This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
File:                     20a16a9a-6641-447a-8644-025fca0c6683.cer (raw, json)
Hash identifier:          0f87KgQVTSmGlx1rgmoHgYv2dDJM4Wq2R3GZyCRkjb0=
Subject key identifier:   B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C8739E33FBEE90DB53478D3E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:45:24 +0000
Certificate not after:    Wed 19 Apr 2028 00:45:24 +0000
Subordinate resources:    IP: 140.235.108.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:39:e3:3f:be:e9:0d:b5:34:78:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan 15 01:45:24 2026 GMT
            Not After : Apr 19 00:45:24 2028 GMT
        Subject: CN=20a16a9a-6641-447a-8644-025fca0c6683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:d3:83:09:c1:f8:5a:62:c3:c1:46:33:87:
                    93:a1:c2:4f:9f:a5:07:62:65:71:13:7d:c5:60:37:
                    e4:b8:bb:32:8f:79:e3:ab:76:47:88:2c:c9:68:db:
                    dc:6f:26:17:c9:f9:79:bb:36:4a:e5:44:23:b7:f7:
                    0f:f0:15:ab:af:2c:c2:9a:aa:44:f4:37:40:4d:18:
                    97:95:b7:31:1f:3e:d8:17:5e:d1:a9:f5:af:98:fe:
                    a5:08:8c:39:2e:68:ba:4b:83:3e:6b:1c:4d:10:b6:
                    d1:16:90:a1:f7:11:1c:82:21:de:86:7c:06:cc:81:
                    e9:e1:c2:fd:3a:80:08:00:47:df:cf:1d:b0:d5:c6:
                    2a:4e:58:06:c3:2b:5b:8b:0a:07:31:4d:30:07:9d:
                    2b:77:14:ed:40:62:6a:08:30:0a:f7:2e:7d:7a:22:
                    6f:e7:04:dd:31:70:63:3e:56:2c:21:12:6c:8d:38:
                    22:bd:30:96:08:c3:e6:ae:89:ef:75:0e:0d:ec:8c:
                    ab:e6:50:67:43:8c:d1:4b:fb:6c:57:2d:02:2c:68:
                    9e:73:87:ff:f1:87:98:96:87:12:60:70:3f:27:b8:
                    f9:b3:af:25:12:6b:bc:80:12:73:c7:bf:0e:88:b7:
                    f2:77:a3:30:c1:6b:e3:64:cb:8c:1a:8d:e7:3c:1a:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:83:e2:43:12:28:6f:ba:8e:f9:83:8a:cf:e0:fe:8f:2c:
         5f:90:ff:e0:5c:22:0c:7d:81:af:7a:4c:53:f2:54:bb:bb:35:
         e0:d7:4d:85:1c:74:b9:6b:28:d6:e4:85:b1:13:3b:75:dd:0e:
         9f:19:3a:02:8e:24:d9:13:e7:08:b9:4d:1a:3b:b5:00:3d:3c:
         df:4a:ad:c4:0b:87:ff:06:79:dd:b1:ef:a8:aa:5d:6c:fe:bb:
         67:e5:d2:f7:d2:19:95:21:4f:60:b6:08:d1:6a:1c:7e:7b:c1:
         ed:3e:22:d6:5d:95:65:a8:3b:d3:38:1e:ce:5b:3f:f1:e9:c3:
         2b:d9:04:9c:0f:09:bf:80:a5:47:af:82:b1:42:8f:58:76:ea:
         39:91:40:2a:07:ec:9b:3e:5f:a0:23:4d:af:e7:41:70:6e:a0:
         99:ea:7e:fd:f5:47:1c:3a:72:bb:92:7d:c7:e2:13:f2:c9:e9:
         0f:8b:e0:28:93:76:c4:d7:8b:17:f6:fe:f4:f0:7c:5b:b2:8f:
         f8:cb:7d:f5:fc:2e:f3:4d:4c:b3:17:4e:e7:35:1c:90:4a:9d:
         f8:f7:98:1e:21:da:b2:84:ce:27:48:23:59:5e:3a:14:28:a8:
         f1:43:91:15:05:73:e4:ca:9d:e5:df:50:3a:1e:52:27:44:c3:
         4c:55:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:22:17 2026 by rpki-client