RPKI Certificate
Location:                 rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer (download)

Subject key identifier:   CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Manifest:                 rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft
CA Repository:            rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/
Notification URL:         https://rrdp.arin.net/notification.xml
Subordinate resources:
    1: AS: 397127
    2: AS: 398123
    1: IP: 67.218.1.0/24
    2: IP: 161.38.188.0/23
    3: IP: 2620:13d:e000::/44

--
$ openssl x509 -text -inform DER -in rsync/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4d:c3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 14 18:26:39 2019 GMT
            Not After : Feb 14 18:26:39 2029 GMT
        Subject: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:e9:b5:73:46:93:85:ba:c4:98:29:de:dd:
                    1f:47:b8:bc:5f:86:f9:e8:98:bb:bf:ca:80:77:fc:
                    dc:11:9b:84:50:ee:7e:54:fa:86:f2:4a:26:7f:7e:
                    e8:c5:89:58:f7:ed:93:95:bf:b0:e3:10:c7:4c:7b:
                    66:d2:06:07:22:b3:98:99:4d:19:15:dc:f6:85:bc:
                    6e:0e:0e:d0:3b:cd:d8:d4:14:43:b4:f6:2e:39:55:
                    e9:fc:84:ae:78:19:b7:4d:cc:20:7e:20:f9:15:56:
                    c7:46:aa:93:84:ca:6e:fa:85:ff:7b:8e:93:aa:c2:
                    44:0f:db:1a:ee:8c:12:8a:8b:a0:43:ac:55:2e:67:
                    d5:03:c0:b5:ec:98:74:7c:83:d4:3b:2f:dd:19:5c:
                    d6:fa:4b:c4:31:0c:6c:87:31:1a:39:53:fb:81:6c:
                    a2:35:c9:8a:ce:eb:57:2f:6b:cc:ad:d9:7f:63:68:
                    10:be:b6:53:27:a7:87:52:df:84:0a:40:d2:99:1b:
                    fb:c0:0d:6f:f6:3e:16:09:2e:b5:e5:a3:ad:b0:54:
                    0e:e2:9b:89:1b:e7:84:a0:7c:1b:85:a0:46:f6:06:
                    a1:3b:c8:fa:03:f0:66:f4:f4:eb:d8:0d:82:5a:57:
                    8c:c2:a3:c6:4e:93:54:9f:4b:5f:21:15:70:90:ee:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier: 
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.1.0/24
                  161.38.188.0/23
                IPv6:
                  2620:13d:e000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397127
                  398123

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:33:25:5c:76:e0:89:c1:bc:48:7c:b7:73:07:a0:02:34:
         06:47:e6:ff:d1:51:ed:b6:a2:ee:41:ff:86:0b:8c:39:4e:cf:
         0a:e3:df:64:41:d6:87:de:f2:b6:d5:82:5d:de:c1:5d:3f:94:
         10:68:5a:aa:b4:d6:0f:bd:9d:76:12:b5:cf:3e:ca:31:d5:5a:
         0c:12:3f:ad:5b:df:52:1c:fb:ae:fb:5b:a2:03:f7:51:2d:5d:
         4d:35:65:03:f1:f4:29:d7:c7:04:2c:43:17:35:a2:d7:0b:77:
         71:dc:20:be:8a:5d:c8:82:92:64:7b:23:1b:15:17:44:59:73:
         7b:56:d4:61:28:3a:05:fe:fc:01:11:08:ed:34:d6:ca:2b:37:
         11:da:cf:b9:07:6d:eb:b2:3a:4d:72:36:b5:bc:28:0c:72:5f:
         ee:b0:12:ce:d1:0c:6b:ca:b6:3b:b7:ef:1e:8a:0d:7f:7f:d2:
         1f:f8:a9:d6:25:b9:f5:5b:8a:14:e8:82:f8:d6:1f:42:7d:cb:
         da:cb:fa:67:92:7e:fc:04:0e:a3:ef:07:29:5d:d6:b0:dd:17:
         27:86:28:fd:a9:9f:4d:c8:07:b3:8e:36:67:33:d3:51:93:00:
         9b:1f:a4:38:cf:8f:ac:f6:2b:56:24:4d:f2:b9:14:62:ca:aa:
         a1:1f:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:00:43 2021 by LibreSSL & rpki-client.