This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
File:                     78369c58-f0b4-454b-ad08-df84f1fd007c.cer (raw, json)
Hash identifier:          esezhgyvchLC91HhEy+QzRYLrJtSFnii7BLOoHdL6wI=
Subject key identifier:   DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584BCEF8BAAD68D2E025E6CBAB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Nov 2025 01:45:22 +0000
Certificate not after:    Sun 13 Feb 2028 01:45:22 +0000
Subordinate resources:    AS: 22822
                          AS: 23059
                          AS: 23135
                          AS: 23164
                          AS: 25804
                          AS: 26506
                          AS: 27191
                          IP: 68.142.64.0/18
                          IP: 69.28.128.0/18
                          IP: 69.164.0.0/18
                          IP: 200.110.232.0/21
                          IP: 206.223.120.0/23
                          IP: 208.69.176.0/21
                          IP: 208.111.128.0/18
                          IP: 2001:504:18::/48
                          IP: 2001:504:1c::/48
                          IP: 2607:f4e8::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ce:f8:ba:ad:68:d2:e0:25:e6:cb:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 10 01:45:22 2025 GMT
            Not After : Feb 13 01:45:22 2028 GMT
        Subject: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:5a:27:76:f1:23:a7:ec:23:ef:dc:8a:b6:
                    49:d3:11:49:07:99:23:cb:f6:e5:b1:18:f2:3e:3d:
                    69:03:8c:aa:56:38:19:96:94:bb:c1:18:da:e3:05:
                    84:52:b1:1c:e5:e3:81:3a:32:af:dc:5f:f1:c4:19:
                    9c:7f:3f:73:75:4b:6c:fe:e3:e6:a0:b3:1e:61:15:
                    68:f5:e5:d1:93:cb:87:cc:16:42:2e:c3:f3:67:97:
                    1b:50:4f:02:7c:64:6b:c0:5f:9d:3b:54:ca:d0:89:
                    be:88:9c:58:28:ff:a4:f6:6c:63:0e:73:3f:1a:11:
                    ae:0a:11:78:d6:39:54:20:1b:fe:3d:4a:15:3b:27:
                    9a:c0:07:2a:48:75:a6:ce:74:1e:33:04:7d:38:c6:
                    c6:70:bb:8e:0e:17:f3:81:f9:44:3b:2c:a7:41:5a:
                    73:f3:d5:6f:ed:51:86:63:df:2a:34:f0:d6:98:42:
                    96:bb:dd:31:ee:58:ed:0f:56:73:33:8e:e3:6f:8f:
                    26:0c:ad:b5:0a:91:dd:66:4b:ec:be:31:a1:d2:6a:
                    90:b6:43:6b:4d:6c:6f:3d:b8:0d:c5:da:d3:f3:85:
                    0e:69:b7:98:ce:28:44:a4:d0:e3:c4:eb:82:fa:5c:
                    78:8b:22:3f:5f:4a:d8:8a:1c:f0:5c:a1:51:68:ef:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.64.0/18
                  69.28.128.0/18
                  69.164.0.0/18
                  200.110.232.0/21
                  206.223.120.0/23
                  208.69.176.0/21
                  208.111.128.0/18
                IPv6:
                  2001:504:18::/48
                  2001:504:1c::/48
                  2607:f4e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22822
                  23059
                  23135
                  23164
                  25804
                  26506
                  27191

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:92:60:2b:d1:97:d4:82:f8:e3:4c:88:e9:14:0a:b0:9e:
         37:e3:6b:a0:d1:8c:0e:8f:44:b1:25:22:51:21:9b:bd:d3:4d:
         bd:d8:f4:99:cf:bd:ef:8b:e7:8f:5d:49:96:3d:3c:6a:0d:d5:
         89:6e:0d:65:11:79:db:48:2c:c7:17:86:9e:e6:4a:e9:11:23:
         94:37:a5:56:57:db:35:bf:78:76:a0:49:04:b0:2b:82:0c:d0:
         a9:bf:7c:fe:40:d2:07:3c:61:8e:90:e7:59:0f:10:94:24:cd:
         c7:ec:b7:40:95:9d:c5:7f:9b:9f:8b:ad:cc:23:f9:c2:48:d8:
         d2:38:66:c3:ec:e8:f4:31:e0:b8:59:c6:3e:74:02:66:58:ad:
         7a:d5:d8:ac:d1:57:24:13:ed:28:2b:e6:2e:66:56:1e:b8:62:
         63:71:18:49:8e:8f:42:ab:26:d5:47:44:4a:42:ff:97:aa:97:
         4f:fd:d6:dc:46:5f:29:a3:65:a0:c7:27:ad:30:a1:e7:c7:4c:
         d8:ca:dd:3d:6b:58:f8:13:4e:71:2c:1c:5c:06:bd:92:98:dd:
         68:26:01:e1:31:fc:d7:89:1f:7f:2a:8a:a8:ec:18:9d:2e:d4:
         59:53:03:50:22:b4:f8:3c:15:3f:51:d2:96:2b:82:1b:10:33:
         7e:d8:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:42 2025 by rpki-client