This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
File:                     4696412f-57d7-49ba-b514-6b1c6ab433a4.cer (raw, json)
Hash identifier:          fEE2/okSLGmunmASBswp/gz8+wsXam33fowaFBOfTMw=
Subject key identifier:   0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584BE6B38CBB3032CFA1F199B640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 13:45:23 +0000
Certificate not after:    Mon 21 Feb 2028 13:45:23 +0000
Subordinate resources:    IP: 45.59.16.0/20
                          IP: 172.102.192.0/19
                          IP: 216.158.192.0/19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e6:b3:8c:bb:30:32:cf:a1:f1:99:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 18 13:45:23 2025 GMT
            Not After : Feb 21 13:45:23 2028 GMT
        Subject: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:48:bb:e8:4c:79:28:41:b7:4f:6b:6a:0e:
                    c3:d1:df:9d:16:16:19:62:b8:46:17:61:72:cf:1e:
                    0f:a4:21:fb:15:9d:ce:84:70:8f:43:ec:24:fc:71:
                    9f:27:39:ed:fd:33:63:b6:22:1f:4d:8f:22:4f:a0:
                    f7:0f:f9:be:95:1e:68:10:f7:82:31:83:87:01:0e:
                    7d:3a:eb:ee:f1:38:75:6f:09:28:a1:42:d6:a3:aa:
                    58:4e:46:25:73:e0:e7:74:a4:18:11:72:f0:83:12:
                    f0:37:8c:f9:e6:dd:95:48:1d:33:c5:c7:c4:40:bb:
                    21:10:3f:0b:ea:d3:b8:a4:1a:0f:32:20:f5:95:51:
                    c2:64:39:8c:d4:93:1e:a4:c6:e0:30:92:bb:29:7f:
                    ee:5c:32:5f:6d:5f:83:29:c2:bd:0f:1c:95:82:7e:
                    e0:50:44:b4:0e:32:08:ff:fd:b7:99:20:b5:21:fc:
                    05:a7:f9:a6:fd:3e:30:23:20:5d:ac:b4:63:f0:e8:
                    de:cf:ed:ce:73:aa:a7:1e:2d:9d:78:89:f7:76:f3:
                    60:46:1c:d1:12:37:4b:0e:97:d6:5f:a9:aa:9f:13:
                    1f:a1:79:a2:18:d7:3e:4b:61:4e:3a:9f:e9:c8:17:
                    11:03:f7:72:61:72:47:97:90:c7:ee:61:9e:2f:20:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.16.0/20
                  172.102.192.0/19
                  216.158.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:c3:12:31:45:a8:53:2a:2a:76:e4:d6:2f:69:15:41:8a:
         cc:e4:f0:68:b6:5c:65:11:7f:cb:1f:b9:15:86:82:fb:ed:1a:
         d9:c6:80:52:86:20:2a:8e:06:dc:79:5c:8b:7a:54:bd:91:91:
         98:e9:6c:2b:f6:2d:09:e1:d0:44:31:bc:aa:74:09:1e:8c:7d:
         73:18:a7:cd:d5:b5:85:3f:44:f2:81:d7:52:7f:89:df:34:8d:
         e1:db:cc:f1:57:9b:d8:84:1f:bb:6e:2a:98:67:db:32:30:75:
         39:39:53:7b:79:47:77:47:ab:37:5b:6e:60:cc:3d:2d:f5:88:
         77:f2:1b:30:eb:d2:be:a3:7d:5a:b3:cb:2f:0d:0b:48:e2:1b:
         a3:e8:3b:0c:18:88:f5:f2:f7:68:de:a0:1a:ee:4a:7d:60:1f:
         0d:95:eb:a1:39:b5:08:65:89:7e:da:2c:cc:f2:03:cb:71:f3:
         e3:35:31:92:32:d8:90:60:1b:20:22:35:2d:5d:c8:9f:ea:bf:
         33:00:0d:1f:fd:89:e7:0e:4a:7b:7a:9c:a5:23:76:b3:66:e0:
         cb:c6:e0:ca:4e:7a:71:0f:64:ba:3a:a7:5b:2c:df:b5:14:50:
         3a:e6:17:e9:f3:28:95:29:67:1d:59:5c:e5:ac:2d:ee:58:bc:
         b4:bc:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:16:44 2025 by rpki-client