This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
File:                     d3c880fd-17d6-4b37-9537-456ee6369ed4.cer (raw, json)
Hash identifier:          8lGNc6R1mvmkpf5uc+hc6YOWbqrcNScFcLxkbtiQFGU=
Subject key identifier:   62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C6F7F10E2434E3E9041C12A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 06 Jan 2026 13:45:23 +0000
Certificate not after:    Mon 10 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 401305
                          IP: 207.174.64.0/22
                          IP: 2602:f9b0::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6f:7f:10:e2:43:4e:3e:90:41:c1:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan  6 13:45:23 2026 GMT
            Not After : Apr 10 12:45:23 2028 GMT
        Subject: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:0e:ee:d0:50:b1:4d:eb:4b:d6:5f:37:c5:
                    a9:ad:d7:bf:28:f5:01:b1:be:bc:f7:75:ac:95:ce:
                    de:fd:15:5a:9c:3a:1b:34:a2:1a:d6:aa:aa:19:53:
                    5e:eb:99:a3:bb:fb:da:93:8e:b4:9d:b7:d0:aa:0f:
                    10:92:7d:19:46:72:59:d6:ed:bb:d0:43:04:d9:a7:
                    47:03:df:37:6b:c5:b6:08:ed:cc:d5:a5:78:5e:57:
                    59:45:1c:76:f9:ca:97:cb:0b:f1:84:b1:c2:c6:34:
                    e4:e7:a3:bf:52:91:f0:22:c9:23:f8:0e:e9:c7:88:
                    0f:2c:ce:80:12:e0:37:ab:0b:e9:4e:00:44:5f:c1:
                    87:b4:13:61:cb:58:f3:96:e0:bd:f2:6b:c4:83:27:
                    03:03:80:15:b7:d7:d1:62:96:15:4b:8a:7f:80:cd:
                    fb:a8:8b:85:d9:7e:17:20:54:8a:0e:cd:06:3a:db:
                    64:53:0a:2a:9c:5c:ce:b5:ea:3e:18:21:19:28:99:
                    96:14:2c:12:c2:66:70:a1:c5:d3:92:2c:16:a8:6b:
                    16:53:fa:89:f9:b1:ae:ac:29:fc:87:63:81:40:05:
                    9d:04:d5:a2:7b:ef:0c:9e:1b:e9:61:10:2a:d1:64:
                    30:1a:7f:37:be:3a:d2:c0:70:9f:81:8d:d6:c9:ba:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.64.0/22
                IPv6:
                  2602:f9b0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401305

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:b8:be:e4:ea:21:63:92:83:82:a7:96:25:08:03:7b:a5:
         b9:51:13:e8:64:7b:85:82:a8:be:2a:b5:c6:e5:d2:38:bf:9e:
         cb:40:16:3c:17:ca:13:dc:73:f8:10:28:96:cc:bb:48:8a:4c:
         71:79:b3:15:3c:06:cf:e5:f5:56:7f:44:02:aa:74:2c:96:bb:
         5d:cc:fc:45:12:90:1f:32:45:cb:c2:9f:a4:f4:5c:41:d1:25:
         ba:a9:ff:3f:c5:f8:c4:e7:10:c2:14:cf:22:2b:f8:4c:66:3b:
         4a:1f:b3:5d:fc:35:71:99:79:25:5d:00:38:de:3b:2d:a1:c3:
         9a:f8:30:ea:6d:e8:4f:41:4c:2f:f3:69:ab:ac:4a:43:5e:aa:
         70:5d:66:de:fa:06:37:65:72:42:7c:1d:49:9f:c0:8e:28:e3:
         b2:2f:f2:48:78:35:82:cd:ef:15:a6:31:e3:cc:9f:e5:6a:9c:
         58:7d:3d:52:1b:0d:fd:db:84:bc:c9:8a:ad:b9:87:16:a2:3d:
         6f:55:f8:9c:d5:34:ad:17:7d:ab:9e:5f:d4:23:c6:db:f8:db:
         02:8e:11:d9:d3:c2:59:d8:7a:8b:ba:62:af:4e:75:f4:79:b6:
         e6:a3:7e:81:20:55:80:38:57:91:33:6b:6d:47:9b:2a:f3:55:
         e2:d2:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----