This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer
File:                     db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer (raw, json)
Hash identifier:          kV+2kpex0fKcnXpnKVODtc86JIXErCJwJqmEuvhxtoI=
Subject key identifier:   B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584C8B69E90E4D03FCC38D9C9280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 13:45:23 +0000
Certificate not after:    Thu 20 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 395990
                          IP: 168.245.235.0/24
                          IP: 2602:804:e000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:69:e9:0e:4d:03:fc:c3:8d:9c:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 16 13:45:23 2026 GMT
            Not After : Apr 20 12:45:23 2028 GMT
        Subject: CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:21:ce:86:c6:e7:8a:5a:5c:1c:d4:bb:17:
                    5e:62:a9:ff:7c:d2:64:53:b2:44:0f:c3:b3:aa:08:
                    e4:f7:e2:81:78:e9:93:e5:84:e6:2b:d9:35:1f:3d:
                    96:ef:9d:cb:6e:cf:d1:33:77:a7:ac:d8:9e:a3:27:
                    4e:d4:c9:73:36:3a:f1:70:74:98:db:ed:88:2d:e2:
                    6c:85:5a:24:20:fb:d2:4c:91:c4:ba:b0:4c:74:6f:
                    14:d8:a3:bc:9e:82:71:55:86:ac:97:74:21:05:ca:
                    9a:4f:60:c8:a7:25:7c:de:9f:e2:90:2e:86:48:87:
                    8a:f7:b4:aa:3c:23:ee:8e:c4:2c:17:c1:50:47:b7:
                    b2:78:62:80:09:60:39:0c:ad:c9:8a:fe:2f:7a:2b:
                    cc:1e:58:24:da:7f:ab:3e:d5:96:6d:fb:5e:c9:6b:
                    ea:a0:08:6b:88:21:df:95:bc:e5:18:9c:46:f3:94:
                    12:6b:33:3b:ee:3b:4e:55:09:0a:bd:08:f3:aa:be:
                    1f:63:9a:21:d4:0d:89:be:cc:d4:2e:9b:57:41:ca:
                    f2:7c:26:28:6a:9c:ac:fa:71:32:4e:37:83:1a:3e:
                    f6:86:9a:db:8e:b3:d0:06:09:3c:93:ad:6c:24:ee:
                    c8:15:69:f1:10:89:f4:67:eb:91:80:83:99:48:0a:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.235.0/24
                IPv6:
                  2602:804:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395990

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:cf:c6:fe:d7:67:b2:ed:f5:18:88:66:0b:a2:77:52:1e:d4:
         38:52:2a:16:71:03:9f:40:96:d2:b0:eb:90:56:e7:49:07:43:
         21:8a:24:58:8a:0d:c3:41:ff:26:45:e2:9a:51:32:7e:fb:32:
         15:ad:ba:22:20:63:ac:e8:c2:20:55:1e:47:f7:a2:78:7f:fb:
         d2:4a:eb:b8:25:ed:1a:4b:e8:0d:70:76:44:bb:d6:d2:30:7f:
         a8:bc:f3:f6:f6:39:a7:e8:ad:c2:b7:45:a3:f6:ed:7c:c5:fc:
         c2:a4:bf:f7:a9:e7:3b:9f:d5:43:c9:bb:fb:1f:2d:f9:52:89:
         d8:2a:e3:1b:e2:f3:40:6c:fd:31:48:af:2d:b0:eb:70:28:2d:
         dc:39:22:12:ff:08:74:ff:cc:11:46:94:e0:61:34:68:25:7d:
         90:f6:c6:43:74:48:4d:9a:35:42:87:4d:b0:9d:cf:ee:26:62:
         cb:0e:a9:1b:c8:46:82:83:26:03:60:33:fe:cb:c1:e4:19:81:
         2f:17:2b:9e:a9:ef:66:0a:b6:69:5c:37:58:ab:9c:48:f9:c5:
         c5:15:36:72:dd:24:8d:f0:f2:6e:bc:c3:1a:fd:f6:bd:b7:53:
         18:d9:e8:83:42:dc:58:37:d5:28:8b:ef:2c:f2:73:f9:d1:d4:
         16:50:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----