This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/227da23f-3330-423f-b7e9-3a1c3462ce57.cer
File:                     227da23f-3330-423f-b7e9-3a1c3462ce57.cer (raw, json)
Hash identifier:          cPf31z2h1sEGdDTqTMK42rf4zQGb9XKqKotX4F3Vdco=
Subject key identifier:   EE:19:C8:53:F8:CC:06:49:77:98:8C:07:8C:BA:BA:8F:6B:7B:BC:40
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C803F2C6E3D48B6B0F1F0B000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/227da23f-3330-423f-b7e9-3a1c3462ce57/227da23f-3330-423f-b7e9-3a1c3462ce57.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/227da23f-3330-423f-b7e9-3a1c3462ce57/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 13:45:23 +0000
Certificate not after:    Sun 16 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 396122
                          IP: 69.58.144.0/20
                          IP: 108.174.80.0/21
                          IP: 168.182.32.0/19
                          IP: 209.182.240.0/21
                          IP: 2604:32c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:3f:2c:6e:3d:48:b6:b0:f1:f0:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan 12 13:45:23 2026 GMT
            Not After : Apr 16 12:45:23 2028 GMT
        Subject: CN=227da23f-3330-423f-b7e9-3a1c3462ce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:2e:e0:ba:d0:4d:15:33:d8:92:94:b5:0e:
                    ce:4a:6c:ec:8a:bf:2b:e7:6c:fa:d4:a0:09:f6:80:
                    52:70:0c:01:52:96:43:19:57:be:00:12:9e:e4:b3:
                    21:5a:5e:22:a5:7f:6e:71:64:43:93:92:86:c8:55:
                    06:ca:5f:e4:83:7a:dc:b6:f1:4f:7a:38:41:9e:f3:
                    dd:f0:b3:32:cc:96:5d:47:c5:e0:36:e6:56:26:2d:
                    bc:cd:9c:3d:53:22:59:3d:53:8a:33:81:7f:60:02:
                    15:37:2e:6a:de:6e:5a:22:3f:68:ad:00:7c:8c:3c:
                    6f:19:73:89:27:64:6a:5e:47:db:21:78:b6:4b:62:
                    4f:16:f8:b0:75:0f:6d:4b:8c:a6:79:11:d8:47:bc:
                    95:a8:6c:0e:87:d0:38:2d:85:1a:18:3f:bf:d3:ef:
                    4d:a6:14:01:15:e7:c1:77:14:4e:ea:c7:1c:3a:2e:
                    2e:65:e9:d0:f0:29:6d:fc:1a:3d:48:1b:00:11:14:
                    f0:fe:31:a3:c1:b0:ca:a1:b4:3e:4a:b1:8a:9a:0e:
                    4a:d2:7d:ad:b0:26:00:a7:d0:00:08:e9:e3:5f:88:
                    f4:ff:74:85:9b:c3:e2:72:3e:d5:0b:a8:11:aa:0f:
                    61:1b:ce:6a:4d:fb:9b:1c:a7:ea:57:e6:d6:21:b0:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:C8:53:F8:CC:06:49:77:98:8C:07:8C:BA:BA:8F:6B:7B:BC:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/227da23f-3330-423f-b7e9-3a1c3462ce57/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/227da23f-3330-423f-b7e9-3a1c3462ce57/227da23f-3330-423f-b7e9-3a1c3462ce57.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.144.0/20
                  108.174.80.0/21
                  168.182.32.0/19
                  209.182.240.0/21
                IPv6:
                  2604:32c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396122

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:46:04:3c:55:82:c0:7e:b2:12:61:48:b6:e4:e2:24:3d:1d:
         01:87:3d:0c:78:82:f2:d2:d6:e1:9b:db:78:c4:fe:95:6d:4a:
         fe:bc:f6:a3:fa:46:67:6c:26:8e:1d:eb:9f:6a:4e:f6:87:22:
         80:a9:ca:25:c9:70:32:67:de:6a:fb:56:1c:c7:51:9c:42:5d:
         e2:b0:93:ff:bb:53:11:14:a6:23:5c:1f:1b:a6:8a:dd:f3:3b:
         db:56:19:ab:2c:ee:6c:f8:74:93:1b:d2:02:c6:81:d8:41:3a:
         e9:95:db:b3:e3:7a:5a:9a:a2:c5:8a:5f:69:a3:99:0c:29:b7:
         0b:c3:b2:01:5f:e5:e2:ae:17:9d:b8:d5:5b:d9:59:4a:c5:f8:
         80:93:26:2a:c5:1e:67:ac:e9:2c:2f:95:1f:31:10:20:ff:83:
         36:78:57:eb:37:69:8d:8f:da:34:c4:8c:e3:be:30:7f:0f:41:
         f6:c5:1f:4d:a5:8d:2a:52:e3:b5:21:07:63:b2:1e:e3:5d:6a:
         09:93:d6:4e:e1:b1:c8:0c:88:04:a3:a5:c2:39:07:07:5d:08:
         e9:4f:27:52:23:46:a2:4e:49:63:63:02:ec:88:44:5b:d4:4f:
         ef:42:9e:4f:49:1d:73:01:0a:b4:d7:d5:04:50:36:57:f8:79:
         87:ae:0c:30
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEyAPyxuPUi2sPHwsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDExMjEzNDUyM1oXDTI4MDQxNjEyNDUyM1owLzEtMCsGA1UEAxMk
MjI3ZGEyM2YtMzMzMC00MjNmLWI3ZTktM2ExYzM0NjJjZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ku4LrQTRUz2JKUtQ7OSmzsir8r52z61KAJ
9oBScAwBUpZDGVe+ABKe5LMhWl4ipX9ucWRDk5KGyFUGyl/kg3rctvFPejhBnvPd
8LMyzJZdR8XgNuZWJi28zZw9UyJZPVOKM4F/YAIVNy5q3m5aIj9orQB8jDxvGXOJ
J2RqXkfbIXi2S2JPFviwdQ9tS4ymeRHYR7yVqGwOh9A4LYUaGD+/0+9NphQBFefB
dxRO6sccOi4uZenQ8Clt/Bo9SBsAERTw/jGjwbDKobQ+SrGKmg5K0n2tsCYAp9AA
COnjX4j0/3SFm8Picj7VC6gRqg9hG85qTfubHKfqV+bWIbC4zQIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFO4ZyFP4zAZJd5iMB4y6uo9re7xAMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y
MjdkYTIzZi0zMzMwLTQyM2YtYjdlOS0zYTFjMzQ2MmNlNTcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIyN2RhMjNmLTMzMzAtNDIzZi1i
N2U5LTNhMWMzNDYyY2U1Ny8yMjdkYTIzZi0zMzMwLTQyM2YtYjdlOS0zYTFjMzQ2
MmNlNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBARFOpADBANsrlADBAWotiADBAPRtvAwDQQCAAIw
BwMFACYEMsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgtaMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABG
BDxVgsB+shJhSLbk4iQ9HQGHPQx4gvLS1uGb23jE/pVtSv689qP6RmdsJo4d659q
TvaHIoCpyiXJcDJn3mr7VhzHUZxCXeKwk/+7UxEUpiNcHxumit3zO9tWGass7mz4
dJMb0gLGgdhBOumV27PjelqaosWKX2mjmQwptwvDsgFf5eKuF5241VvZWUrF+ICT
JirFHmes6SwvlR8xECD/gzZ4V+s3aY2P2jTEjOO+MH8PQfbFH02ljSpS47UhB2Oy
HuNdagmT1k7hscgMiASjpcI5BwddCOlPJ1IjRqJOSWNjAuyIRFvUT+9Cnk9JHXMB
CrTX1QRQNlf4eYeuDDA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:14:03 2026 by rpki-client