This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
File:                     45657d9f-043b-4838-9072-ef0906bb567e.cer (raw, json)
Hash identifier:          YU2IAAQ+fXJmUC7t6TDG20poGaCM3kD8Ax2rzW6Fpfw=
Subject key identifier:   D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584BF773A85F8D373D7E797ADCC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Nov 2025 13:45:24 +0000
Certificate not after:    Sun 27 Feb 2028 13:45:24 +0000
Subordinate resources:    AS: 16652
                          IP: 199.254.238.0/24
                          IP: 2620:13:4000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:73:a8:5f:8d:37:3d:7e:79:7a:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 24 13:45:24 2025 GMT
            Not After : Feb 27 13:45:24 2028 GMT
        Subject: CN=45657d9f-043b-4838-9072-ef0906bb567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:3e:41:25:9d:af:bf:d3:8f:4f:38:d8:41:
                    32:52:67:66:b0:2a:0c:f7:71:67:18:e5:c9:31:e1:
                    2f:32:5b:3d:14:0f:49:3c:5c:f1:47:ae:e9:b0:ff:
                    e2:ba:67:5b:3a:74:13:eb:46:e1:1a:c3:8a:80:cc:
                    b4:e0:ed:c4:21:00:ea:61:15:a3:83:52:dc:4f:77:
                    79:9d:d3:4f:1e:2e:1b:99:cd:9f:e9:c8:c6:90:dc:
                    30:c2:3f:5b:60:7a:d1:36:00:bc:44:80:44:a3:85:
                    91:01:09:e7:0f:69:a9:64:a0:9e:9e:53:24:aa:97:
                    50:3a:8c:2f:06:c7:d0:22:cd:b6:12:fc:ed:97:02:
                    0b:1b:2e:c1:0a:ab:f1:8a:b9:ca:47:00:28:e6:66:
                    20:41:91:7e:d6:24:39:4a:b9:9b:5b:bf:77:b1:d1:
                    7b:0b:a0:bf:86:c0:19:57:09:ac:9d:c6:23:47:35:
                    70:ce:26:f6:f5:49:a5:a0:74:71:d9:a3:a9:31:e0:
                    e3:9d:88:cf:28:12:7b:0c:50:71:f4:ad:fa:db:73:
                    89:2b:49:a0:df:58:d5:42:64:ed:43:0b:36:46:b2:
                    c9:e7:1b:69:73:b6:b3:cb:0b:c9:8f:4e:63:95:3d:
                    71:9a:cf:80:3b:61:5e:62:11:37:2a:0b:33:a0:7e:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.238.0/24
                IPv6:
                  2620:13:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16652

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:08:d4:4a:56:84:c1:24:dd:4b:2a:45:66:ed:de:87:43:6d:
         90:fa:b5:49:cb:aa:78:75:b3:54:20:6c:46:63:fb:e6:5e:e0:
         9d:a5:64:09:4e:15:29:4d:26:7b:3a:c5:63:01:8c:8c:6b:56:
         3a:94:cc:00:df:3f:1e:03:0e:08:3a:a2:fc:2c:63:56:b4:f0:
         07:8a:70:9b:ac:b0:c4:89:4f:d4:5c:d6:cd:2f:8e:c7:42:38:
         08:0e:ee:74:1e:03:76:6e:c2:0d:dc:a2:45:89:f1:e5:3b:09:
         6b:30:a0:83:76:4c:68:d5:b9:1e:f0:86:7d:3d:4f:94:5b:e3:
         16:7b:ce:ea:b0:22:11:78:5b:ef:51:d9:47:47:71:9e:44:c7:
         b9:c7:e2:da:3f:7a:d0:6e:55:bd:71:9e:d1:5a:a4:14:48:85:
         a3:6f:8b:a7:c0:96:35:b7:37:75:3d:71:1e:c6:11:ec:ac:97:
         17:0a:df:60:10:10:17:22:fc:5b:59:09:cf:19:c7:0b:22:ff:
         a0:56:ad:57:c0:ce:ea:be:11:8e:37:53:ef:e4:a4:01:02:13:
         f0:01:8f:54:b9:b6:59:e4:3a:d3:c4:d1:37:11:0c:9e:f6:56:
         b1:72:f6:14:8f:58:52:4f:cb:c7:bd:ed:29:98:1f:20:e6:63:
         e5:08:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----