This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
File:                     11f590b6-eb6e-4969-824b-0df247220283.cer (raw, json)
Hash identifier:          nXWCB1nYino9yv/HffgemDONPC4tlEA4DpzykK19heE=
Subject key identifier:   82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C97F9F75FA27D3CBFEC5C53E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 01:45:21 +0000
Certificate not after:    Tue 25 Apr 2028 00:45:21 +0000
Subordinate resources:    AS: 46165
                          AS: 395208
                          AS: 395301
                          AS: 396139
                          IP: 23.227.216.0/22
                          IP: 27.121.114.0/23
                          IP: 64.190.89.0/24
                          IP: 64.190.102.0/24
                          IP: 69.48.208.0/24
                          IP: 103.135.128.0/23
                          IP: 139.60.76.0/22
                          IP: 148.59.143.0/24
                          IP: 162.120.64.0/22
                          IP: 205.201.28.0/23
                          IP: 207.22.48.0/21
                          IP: 208.74.66.0/24
                          IP: 209.172.4.0/24
                          IP: 209.251.28.0/22
                          IP: 2604:4440::/32
                          IP: 2607:6380::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:97:f9:f7:5f:a2:7d:3c:bf:ec:5c:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan 21 01:45:21 2026 GMT
            Not After : Apr 25 00:45:21 2028 GMT
        Subject: CN=11f590b6-eb6e-4969-824b-0df247220283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:61:52:ba:75:bf:e6:51:ab:62:a7:87:b3:
                    db:ae:6f:6c:ab:b6:e4:8e:40:c7:1b:29:54:d5:d2:
                    98:be:36:c2:bf:95:05:99:fe:d3:71:6b:e6:40:c5:
                    39:a7:0a:3e:de:62:ca:4c:8f:48:f8:a1:2d:2a:a6:
                    c7:56:83:8d:d4:f8:21:65:2c:b0:7a:bb:3e:8b:68:
                    a8:51:ae:98:a1:bb:f0:91:10:e9:44:2d:34:f3:d7:
                    a9:a9:2e:5f:00:c6:ee:58:c5:0b:2a:82:b0:8f:2d:
                    bc:9a:fe:8d:62:d0:48:58:1a:86:f4:0e:17:d1:d6:
                    7f:25:79:da:96:ac:d3:3e:c5:67:95:76:d2:43:e9:
                    ae:a4:e8:b7:1e:c6:6a:18:90:86:d7:65:cd:83:13:
                    64:58:d9:0d:fb:d5:ce:96:72:91:1a:a2:86:f9:b2:
                    f4:d7:36:2c:e9:61:fb:ab:eb:99:e3:db:0e:bb:0b:
                    4b:f2:19:9c:05:8f:c4:7f:d7:eb:3b:01:b2:88:86:
                    8d:c8:04:13:37:e4:cc:b8:49:5e:89:5c:93:a3:b5:
                    8c:58:8d:54:89:91:81:23:87:07:9b:2e:e7:6d:0d:
                    66:dc:62:1f:12:5b:10:12:75:83:8d:1f:76:01:bc:
                    64:aa:f8:a0:8c:76:dd:73:23:23:79:17:0c:1e:94:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.216.0/22
                  27.121.114.0/23
                  64.190.89.0/24
                  64.190.102.0/24
                  69.48.208.0/24
                  103.135.128.0/23
                  139.60.76.0/22
                  148.59.143.0/24
                  162.120.64.0/22
                  205.201.28.0/23
                  207.22.48.0/21
                  208.74.66.0/24
                  209.172.4.0/24
                  209.251.28.0/22
                IPv6:
                  2604:4440::/32
                  2607:6380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46165
                  395208
                  395301
                  396139

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:48:5f:28:b0:d1:ac:62:d5:9d:78:b3:38:b8:8b:eb:a6:
         85:03:88:8d:64:6c:1d:73:c4:b0:1b:d7:c6:b3:bb:b4:d5:8d:
         ce:55:e7:03:ad:0d:5d:e9:66:5c:83:3d:d3:8e:82:4a:b4:d3:
         04:e3:6f:5a:5c:25:76:50:64:6e:52:cc:cf:1c:9f:38:67:0e:
         14:08:3c:60:5f:a5:48:45:c5:91:83:23:84:a0:06:99:bc:23:
         84:9e:e7:d7:72:32:af:71:7e:dc:dc:e1:f1:9c:c4:57:14:f2:
         90:46:2e:c5:75:ef:8f:03:3a:12:65:32:55:ff:b9:83:b3:e1:
         e8:ce:da:32:ae:41:a0:de:b6:cd:03:22:4d:a3:f4:e8:86:36:
         84:04:94:77:87:24:48:8d:66:28:01:7d:a5:ea:7b:06:bb:b4:
         a8:0c:c6:7c:60:94:c1:66:33:ee:6a:65:b0:00:a1:85:0f:2a:
         df:df:da:44:35:d7:45:f4:c8:5e:f6:5e:27:f1:cc:b8:4b:81:
         2f:62:33:92:d9:11:96:2b:7a:3a:e8:71:31:c5:1a:c4:22:94:
         9b:96:b1:b7:67:5a:90:24:c6:14:05:8e:4e:89:a0:b4:b3:88:
         8a:5d:bb:0f:74:31:4f:45:5a:ef:ec:66:be:35:6f:9b:ff:24:
         79:63:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:39:06 2026 by rpki-client