4b:44:f5:71:18:d5:74:9a:9d:50:
         7c:d8:8b:19:3d:8d:b9:50:2f:d7:ce:2e:04:47:58:90:81:b2:
         54:2e:d6:49:d4:b6:c9:0b:38:bd:6e:52:56:aa:9b:96:cc:09:
         c3:1e:11:f8:91:c9:f9:57:df:b2:cb:1a:6b:76:11:c7:40:e8:
         64:e7:9e:e9:26:ef:cb:97:b9:30:d6:23:7f:a6:d5:3b:bf:f8:
         e3:80:9d:30:3e:1c:8a:38:87:4d:dc:a3:b2:8f:b7:3e:13:3e:
         4c:e4:2d:7d:2f:9e:4b:ff:94:10:f9:dc:9a:3d:c5:39:cb:94:
         52:13:f0:9c:32:7e:3b:eb:f5:11:ae:dd:e3:9e:c2:e5:8b:5e:
         e1:2a:ac:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Generated at Sun Sep 26 10:50:01 2021 by LibreSSL & rpki-client.