This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123.cer
File:                     eac71b30-0394-4c6c-ba2c-e133113ae123.cer (raw, json)
Hash identifier:          nbrR/eQ6OO+iZV5PZUtmhTdpDb0+U2qC+ZqsjXJWJmI=
Subject key identifier:   17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C2F49565F7C6042FF088EEB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Dec 2025 13:45:24 +0000
Certificate not after:    Sat 18 Mar 2028 12:45:24 +0000
Subordinate resources:    AS: 40173
                          IP: 206.168.118.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2f:49:56:5f:7c:60:42:ff:08:8e:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 14 13:45:24 2025 GMT
            Not After : Mar 18 12:45:24 2028 GMT
        Subject: CN=eac71b30-0394-4c6c-ba2c-e133113ae123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:7e:4b:dc:85:64:f7:af:0e:a0:0a:42:47:
                    d6:d7:7f:c3:4d:66:b0:24:d2:2a:3f:df:14:c8:20:
                    e5:ac:e1:da:14:f4:b0:72:96:1f:d2:02:f8:cb:3a:
                    57:d1:37:ee:e5:db:fe:81:43:39:d3:64:9d:14:55:
                    34:29:25:e3:ab:a9:98:50:06:9c:69:a7:46:8b:29:
                    73:1b:c5:1b:80:5d:06:ab:c7:b2:e7:53:24:f4:21:
                    d2:9f:8a:18:fd:d0:ee:3e:47:27:94:3e:ae:49:45:
                    d9:33:a7:39:c4:1f:c2:6c:53:2e:e3:75:f9:4e:e7:
                    cf:a6:65:20:6a:fa:62:4e:c4:98:a4:7f:92:79:42:
                    7b:8f:c4:85:1e:62:6a:59:46:e0:55:dd:cc:f8:6b:
                    22:05:d1:0a:db:4f:dd:ce:40:ea:4d:83:04:1f:8f:
                    87:5d:aa:b7:94:1e:db:29:b8:d9:30:93:03:d5:c7:
                    2e:90:b1:8c:cf:0c:63:2d:f4:73:30:34:20:97:c4:
                    8c:d9:d8:1a:02:87:da:e3:47:6a:20:a4:af:27:be:
                    4e:66:a3:df:99:2f:a7:fb:60:10:da:95:02:1d:f3:
                    f5:ff:2f:3a:ad:e1:0c:10:f5:73:e6:0f:dc:4a:f0:
                    77:10:4b:bb:ad:31:bf:1d:2c:00:ac:f9:6a:31:ee:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.118.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40173

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:80:bd:d6:15:8c:da:31:58:7a:da:14:e6:0a:1f:2b:5a:ad:
         9e:4c:1f:64:bb:62:fc:37:c4:58:67:66:48:d1:71:94:56:45:
         7b:2b:05:f0:6d:1b:a6:de:71:99:54:93:38:6c:0c:e2:4e:ca:
         de:b0:22:97:e9:68:e9:ae:e9:ee:6b:42:4f:c8:83:2a:9f:6e:
         87:73:62:57:c4:57:70:25:c5:5d:40:ef:f5:d6:78:92:06:65:
         e0:c9:ce:ec:c5:89:da:cb:86:92:eb:ad:fd:b0:35:4b:fa:06:
         4a:4f:d3:55:c8:9f:e3:a9:08:e9:22:b5:84:00:12:bc:70:91:
         68:d9:d9:f4:31:f0:3f:67:26:33:e1:ad:7c:ff:60:0e:ab:e4:
         7b:8c:7c:f7:80:8e:9d:51:0b:cd:5d:b1:21:df:01:14:64:f9:
         86:0b:a9:6c:06:96:00:0c:60:9b:ec:98:70:b2:1f:e1:ab:c7:
         7a:af:03:9b:1c:c2:68:b3:bf:36:12:3c:74:fe:0a:5b:7e:cb:
         c9:31:35:35:89:8d:fd:61:49:f6:f7:eb:c6:02:31:c5:a6:31:
         d4:ab:87:7a:55:c4:c8:04:56:6b:41:43:79:f4:5c:c2:3f:12:
         d1:7d:e5:30:53:d3:90:79:98:b1:46:1d:18:01:bb:94:f7:14:
         02:67:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:23:05 2025 by rpki-client