This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
File:                     08e3f98b-676d-49af-91dd-964a1e63df3b.cer (raw, json)
Hash identifier:          /M9chL2D18II6rlMC3+ne1Z9j9QEV5edgnpMYd4fjuM=
Subject key identifier:   FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C05691433B76775BA18E33300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 29 Nov 2025 13:45:24 +0000
Certificate not after:    Fri 03 Mar 2028 13:45:24 +0000
Subordinate resources:    IP: 64.112.65.0/24
                          IP: 2602:faa7::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:05:69:14:33:b7:67:75:ba:18:e3:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 29 13:45:24 2025 GMT
            Not After : Mar  3 13:45:24 2028 GMT
        Subject: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:a0:27:96:57:2c:04:9e:ba:51:fa:23:f7:
                    14:c1:49:61:14:81:d9:0f:cb:77:23:89:5f:72:80:
                    3d:e6:1a:3f:2e:80:75:c3:e8:ee:35:0a:f6:b3:7a:
                    07:01:76:b7:40:ef:dc:d3:41:38:64:9c:87:93:5e:
                    02:d4:e4:bf:06:11:95:2b:62:40:ef:f3:e5:ba:d8:
                    d5:f8:fc:43:c4:0b:27:86:96:30:dd:ac:3d:89:0a:
                    02:91:da:ba:a8:3a:db:94:00:9c:1f:eb:bb:3f:66:
                    b4:85:81:a5:1b:e7:1e:30:94:f8:9e:2b:f3:2a:05:
                    1a:d6:f7:80:54:97:97:20:1d:ea:f9:6c:2a:29:8e:
                    62:7f:29:9a:09:62:c9:4b:8b:35:7a:42:c7:5b:7e:
                    ff:92:19:bb:73:5d:92:0d:16:f4:1d:35:17:6b:04:
                    dc:06:d6:3f:1a:10:e7:d4:cd:91:68:da:87:20:84:
                    41:d0:3b:07:56:1c:d8:7e:65:f0:9c:58:5e:79:d4:
                    0f:0d:87:83:2f:30:df:5d:24:36:1e:45:05:c9:29:
                    06:e9:d1:bd:d8:52:ce:bc:22:64:0b:d1:d4:a7:de:
                    22:6a:a6:15:76:c6:c3:2c:4a:ad:f4:ba:7d:42:82:
                    7d:7a:da:01:58:a9:10:a8:83:36:4d:57:56:c6:2d:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.65.0/24
                IPv6:
                  2602:faa7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:0f:a4:30:77:28:95:49:76:66:52:d8:6e:6d:22:76:43:
         6f:ac:41:56:5d:9b:2d:82:78:3f:83:d8:7f:24:51:6b:84:30:
         18:2f:81:db:fa:b5:da:90:d9:ec:8d:37:13:6d:bb:52:94:e5:
         c6:a7:ba:81:a7:1a:34:b7:f8:5e:3c:de:b1:38:79:e8:f1:84:
         31:f9:6c:dd:dd:65:3c:52:f9:0c:93:9e:5f:f6:1f:a3:d8:a2:
         65:a3:c4:f9:ff:22:8d:dd:f6:96:61:0b:ac:cf:13:34:3e:28:
         73:c9:d8:ed:82:99:5a:70:1d:f4:36:50:e8:09:de:46:20:10:
         00:32:00:d3:7c:f0:f6:c7:9a:8e:1b:36:24:6c:04:1c:02:7c:
         d1:e4:b9:69:b1:5f:f5:03:f0:b0:80:20:ae:1c:52:4f:dd:d2:
         2b:e7:c2:87:39:91:ce:5e:88:e8:57:1b:1d:d4:0d:86:4f:47:
         37:a3:17:29:c6:3d:0a:19:cf:90:76:72:a4:8f:5c:5e:90:20:
         1b:7f:f9:3b:fa:88:34:89:e6:8b:1a:08:9f:a2:db:7b:f9:eb:
         07:6d:3d:8a:1b:af:47:45:93:48:3a:83:19:24:31:d4:14:d9:
         64:e9:99:41:a2:82:6d:21:a3:c8:5f:c1:d7:30:17:dc:97:4a:
         00:2b:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:34:59 2025 by rpki-client