This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28194f8a-80d4-4dbb-8102-ba1f14049a3e.cer
File:                     28194f8a-80d4-4dbb-8102-ba1f14049a3e.cer (raw, json)
Hash identifier:          1i/Yszjmx6hYzo4G7MWZbd8xhs6keDGo6QXfiaPwVDQ=
Subject key identifier:   F8:22:64:B6:A7:92:D8:D6:7F:23:74:F0:C2:DC:22:9B:F8:32:6C:E1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C565EEB118B122FFDD3A7F900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28194f8a-80d4-4dbb-8102-ba1f14049a3e/28194f8a-80d4-4dbb-8102-ba1f14049a3e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28194f8a-80d4-4dbb-8102-ba1f14049a3e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 Dec 2025 13:45:24 +0000
Certificate not after:    Sat 01 Apr 2028 12:45:24 +0000
Subordinate resources:    IP: 66.163.220.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:56:5e:eb:11:8b:12:2f:fd:d3:a7:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 28 13:45:24 2025 GMT
            Not After : Apr  1 12:45:24 2028 GMT
        Subject: CN=28194f8a-80d4-4dbb-8102-ba1f14049a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:2b:d0:23:cd:7b:6f:92:e9:ba:d0:0c:3a:
                    a9:e5:1f:a1:53:07:6a:69:05:b9:5d:37:5d:53:bf:
                    be:ec:c8:c6:de:5a:f8:bd:1c:eb:30:b8:ea:98:3f:
                    b4:66:1d:e1:4b:ea:ee:f4:aa:9c:0a:86:4c:3c:e5:
                    2a:5e:ec:32:03:8c:e0:9b:9e:21:86:fb:b0:63:63:
                    80:71:57:39:26:2e:ca:87:72:a3:f3:34:0a:7b:11:
                    38:62:4f:38:93:84:0d:72:38:a0:0f:93:cb:0a:02:
                    bc:42:2f:0a:b2:b5:9b:df:ff:2c:c1:da:20:12:f4:
                    de:d1:06:7a:29:2a:a4:68:df:39:82:f0:5c:60:fa:
                    bb:02:be:0b:15:fc:45:65:bd:40:3d:c9:8a:27:dc:
                    90:ff:41:fc:76:20:94:83:e2:cb:e3:83:b7:04:f6:
                    e2:9f:fd:80:ed:63:24:e3:77:db:34:c8:14:47:0b:
                    51:db:6f:3e:5a:ac:26:e4:88:79:ed:fe:44:c7:e6:
                    c7:10:8f:38:6e:d6:a8:ab:56:eb:a5:10:94:d9:2b:
                    4a:9a:2e:1e:36:d6:37:ee:5c:d4:48:90:aa:fb:93:
                    b8:cf:aa:51:c3:8d:5a:a5:92:50:c1:ed:5c:6d:51:
                    48:69:3e:07:cc:e6:e9:87:34:54:aa:92:38:3b:58:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:22:64:B6:A7:92:D8:D6:7F:23:74:F0:C2:DC:22:9B:F8:32:6C:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28194f8a-80d4-4dbb-8102-ba1f14049a3e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28194f8a-80d4-4dbb-8102-ba1f14049a3e/28194f8a-80d4-4dbb-8102-ba1f14049a3e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:b1:32:66:03:82:8d:83:32:1d:a6:11:b9:60:24:b1:68:
         28:bb:e7:86:e5:b2:80:bb:ee:95:46:e1:ed:ce:e1:92:f2:b6:
         76:85:66:64:f5:cb:65:74:c8:0c:34:88:4b:60:8d:85:69:58:
         d3:52:b8:89:f9:1b:a1:8c:05:68:b2:6f:41:eb:d0:a7:56:e2:
         32:36:c1:79:4d:6d:fc:de:81:7c:9a:b4:45:8e:0f:e7:d4:b6:
         b2:81:75:ee:16:e3:2e:5c:31:53:c6:79:ce:e2:99:c0:42:3a:
         a5:10:45:1b:db:f9:cf:f7:8e:3c:de:c4:cd:dc:0c:5a:de:4a:
         ce:84:50:f4:7a:88:d0:9d:57:c3:3b:07:12:27:42:f5:16:d3:
         1a:84:eb:9a:46:4c:36:80:28:13:20:70:c1:1f:c5:cd:90:0f:
         25:8a:a1:7f:cb:79:41:cf:99:5d:72:0e:15:3c:36:17:ca:78:
         79:54:9a:e3:61:be:a6:da:0d:a4:8c:74:1e:3c:30:7d:6c:91:
         1b:7d:7b:a5:37:ff:36:4b:54:51:19:f8:ad:44:d6:d4:76:37:
         95:a7:13:f4:cc:b0:86:6b:e3:12:6e:89:20:66:6d:61:ca:c0:
         ed:9e:ca:2b:6c:02:4b:85:d8:25:26:56:e7:0c:db:46:2f:ce:
         df:30:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----