This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
File:                     4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer (raw, json)
Hash identifier:          6MyxGBxdfNGUF6sBlxYsN71lRyr88EP+AaEopIhSgGM=
Subject key identifier:   87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority key identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E
Certificate issuer:       /CN=3eb60598-76ca-49b0-9a1f-01270603d8d9
Certificate serial:       010D0C9F4328584C54F991A61298D94F219EA0E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 28 Dec 2025 01:45:23 +0000
Certificate not after:    Sat 01 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 399781
                          IP: 45.45.156.0/24
                          IP: 108.160.212.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:54:f9:91:a6:12:98:d9:4f:21:9e:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60598-76ca-49b0-9a1f-01270603d8d9
        Validity
            Not Before: Dec 28 01:45:23 2025 GMT
            Not After : Apr  1 00:45:23 2028 GMT
        Subject: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:30:ab:92:39:dd:d1:54:30:a2:41:e6:88:
                    58:b8:8d:da:f8:ff:a6:79:a3:f5:e1:27:bb:92:7d:
                    0d:24:d2:04:5d:35:77:d8:7b:58:ed:bd:3c:3b:b7:
                    a6:c0:12:5a:a5:36:05:5f:92:64:07:6f:05:57:28:
                    67:a4:54:4c:3a:f7:95:da:e3:05:e3:45:e0:d7:a0:
                    55:5b:60:dc:ed:3a:4c:c6:47:ac:c2:f8:f9:8d:4f:
                    76:bf:ec:63:e3:fe:cb:5d:47:0d:d7:fd:21:b8:ec:
                    fc:49:d4:27:01:04:46:50:be:82:0a:45:38:71:bc:
                    6d:0c:48:df:77:a9:17:e1:e6:fe:ed:72:8b:ac:f8:
                    b2:47:ab:c3:89:d9:f0:7b:8f:49:13:e8:ea:64:db:
                    bc:88:43:3d:33:48:cf:58:3c:bf:f1:c9:9f:f8:59:
                    93:11:a3:f4:2a:3f:73:bf:5d:28:03:f4:3d:df:e8:
                    88:a2:78:b2:0b:72:9f:e7:fa:2f:e6:e1:bf:44:5d:
                    55:6a:62:67:cc:e1:84:16:12:e9:a5:c0:d7:c3:7f:
                    07:ee:ba:a2:8f:b1:96:3b:9f:b1:07:6d:9f:4c:6c:
                    42:47:73:d5:1a:9b:d6:df:ed:c7:5f:69:d9:0f:56:
                    8c:04:b1:a2:df:41:e3:3b:24:7d:1f:7b:3e:8a:6a:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl

            X509v3 Authority Key Identifier:
                keyid:88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.156.0/24
                  108.160.212.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399781

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:93:de:ca:1e:97:19:5d:cd:09:aa:78:27:90:97:83:97:56:
         f1:66:34:fb:27:70:45:a3:40:8a:d2:3f:46:3e:8a:a8:e2:f1:
         1a:85:1c:7d:39:06:78:d0:c1:fd:89:95:38:16:b2:29:e4:3f:
         8b:d7:bd:ac:34:2d:00:e0:12:9b:d9:0c:3c:52:4b:b9:a9:3c:
         2d:cc:39:dd:a5:14:3a:df:5f:b1:c9:ed:90:99:c5:b9:0f:49:
         12:53:ce:0e:fa:ae:c4:2f:3e:e1:6b:c2:3d:90:14:3e:0e:0b:
         24:b4:c9:78:12:ab:4f:7d:03:94:06:13:8b:c6:a8:4c:3b:a7:
         d3:bb:cc:64:56:2d:72:63:b1:4d:de:92:83:63:15:77:45:11:
         ce:81:30:44:83:95:e9:68:37:f2:b8:7c:cf:88:44:f5:9e:52:
         7b:0e:b7:5a:1f:d7:92:ae:01:4e:8a:f3:a0:8c:02:4c:3b:d6:
         b1:f8:93:b1:10:d6:42:74:26:90:cd:76:b4:29:35:17:b3:49:
         28:32:42:c6:bd:b9:5e:26:d8:f4:d9:ae:bc:eb:6a:5a:b6:33:
         b4:e7:1c:70:f7:f4:bd:44:41:39:83:24:6e:f5:06:4f:f0:fd:
         70:40:20:74:67:e1:36:ba:de:59:b5:c7:7d:05:21:53:c0:f5:
         40:86:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:52 2026 by rpki-client