This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
File:                     91d07432-fb87-439b-b14e-e063470edfd2.cer (raw, json)
Hash identifier:          3rwWcQQpfaDBPftk3Yb91YA3qwGRh5egjXG0Gl8pMnI=
Subject key identifier:   FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C671F042B52F0128BC664E470
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 03 Jan 2026 13:45:23 +0000
Certificate not after:    Fri 07 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 398079
                          IP: 72.18.88.0/22
                          IP: 142.202.244.0/22
                          IP: 2602:81b:8000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:67:1f:04:2b:52:f0:12:8b:c6:64:e4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan  3 13:45:23 2026 GMT
            Not After : Apr  7 12:45:23 2028 GMT
        Subject: CN=91d07432-fb87-439b-b14e-e063470edfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:94:cb:88:75:8d:9b:b9:6a:fe:61:9c:2e:
                    2e:e6:7e:c7:15:99:66:ef:97:c9:f1:40:57:f7:c4:
                    c5:89:65:a7:27:12:1e:a3:55:8d:9a:03:b2:f1:77:
                    cf:8c:75:00:c4:53:d9:3f:de:3f:df:cc:21:26:d7:
                    c9:ba:5a:3f:e7:28:02:75:1d:1c:9c:4b:42:f6:ef:
                    76:1d:94:0c:ec:bc:ea:34:2b:5d:58:d2:41:a9:a4:
                    a0:ee:f0:9c:28:f8:c4:21:d8:bf:ee:c1:37:64:7c:
                    97:03:95:f7:54:51:a7:1b:2e:85:18:a5:e3:71:03:
                    b3:7e:5d:6d:05:ea:1d:28:4a:bd:e6:6d:c4:b7:f9:
                    1c:33:61:6a:65:60:af:f2:36:6f:86:41:1e:a1:e9:
                    2a:74:f3:a9:b8:64:6b:9c:c8:30:2f:08:c4:5d:a8:
                    b1:18:62:93:61:34:9a:81:a4:d9:76:c6:42:89:29:
                    73:46:29:ed:d5:24:e7:aa:80:4e:5c:ee:1d:12:2c:
                    c1:af:54:e0:c7:74:fd:54:9e:34:66:5e:d0:3e:a3:
                    2c:67:e7:2a:e8:fa:b9:25:3a:74:16:d8:56:98:2b:
                    1e:d7:44:0f:0e:1c:91:2b:15:d4:06:b6:d3:fc:28:
                    c4:a0:10:d2:c1:37:28:21:92:c5:31:93:c2:b8:3c:
                    84:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.88.0/22
                  142.202.244.0/22
                IPv6:
                  2602:81b:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398079

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:cf:d7:9d:1c:f2:32:b8:9f:81:da:af:55:c8:ca:c5:d6:
         3d:68:72:24:50:5b:e1:60:33:26:b1:fc:d9:2e:05:74:a5:4e:
         25:1a:37:55:d8:30:8f:39:19:41:05:88:c3:67:f6:ab:9e:a0:
         21:2a:1a:94:1a:97:eb:30:82:fa:b1:af:75:e0:b6:a9:80:bf:
         af:5a:3b:ad:bf:15:ad:f4:1d:d8:90:a9:44:8f:0c:93:ee:1b:
         1b:5b:ed:f9:c7:91:70:36:7d:46:61:9a:b1:35:16:e6:81:13:
         69:a3:a4:11:96:cf:d2:7f:53:f3:9f:ec:d0:8a:fd:0b:35:85:
         d8:70:43:51:44:41:c6:56:41:f8:32:97:a9:8f:c5:65:29:1a:
         57:11:08:ca:09:38:2f:9a:e9:af:1a:14:6d:a0:a4:26:0d:00:
         e2:5c:92:b0:c2:33:48:3f:3d:5c:6e:2d:19:5b:0b:2c:8f:1b:
         46:d1:1b:86:e2:bb:ec:78:48:4b:5e:0a:97:78:6f:69:2b:d2:
         97:07:b8:58:84:10:a8:df:39:8e:40:2a:51:4d:44:5f:39:73:
         a2:5c:98:9b:f8:b5:77:bb:85:77:f8:97:23:db:d2:50:2d:08:
         8c:9b:39:2a:11:68:4a:20:ca:af:ad:42:49:a6:49:b7:22:89:
         04:2f:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:11:35 2026 by rpki-client