This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.cer
File:                     c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.cer (raw, json)
Hash identifier:          PqIK/1FFBXNJWrYV9ny2gJ5quoreAXIfkPFXikCSWVc=
Subject key identifier:   87:7C:67:99:50:4F:CE:A6:C9:1F:C0:56:69:1E:E6:A5:08:C4:7B:DB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C995F521647AE343B17D56318
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 13:45:22 +0000
Certificate not after:    Tue 25 Apr 2028 12:45:22 +0000
Subordinate resources:    IP: 192.154.94.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:5f:52:16:47:ae:34:3b:17:d5:63:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan 21 13:45:22 2026 GMT
            Not After : Apr 25 12:45:22 2028 GMT
        Subject: CN=c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:04:a3:fc:5d:ce:6f:14:46:b8:10:81:10:
                    a4:cb:1c:93:78:f2:a7:08:82:2d:1f:fd:08:a6:7f:
                    7a:f5:23:6a:a7:6f:f9:5a:5d:16:10:d4:47:c9:71:
                    da:ab:78:01:59:bf:90:86:03:da:36:27:36:52:30:
                    4e:7c:99:2e:de:0a:3f:fe:3f:9f:a9:45:5c:4a:80:
                    77:f7:a5:28:35:2d:56:5c:9d:a2:c9:61:0d:eb:9f:
                    34:b1:4c:32:b5:69:e4:3f:93:57:ca:12:e9:51:72:
                    83:33:3f:c5:78:89:ff:1a:79:16:b2:54:63:1e:0b:
                    99:53:02:14:cf:9e:83:dd:ad:30:1e:7c:e9:28:b9:
                    ff:fe:89:ec:b5:35:57:5c:60:5f:1a:6c:c2:0a:e0:
                    02:18:e3:b2:4a:6a:bb:89:4e:e6:61:09:4c:0d:e0:
                    9d:eb:2b:1b:e4:d4:ad:56:98:29:8c:96:d1:f6:cc:
                    0a:cb:7e:a5:19:43:39:9d:68:67:4a:dd:fb:3b:9e:
                    3f:ee:4c:b2:4f:fa:0c:e2:63:7a:5d:cc:ba:23:45:
                    92:e9:a6:b0:6c:21:bc:f3:53:53:b7:bf:d3:78:23:
                    39:f2:8f:ba:76:e7:f6:71:7b:f2:5a:14:62:fd:a0:
                    ca:93:08:40:e6:de:ca:cd:2c:98:23:e1:66:88:13:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:67:99:50:4F:CE:A6:C9:1F:C0:56:69:1E:E6:A5:08:C4:7B:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:45:8c:2a:e3:27:7e:96:b0:dd:72:ae:fc:2c:1e:44:32:82:
         b8:0b:b7:bf:ea:2f:72:34:74:38:2c:d5:03:b5:02:bc:90:ff:
         61:4b:b9:b4:1d:93:0d:9e:80:c5:74:2a:8b:fa:bd:56:11:3e:
         fe:97:06:84:61:ae:3e:8a:a1:ff:9a:cd:5b:c8:f8:50:dc:88:
         21:eb:14:77:ba:30:1c:3e:3f:d8:4e:54:2b:93:99:bf:0a:34:
         14:5b:2f:c5:90:b5:3d:48:e9:11:f6:68:cc:b4:a4:1c:f2:b3:
         59:56:48:80:c8:6a:33:2f:e3:fc:45:92:1f:94:c1:42:90:0b:
         aa:77:66:7f:25:06:26:ca:bc:0f:47:c0:81:54:26:c7:36:23:
         b3:2c:c2:5b:ad:c3:14:d6:1e:c2:38:31:e9:f8:10:76:e1:76:
         6f:0e:28:44:fc:f6:1f:af:2e:9e:29:99:55:9c:00:14:81:f6:
         16:7b:fa:ed:ac:8f:18:41:7c:b0:53:74:25:b7:23:41:26:6a:
         70:41:ac:be:c8:58:c8:5e:65:a3:35:e1:c1:cf:40:75:1c:09:
         63:cf:89:8c:f4:af:e0:d6:2e:a3:d0:6f:c9:8f:17:1e:d1:ae:
         c9:55:0a:4a:2d:4d:5a:a5:a0:9b:32:fc:73:de:79:71:24:1a:
         30:fa:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----