This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d.cer
File:                     05bbafe6-426c-416f-9869-5b34e8f07c3d.cer (raw, json)
Hash identifier:          KXaM7XnD+d8nWG5V3AxGQ1kshocxvMip/De9uhAqsRM=
Subject key identifier:   CE:46:8D:B8:CC:66:E0:D7:37:15:C0:C3:91:6D:7F:29:D7:82:B3:B2
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584C803F2CFBB3DD9223804EEBC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/05bbafe6-426c-416f-9869-5b34e8f07c3d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 13:45:23 +0000
Certificate not after:    Sun 16 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 31888
                          AS: 54142
                          IP: 104.232.4.0/22
                          IP: 199.30.72.0/21
                          IP: 199.180.104.0/21
                          IP: 2602:fcda::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:3f:2c:fb:b3:dd:92:23:80:4e:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 12 13:45:23 2026 GMT
            Not After : Apr 16 12:45:23 2028 GMT
        Subject: CN=05bbafe6-426c-416f-9869-5b34e8f07c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:b6:1b:af:d6:a8:f6:49:d7:62:01:a4:4d:
                    c1:41:93:86:b2:47:ca:c7:52:ab:fe:10:78:f1:58:
                    12:c2:d7:b5:0f:fa:e3:5f:27:59:56:e3:25:55:07:
                    26:39:fc:3f:ad:10:c6:ad:a7:1b:23:13:62:b3:02:
                    0e:83:c8:e4:07:d9:45:d4:8d:5b:16:1b:65:73:21:
                    35:67:7b:67:e0:19:55:b0:3f:14:9f:49:67:3a:55:
                    58:46:45:cc:e1:3d:83:79:2b:94:14:56:ae:3e:01:
                    b6:3f:55:f9:bd:8b:38:d1:d6:a1:19:6d:63:da:6c:
                    cc:24:b9:10:ea:1b:e5:06:f6:8e:af:20:28:ce:fe:
                    ce:be:96:2c:d9:da:dc:91:d3:9e:94:32:14:57:a6:
                    65:89:e9:d1:fe:69:d1:99:68:3c:0e:27:54:2a:3a:
                    a1:f5:9b:12:c5:74:6e:81:a6:90:e9:1c:86:d1:98:
                    7e:43:5e:b2:0a:04:5e:df:bd:ca:f5:23:6b:53:f4:
                    d4:79:10:2f:d0:d1:c7:12:56:f8:00:0a:53:b4:83:
                    21:d8:51:44:7b:5a:0f:09:c8:2b:a2:c3:e5:50:4f:
                    75:5d:7c:36:24:02:ec:9f:50:88:e4:6c:d3:2f:3c:
                    95:cf:e2:4a:1a:28:bd:b3:cd:ed:2a:2f:f0:86:0f:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:8D:B8:CC:66:E0:D7:37:15:C0:C3:91:6D:7F:29:D7:82:B3:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/05bbafe6-426c-416f-9869-5b34e8f07c3d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.4.0/22
                  199.30.72.0/21
                  199.180.104.0/21
                IPv6:
                  2602:fcda::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31888
                  54142

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:d1:b7:36:5a:94:ee:ac:81:f9:25:c6:a2:f5:c8:c0:b8:
         cb:59:56:9e:d7:c0:e7:8f:6e:94:00:be:69:1f:77:c7:7d:01:
         d7:ee:69:b1:dc:11:4a:80:ca:44:1e:bb:fd:a9:b2:52:e1:b9:
         6c:fe:09:27:36:97:c5:89:47:f7:21:ba:e4:f6:f3:85:47:69:
         7e:56:4c:ed:d7:8d:ca:2b:a0:f7:a1:62:e8:df:d0:21:51:39:
         2f:c0:ee:0a:08:b8:ce:10:47:4e:8c:66:36:6a:54:f8:6e:84:
         90:48:a2:a0:66:75:a5:60:5a:6c:9d:19:cd:5e:03:ae:54:33:
         b0:cd:a6:88:a7:81:cc:21:33:67:58:77:26:ea:20:2d:2f:c5:
         0a:8e:91:0a:cf:38:87:05:cf:44:f0:7b:0c:1b:e0:87:1a:5e:
         31:db:4d:f9:81:2b:42:36:58:e4:e4:60:1e:57:c3:a5:ae:19:
         a3:c9:f3:93:33:fe:27:38:1d:a3:23:c5:28:81:69:ad:43:95:
         1e:fa:2f:f6:3e:93:21:c4:cf:4c:e8:05:eb:72:d8:e0:8d:10:
         aa:4f:c4:d9:b1:dd:aa:b1:cd:5e:c0:ab:a9:9f:68:9d:ca:76:
         49:1e:42:9c:6d:f1:5e:ec:9b:20:6a:42:e9:48:23:d3:7f:fa:
         a2:f3:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:19:34 2026 by rpki-client