This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer
File:                     28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer (raw, json)
Hash identifier:          uJEGXdjH8rYr4Phgb2I8e/PqZoebdFfw6XVWiiIn8m8=
Subject key identifier:   18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C6B4F08C2221362535EF85920
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Jan 2026 01:45:22 +0000
Certificate not after:    Sun 09 Apr 2028 00:45:22 +0000
Subordinate resources:    IP: 199.71.12.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:4f:08:c2:22:13:62:53:5e:f8:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan  5 01:45:22 2026 GMT
            Not After : Apr  9 00:45:22 2028 GMT
        Subject: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:c0:b6:83:19:71:fa:bf:50:7e:b3:43:87:
                    73:e5:4c:6b:dd:5d:1f:d5:6a:23:7c:e9:b0:2c:1a:
                    3b:f5:bb:42:60:7b:84:34:6a:30:85:c7:8e:73:5a:
                    10:cf:c9:51:ef:db:19:4f:c9:10:43:e3:75:78:00:
                    4d:c7:cc:42:e0:c5:47:28:4a:e6:d1:82:75:42:6a:
                    67:a1:bf:1f:77:75:c8:ec:5c:2a:dd:d6:0c:12:ad:
                    0e:fb:32:b6:80:35:87:bb:cc:63:28:a5:e6:35:2a:
                    8e:d7:04:5f:72:5c:c0:ec:bb:9d:7a:72:4d:00:51:
                    f1:7f:f8:0d:54:1c:f7:22:b5:d8:85:a8:6b:98:0e:
                    46:89:73:62:92:57:1c:86:d1:e4:a4:51:2b:5c:bb:
                    c9:93:cf:4f:9d:ea:7e:3a:45:de:7d:0b:00:7e:65:
                    c6:74:2b:e5:80:73:49:1c:47:95:b5:5c:fa:d0:cd:
                    40:cf:2d:bb:08:58:d1:d7:e3:12:70:80:8b:76:b1:
                    2e:38:ea:31:70:1f:70:24:30:11:b8:7f:d2:13:d5:
                    9f:35:1c:d1:86:7e:c9:7b:50:f9:f8:e7:03:5d:75:
                    11:d4:39:db:ec:d4:3d:13:65:26:e0:4b:ff:72:42:
                    69:f1:05:41:e7:1c:50:48:03:b5:d9:6f:bc:a9:08:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:59:87:b7:d6:c4:18:97:ba:54:39:ec:73:32:a3:26:78:
         7a:16:c7:c5:f0:a3:82:0e:84:ce:e9:f5:76:87:8e:76:7c:0d:
         e2:bb:cf:37:ca:44:a6:b5:2d:5e:76:1e:10:45:b9:7b:17:93:
         81:79:48:23:21:7d:c4:46:10:2a:c9:a8:f9:ba:df:69:e7:c4:
         65:e7:3f:d9:cd:34:dc:b6:1f:50:2a:4c:7f:c7:44:ae:aa:80:
         8e:25:cd:03:6f:39:42:dc:a0:d5:be:cf:fe:7f:0f:64:6a:ae:
         86:7c:34:99:88:fd:d5:b9:2e:6e:45:68:f9:da:32:7c:57:aa:
         08:88:58:e6:00:e1:e1:ec:8d:93:db:58:d0:cc:9c:79:c5:25:
         92:ad:f5:76:2f:07:08:9c:7e:24:30:8d:87:9b:f9:22:68:cc:
         6b:cf:85:25:aa:14:f1:70:43:03:f8:c3:62:7f:4b:7c:d1:b1:
         5f:2e:42:93:f2:b5:c8:9d:be:22:f6:f0:0c:a4:3d:77:3f:ef:
         e5:3b:34:38:c8:6a:6c:4d:04:42:b7:96:7d:b1:28:c1:cf:fc:
         1f:24:28:75:cb:7e:13:8f:7f:c5:40:a1:73:87:86:da:8a:0e:
         50:8d:ff:61:12:8c:61:75:6a:61:08:d0:96:b0:08:92:70:43:
         17:8b:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----