This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08.cer
File:                     3383acb5-041a-4b81-9516-e42d7caeaa08.cer (raw, json)
Hash identifier:          A2r0kPEu8jmuOllbnxexfc/E6aQqAuwYjUsCBuKRosk=
Subject key identifier:   5C:4B:9A:4C:65:DC:00:65:96:D4:86:E1:D0:2D:4D:6C:F4:4A:7D:A7
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BE818E4D4E2A395F9FD4ABCB8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/3383acb5-041a-4b81-9516-e42d7caeaa08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Nov 2025 01:45:23 +0000
Certificate not after:    Tue 22 Feb 2028 01:45:23 +0000
Subordinate resources:    AS: 53989
                          IP: 23.185.192.0/24
                          IP: 173.205.200.0/22
                          IP: 208.67.112.0/22
                          IP: 2604:b3c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e8:18:e4:d4:e2:a3:95:f9:fd:4a:bc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 19 01:45:23 2025 GMT
            Not After : Feb 22 01:45:23 2028 GMT
        Subject: CN=3383acb5-041a-4b81-9516-e42d7caeaa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:d6:2a:21:90:ef:aa:a8:38:f8:62:a5:32:
                    ae:de:0d:0b:6f:6a:8e:20:43:32:4a:33:9e:7e:6e:
                    c3:41:56:35:d8:49:70:ca:a9:ae:89:93:7d:db:3b:
                    ee:f9:f0:40:17:66:a5:ad:04:b7:2e:12:e6:98:09:
                    bb:85:c5:e1:ce:85:98:e9:9a:14:25:c4:6c:ac:19:
                    8a:b4:bf:6e:e7:42:ab:b4:29:51:97:65:b9:f3:c6:
                    b7:41:44:77:aa:14:36:bc:ac:14:ca:0c:59:15:24:
                    d9:66:ab:00:94:22:6b:43:dd:2e:db:be:07:ff:07:
                    cd:81:4a:0d:a7:02:9a:00:59:fd:b9:a2:d3:c0:9f:
                    a0:e1:44:13:03:03:b8:3f:01:4e:12:46:bf:6a:bf:
                    75:e4:6a:04:29:30:2a:89:61:ea:66:d1:c9:75:59:
                    e8:49:e4:20:1b:04:5a:ae:12:dd:1b:1a:9f:7c:b1:
                    ea:2f:d6:5e:0a:18:0b:c5:07:7e:6c:f0:56:6d:72:
                    1c:c4:bc:59:22:5d:a7:ba:3c:1e:59:20:19:dd:f3:
                    84:42:b0:2b:d9:6e:fd:b2:dd:c7:22:f5:02:b5:fb:
                    33:da:4e:da:89:43:fc:d3:5a:b3:0e:3b:8d:25:cf:
                    cc:f6:65:bb:c2:17:51:d3:53:51:be:5b:23:41:b4:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:9A:4C:65:DC:00:65:96:D4:86:E1:D0:2D:4D:6C:F4:4A:7D:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/3383acb5-041a-4b81-9516-e42d7caeaa08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.192.0/24
                  173.205.200.0/22
                  208.67.112.0/22
                IPv6:
                  2604:b3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53989

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:cf:15:48:75:07:f8:66:17:91:cf:72:0e:cb:b6:26:0e:
         ba:af:c8:41:14:8f:43:bf:49:d8:c2:f5:db:22:8a:6b:4e:3c:
         54:47:30:d7:af:79:34:0a:2c:43:af:ce:72:d4:c5:14:08:1e:
         8b:bc:73:91:69:b2:34:0b:0a:68:6b:d7:4b:f7:a3:46:40:cd:
         a8:de:1e:6d:bd:40:8b:27:eb:80:99:bb:b9:ac:ef:b0:50:56:
         01:dc:18:d5:9c:20:00:41:b5:e9:b7:ca:0f:1c:7e:b4:41:f6:
         ff:4e:1f:77:3d:9e:7e:99:cc:ed:8f:3d:e6:66:e0:64:dc:7a:
         82:ef:ec:1a:3d:d2:f4:70:e8:cc:b4:b4:cc:d8:80:d9:1b:c1:
         99:94:ae:d2:e6:93:a9:18:38:42:55:d3:5d:36:f4:bd:06:1c:
         37:de:ac:87:99:ba:3f:28:a8:83:b9:91:30:87:83:7f:99:9e:
         06:58:64:22:93:4e:d4:06:7c:46:6b:ab:df:5b:62:f9:23:71:
         2a:a0:98:e8:88:b6:7f:8d:fd:48:05:85:3a:8b:19:13:0e:70:
         4d:44:f6:ab:22:fa:da:4f:3d:bb:ed:43:25:0c:d7:d1:d6:c0:
         59:50:fa:75:c3:1b:0d:a2:2c:dd:19:29:71:90:45:b6:f6:d3:
         ba:be:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:12 2025 by rpki-client