This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
File:                     2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer (raw, json)
Hash identifier:          H4a9f7VQwXOaV2lo7b54pgqRVBByKItzOcRS4AQulqY=
Subject key identifier:   8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C5A8EEE8AA2491B6336809FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Dec 2025 01:45:22 +0000
Certificate not after:    Mon 03 Apr 2028 00:45:22 +0000
Subordinate resources:    IP: 23.155.248.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:8e:ee:8a:a2:49:1b:63:36:80:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 30 01:45:22 2025 GMT
            Not After : Apr  3 00:45:22 2028 GMT
        Subject: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:0e:f7:c2:b3:61:96:a3:48:d0:28:ea:69:
                    99:1e:76:5f:2d:c5:5e:06:6f:cd:a7:1e:bc:45:29:
                    38:ac:97:29:e5:82:c9:69:7c:9f:a6:aa:7a:03:54:
                    8a:6a:4d:28:d4:98:eb:32:6f:23:4f:39:bd:26:a9:
                    b2:0d:72:58:40:b1:e8:fd:eb:40:a5:a4:98:1b:72:
                    8b:f7:50:1f:d7:8e:65:b3:cc:03:a5:2d:0d:e7:26:
                    46:20:53:43:a4:9a:78:16:b5:97:39:30:b9:01:e5:
                    91:1d:66:1e:c1:1e:29:09:a1:0c:c9:c9:18:1b:32:
                    ed:dc:c7:b9:65:03:97:1a:a3:62:f5:0e:bb:f1:34:
                    d7:3e:dd:85:3e:ff:4f:7f:a3:66:d4:97:14:f5:7b:
                    46:40:d1:46:29:46:f1:12:8a:48:60:ed:46:9f:eb:
                    44:6c:91:37:8f:8d:6a:eb:ed:27:a4:db:2c:56:d0:
                    83:3a:f9:9b:87:1e:98:10:c4:f2:4f:e3:20:52:a5:
                    fd:8c:71:32:f6:3f:1c:e1:f9:42:1a:70:c2:29:65:
                    5e:9a:02:c1:ec:c3:ab:92:26:fa:af:77:32:79:e9:
                    cc:b7:90:0e:80:fe:27:7d:2b:34:48:b1:36:52:f3:
                    22:8e:8a:e4:d4:f9:80:d9:f3:ea:e4:0a:8f:95:2a:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:86:17:b6:16:47:b8:87:b0:ec:43:fd:4e:6a:19:34:d5:ff:
         14:ed:a8:22:5a:2a:15:30:66:e4:a8:98:23:4d:25:e3:06:fe:
         98:19:b4:6a:c4:4b:82:c0:0e:79:cb:49:38:ee:3f:7d:6f:10:
         ef:fe:06:b7:be:ce:4f:3f:7e:c6:79:6c:3d:4a:e5:d6:23:5b:
         08:8d:7b:d4:47:09:7d:13:ce:81:d4:89:77:67:13:7e:08:bf:
         8e:74:09:c5:3a:cc:26:c5:2d:ac:45:76:92:93:15:1a:6c:d6:
         9d:bd:93:3d:d7:e1:6f:1a:5a:47:a6:55:40:e3:f9:05:03:e8:
         15:3f:d8:66:82:2d:f5:b3:7f:7e:03:48:bb:55:35:3b:b6:87:
         99:21:68:a4:bf:dd:f4:9a:c7:25:72:af:78:7d:c5:c7:a7:f3:
         87:30:ef:57:ed:ad:6f:08:cb:66:97:5b:56:cc:4d:5c:8a:ed:
         46:72:6b:86:32:60:33:15:af:ae:28:fe:db:92:6a:a3:97:5d:
         fe:8e:c6:57:cc:7d:c0:3a:b4:b2:6b:3c:2c:46:01:06:4b:e9:
         5c:d8:22:33:b7:b9:4a:aa:22:33:59:3a:b3:a0:09:9a:0b:71:
         8d:02:71:be:2a:35:4e:f5:3b:5c:6d:dd:15:e1:12:da:5d:e5:
         e5:e1:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----