This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
File:                     9799440b-1f9c-4e88-926e-9ee073c7ee48.cer (raw, json)
Hash identifier:          0ewgw6LricHYfXYbv80DdhSdwboSqwJ++X7JwjYBJ2g=
Subject key identifier:   AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584C8E34973713046F6F3585EE28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 17 Jan 2026 13:45:23 +0000
Certificate not after:    Fri 21 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 32163
                          IP: 24.105.0.0/18
                          IP: 64.224.0.0/21
                          IP: 64.224.24.0/21
                          IP: 64.227.216.0/21
                          IP: 64.227.228.0 -- 64.227.239.255
                          IP: 66.40.176.0/20
                          IP: 158.115.192.0/19
                          IP: 198.74.32.0 -- 198.74.41.255
                          IP: 2620:10b:9000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8e:34:97:37:13:04:6f:6f:35:85:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 17 13:45:23 2026 GMT
            Not After : Apr 21 12:45:23 2028 GMT
        Subject: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:9c:3e:e1:84:f6:5e:88:20:e6:36:3e:b3:
                    a3:c5:cf:a4:2c:64:c3:14:8b:64:b0:45:83:71:78:
                    6e:f7:9d:9e:cb:9e:2b:74:25:58:f4:5a:d3:75:21:
                    75:a1:b7:a9:26:4f:06:46:f2:49:18:6a:aa:7c:96:
                    fa:06:a3:6f:67:00:2c:52:1b:e8:4e:d4:94:d0:22:
                    07:43:ed:cc:d4:fe:d6:6d:0c:13:6a:3c:b7:ee:5c:
                    11:6a:b5:79:7d:72:ce:23:e4:0f:7f:ac:cf:12:63:
                    c8:71:3e:e6:93:d2:23:b6:4a:0f:6a:dc:a7:31:39:
                    4c:ed:3a:b9:52:ab:e4:90:e0:dd:c4:54:22:d2:bf:
                    b8:a7:02:07:ec:de:39:4e:4a:ce:c9:19:50:fd:65:
                    2f:10:1d:78:16:25:0c:00:30:82:00:65:22:26:ef:
                    2f:79:29:e2:69:30:88:d1:a6:10:9c:3d:0f:54:13:
                    64:f8:7f:ec:40:32:87:9e:ff:ce:62:49:89:91:53:
                    3b:73:05:eb:d4:82:45:78:ff:b2:fb:6f:ba:77:7c:
                    1e:4b:d3:b9:50:d8:ff:15:9d:60:17:71:01:5f:95:
                    15:59:29:70:52:06:89:62:bd:db:5b:f3:c1:c0:97:
                    b8:61:bb:90:2f:0f:55:54:aa:fd:e9:67:21:fe:a1:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.105.0.0/18
                  64.224.0.0/21
                  64.224.24.0/21
                  64.227.216.0/21
                  64.227.228.0-64.227.239.255
                  66.40.176.0/20
                  158.115.192.0/19
                  198.74.32.0-198.74.41.255
                IPv6:
                  2620:10b:9000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32163

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:f2:29:7b:95:6e:46:c5:f4:a1:ba:a9:4b:94:eb:1e:52:
         d0:7e:f6:a8:59:a0:01:28:6e:37:82:fe:fe:b9:e3:bb:cb:33:
         cf:dc:b3:d7:eb:ef:5d:5c:85:86:1c:d9:ce:35:02:a2:d9:8c:
         60:0e:55:ab:e5:3a:8d:c9:2d:1f:be:9a:e8:1e:06:ee:70:df:
         d8:49:ed:d1:2b:6b:74:5a:ea:21:d0:4f:bd:a8:e6:d5:21:04:
         59:57:1c:11:8a:cb:7b:ab:5a:0c:e4:94:9b:13:68:5f:72:8b:
         0f:08:cf:49:77:78:87:62:1c:68:ef:49:03:73:a4:af:d1:2e:
         da:51:75:fc:40:3a:4d:9f:1f:46:d2:6b:03:85:a4:45:79:87:
         59:d5:65:6e:14:7b:26:2a:ed:e3:c2:78:25:c6:eb:dd:34:3f:
         63:ae:84:25:e2:ca:cd:81:89:52:fe:19:df:cf:a4:33:76:3e:
         37:87:9b:f1:da:7c:c3:38:35:c2:72:30:8a:97:c8:03:aa:f7:
         e2:f8:32:cf:29:0d:b5:68:0e:70:84:a5:27:9b:df:b8:0e:c8:
         21:b0:44:b3:49:75:e3:ac:15:0e:3c:3d:1d:60:16:3f:35:14:
         e0:21:7b:c9:d6:e1:bb:22:9b:26:df:c5:b6:e6:87:bb:75:0c:
         ed:c1:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:19 2026 by rpki-client