This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer
File:                     fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer (raw, json)
Hash identifier:          HSQXp+8np3eT9lGCBPwvMyIf3phh/QLLI2ijFrHWP3M=
Subject key identifier:   CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C7ED9D4C9A0E1E7EC2BF88600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 01:45:23 +0000
Certificate not after:    Sun 16 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 400200
                          IP: 23.128.184.0/24
                          IP: 128.254.128.0/22
                          IP: 2602:80c:e000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7e:d9:d4:c9:a0:e1:e7:ec:2b:f8:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan 12 01:45:23 2026 GMT
            Not After : Apr 16 00:45:23 2028 GMT
        Subject: CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:52:73:1d:c7:c1:01:db:10:65:37:25:b2:
                    6d:bb:7d:aa:29:00:dd:0d:f9:36:13:a1:60:38:7c:
                    66:10:9d:6a:63:ff:63:3c:91:50:b8:22:33:07:32:
                    9a:a2:4a:75:5f:3c:1c:5a:fc:99:ec:a1:49:e4:3c:
                    a7:b0:a2:a7:52:c2:ea:17:ea:81:aa:55:f7:a6:ec:
                    ae:ff:45:4c:06:df:cc:19:4c:cb:fd:dd:32:d1:a3:
                    76:f4:81:11:7a:4a:01:db:e7:07:b4:3a:57:f4:00:
                    70:2d:d5:6d:64:f4:9e:d6:42:e5:dd:c6:1e:c4:f5:
                    b1:ff:20:db:2f:d5:60:a2:b0:34:6e:91:fb:3c:1f:
                    af:01:92:59:44:8d:44:0d:d1:67:b9:b8:f6:fc:1f:
                    24:c9:da:61:1e:3e:24:54:8e:91:3b:9c:8b:5a:1d:
                    63:d1:44:a6:4a:34:53:ac:eb:f1:57:a2:4a:50:2c:
                    30:19:9f:dd:77:74:3a:f7:4d:75:9b:a5:48:c2:fd:
                    11:90:78:84:43:db:88:18:a2:bf:46:2a:a6:af:7b:
                    7d:16:96:ef:c9:26:b5:06:df:a7:bb:c2:1c:ec:50:
                    ff:02:2b:2a:36:03:39:86:13:78:ff:fa:04:ed:44:
                    00:b3:6e:03:05:90:af:e3:d2:f7:cf:3a:06:1f:b6:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.184.0/24
                  128.254.128.0/22
                IPv6:
                  2602:80c:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400200

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:db:9e:a3:78:ed:7e:74:f3:3d:eb:19:23:5d:60:ba:0f:9e:
         d0:ba:18:1a:e4:2f:be:c0:40:a3:be:01:8a:32:2f:33:0f:60:
         73:05:38:c2:d4:6d:ac:84:bf:0a:45:1d:ef:cc:01:37:b9:67:
         28:6b:ac:13:54:23:c0:8c:a2:63:84:e2:e2:88:26:bf:10:1b:
         65:3d:40:5f:10:3c:4a:49:d0:c8:c9:0c:65:d3:f5:7f:5b:d9:
         75:cd:c2:50:25:41:ba:3b:2a:c0:f0:1e:42:7e:ce:6e:d7:eb:
         b5:14:6a:49:57:66:ba:34:68:ac:28:8f:a5:11:0c:7f:3f:0c:
         8c:6f:55:55:7b:5e:67:b3:e2:b8:10:03:e0:5d:a5:36:c1:44:
         23:c3:68:2f:91:a4:16:91:fa:ca:fd:f7:73:34:8b:b9:cb:d7:
         65:53:ea:d5:4b:0a:ab:4e:3e:94:0b:d7:31:b3:36:7f:6d:0d:
         86:93:ab:04:7f:6c:05:aa:5c:f2:86:f7:d2:91:f4:b3:f3:ea:
         63:47:df:c3:e9:29:99:69:a9:28:bc:89:dc:7d:38:b9:39:2d:
         46:c2:e5:ae:96:1c:7a:8b:d4:8c:60:0c:fe:90:30:ce:cb:a5:
         65:65:87:24:47:4d:76:39:fc:d4:73:74:ef:74:c2:4a:66:24:
         ec:8d:b8:a9
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEx+2dTJoOHn7Cv4hgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDExMjAxNDUyM1oXDTI4MDQxNjAwNDUyM1owLzEtMCsGA1UEAxMk
ZmNkOTk2NGMtOGQwYy00YWJmLTljMDAtNmUwYzNkZDk2YzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GFScx3HwQHbEGU3JbJtu32qKQDdDfk2E6Fg
OHxmEJ1qY/9jPJFQuCIzBzKaokp1XzwcWvyZ7KFJ5DynsKKnUsLqF+qBqlX3puyu
/0VMBt/MGUzL/d0y0aN29IERekoB2+cHtDpX9ABwLdVtZPSe1kLl3cYexPWx/yDb
L9VgorA0bpH7PB+vAZJZRI1EDdFnubj2/B8kydphHj4kVI6RO5yLWh1j0USmSjRT
rOvxV6JKUCwwGZ/dd3Q69011m6VIwv0RkHiEQ9uIGKK/Riqmr3t9FpbvySa1Bt+n
u8Ic7FD/AisqNgM5hhN4//oE7UQAs24DBZCv49L3zzoGH7YmNwIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFM4gWAQZsku5B/tnAOTFgZSeNXO2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m
Y2Q5OTY0Yy04ZDBjLTRhYmYtOWMwMC02ZTBjM2RkOTZjNzMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ZjZDk5NjRjLThkMGMtNGFiZi05
YzAwLTZlMGMzZGQ5NmM3My9mY2Q5OTY0Yy04ZDBjLTRhYmYtOWMwMC02ZTBjM2Rk
OTZjNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXgLgDBAKA/oAwDgQCAAIwCAMGACYCCAzgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYbSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCX256jeO1+dPM96xkj
XWC6D57Quhga5C++wECjvgGKMi8zD2BzBTjC1G2shL8KRR3vzAE3uWcoa6wTVCPA
jKJjhOLiiCa/EBtlPUBfEDxKSdDIyQxl0/V/W9l1zcJQJUG6OyrA8B5Cfs5u1+u1
FGpJV2a6NGisKI+lEQx/PwyMb1VVe15ns+K4EAPgXaU2wUQjw2gvkaQWkfrK/fdz
NIu5y9dlU+rVSwqrTj6UC9cxszZ/bQ2Gk6sEf2wFqlzyhvfSkfSz8+pjR9/D6SmZ
aakovIncfTi5OS1GwuWulhx6i9SMYAz+kDDOy6VlZYckR012OfzUc3TvdMJKZiTs
jbip
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:12:42 2026 by rpki-client