This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
File:                     85154141-f81d-4a16-94db-ba21a7f28a12.cer (raw, json)
Hash identifier:          a8YoV3J5afrUq9QJsCArVG8YFFoMCMZCQiga+09EEmM=
Subject key identifier:   48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584BF743FBBCF102C85456B7C840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Nov 2025 12:09:20 +0000
Certificate not after:    Tue 21 Sep 2027 00:45:35 +0000
Subordinate resources:    AS: 36014
                          AS: 53464
                          IP: 64.20.212.0/22
                          IP: 216.38.224.0/22
                          IP: 2607:1340::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:43:fb:bc:f1:02:c8:54:56:b7:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 24 12:09:20 2025 GMT
            Not After : Sep 21 00:45:35 2027 GMT
        Subject: CN=85154141-f81d-4a16-94db-ba21a7f28a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:31:87:67:0b:31:4b:a4:d7:0e:93:13:87:
                    22:9a:62:32:93:fa:e3:c4:a6:8d:4c:52:3b:2e:97:
                    b8:e4:21:18:db:74:3d:e0:e9:23:01:62:e7:61:e4:
                    f7:99:42:41:92:a2:b9:ea:2e:f9:ca:0a:d4:1e:1d:
                    44:70:57:6f:96:29:7a:8d:1e:93:84:4d:01:c8:86:
                    d2:7b:fa:b5:8a:49:32:4e:c8:09:6d:ba:60:89:17:
                    c6:84:e9:4c:4c:c3:51:5e:88:13:2c:38:e9:8e:8d:
                    a4:de:79:ef:b9:9c:fc:40:2f:99:33:24:35:25:35:
                    93:42:ed:43:77:f8:5e:51:49:18:06:17:2d:43:47:
                    15:e0:77:15:7c:7a:d2:ef:b4:e0:2f:86:46:a5:ec:
                    84:18:b7:21:a9:f0:a6:72:e2:63:57:64:56:f8:09:
                    ae:0b:a9:21:7b:b2:4d:74:90:5a:ca:39:ca:83:2c:
                    1c:de:cc:fc:67:d4:fa:22:07:16:c6:d4:b3:02:14:
                    70:1f:f5:a8:41:d9:36:61:20:36:a3:ea:70:0e:9a:
                    b0:f4:52:7c:34:3c:c0:f6:2d:20:63:2b:25:bf:4e:
                    dd:e8:56:25:01:6c:ca:75:d6:aa:5f:00:04:b1:da:
                    48:15:30:cb:eb:d0:40:c4:59:12:6e:90:89:c3:76:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.212.0/22
                  216.38.224.0/22
                IPv6:
                  2607:1340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36014
                  53464

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:7d:da:15:88:e8:be:1c:f4:43:00:55:99:b1:bb:d1:b3:
         5a:20:24:51:11:91:cf:bd:00:53:46:fa:0c:97:86:76:d6:36:
         ce:c6:2b:52:a9:24:5f:51:18:f3:83:69:4c:46:9b:6b:7c:5c:
         1c:ca:d3:1a:5c:92:f4:45:20:de:ee:60:52:ac:9a:70:4b:39:
         9f:fa:08:1d:87:80:75:ef:42:05:0e:bf:ea:e7:77:ac:1a:05:
         a4:fd:0a:39:9f:9c:7d:53:e3:45:c0:8b:0b:f2:0b:7a:65:42:
         31:13:f0:26:4d:81:f0:cf:ee:24:f0:34:6f:fd:c9:2d:ec:0b:
         46:49:42:ae:e5:8d:d3:e8:c8:69:82:33:c7:51:8a:ad:b6:1f:
         c7:88:ec:21:15:5a:d5:08:a0:de:cb:f9:ae:ed:8d:e9:da:e2:
         4f:8b:2a:da:67:f5:d1:24:be:96:48:ec:79:6f:e1:33:c0:1d:
         9c:87:f8:84:58:c5:07:37:85:7b:6b:ec:c3:68:39:77:5f:5c:
         7f:04:fe:b4:33:91:17:82:80:c4:33:c7:0c:f5:4b:1d:47:de:
         34:39:d5:5d:1f:98:81:76:ee:ae:1f:24:0d:29:08:21:b7:c6:
         cf:00:a7:44:21:de:a2:a7:5e:15:b9:51:85:39:1c:42:be:98:
         1f:60:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:20 2025 by rpki-client