This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
File:                     72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer (raw, json)
Hash identifier:          FUmS884pKRZRLxWcACXlNVbiS9Y8nuFRoS7uw98Xgwk=
Subject key identifier:   A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584C7ED9D4E1F949EA7CAC13C83E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 01:45:23 +0000
Certificate not after:    Sun 16 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 400634
                          IP: 23.227.208.0/21
                          IP: 103.70.20.0/22
                          IP: 116.214.112.0/21
                          IP: 134.65.176.0/21
                          IP: 148.222.176.0/21
                          IP: 193.47.48.0/22
                          IP: 205.142.228.0/22
                          IP: 216.234.168.0/21
                          IP: 2606:e1c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7e:d9:d4:e1:f9:49:ea:7c:ac:13:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 12 01:45:23 2026 GMT
            Not After : Apr 16 00:45:23 2028 GMT
        Subject: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:68:4b:56:81:82:fd:50:93:6a:47:02:79:
                    ad:e3:9e:c2:99:6b:77:03:7a:6a:58:71:87:02:ca:
                    8e:6c:13:f3:dc:ec:6a:5f:21:fb:73:f9:64:e1:23:
                    b7:fe:4e:e0:d0:fc:d3:75:f8:aa:d5:32:cb:91:f1:
                    eb:f6:b0:96:36:2f:f9:b2:21:06:df:8c:10:07:53:
                    a8:14:81:46:78:84:8a:9f:aa:62:8a:c6:db:e5:02:
                    d9:d3:e6:b4:40:b8:4c:9f:fd:6c:27:51:66:22:6b:
                    af:a7:0b:ba:c0:1c:e8:73:6e:bb:d4:cf:99:47:99:
                    10:e2:08:9c:9b:8f:12:6d:7f:0e:ee:f1:f7:19:02:
                    89:06:d0:9e:cc:cc:88:be:33:3a:9b:72:02:5d:2d:
                    13:d6:cf:ac:db:b5:34:35:31:21:f1:85:62:43:cd:
                    21:de:2a:17:7a:38:4a:f8:9c:e9:98:05:76:1d:96:
                    47:0a:ba:6c:7d:9a:8e:2a:33:57:aa:f4:14:d4:0a:
                    de:94:36:fd:b2:f4:39:e0:f5:bf:8a:69:74:fa:69:
                    a7:89:4c:14:51:1a:b2:bc:90:9d:fc:1b:b4:5f:a0:
                    39:4e:52:ab:0b:5b:da:6b:bb:7d:da:8a:31:5e:5b:
                    d6:e5:09:c3:a7:de:9d:31:e9:15:d7:78:c3:c0:ba:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.208.0/21
                  103.70.20.0/22
                  116.214.112.0/21
                  134.65.176.0/21
                  148.222.176.0/21
                  193.47.48.0/22
                  205.142.228.0/22
                  216.234.168.0/21
                IPv6:
                  2606:e1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400634

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:45:19:f1:91:12:8a:ff:e2:1d:e3:a7:14:d2:81:d1:73:da:
         96:38:a1:67:55:e8:94:7f:d2:2a:20:ac:75:dd:cb:ec:4b:3f:
         8a:24:4d:ac:9b:95:07:a3:5c:07:e4:91:33:90:57:84:64:10:
         7c:c4:67:8e:52:c8:2d:eb:9d:09:d2:42:bd:88:8c:7f:34:6e:
         7d:59:5f:56:01:a2:3e:18:ac:13:39:e5:c3:b3:d4:68:27:3e:
         0b:73:59:a9:8d:7c:85:c9:03:d8:83:fa:f3:22:0a:2f:b1:74:
         eb:90:5e:ad:af:5b:f8:bb:6a:e3:64:7d:18:5c:22:cf:ba:86:
         fb:c9:89:95:e2:88:81:a4:6c:2a:c2:34:ca:fe:88:53:90:25:
         ff:08:65:78:6a:c8:8a:c0:81:f9:c8:7b:df:0a:9e:d6:9d:01:
         2f:ea:1c:94:32:a7:56:dd:75:22:9b:8a:1c:e8:f5:7a:9e:20:
         2a:33:84:8d:22:17:51:48:e8:f0:ac:c5:13:a7:43:f6:e4:df:
         8a:4b:80:13:b1:77:68:b1:62:92:80:3d:31:3f:9e:80:16:5a:
         71:fa:f9:34:65:bd:e8:6c:fe:32:29:fd:2c:21:d9:1c:78:c7:
         eb:ee:f9:b9:04:2a:7c:d8:8b:3d:32:40:b1:a9:9a:3a:68:88:
         02:f6:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:31 2026 by rpki-client