This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
File:                     3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer (raw, json)
Hash identifier:          FbMqiq2A0bTzryt3O57tcpQ4Dm+BjCgC61V6JgeV9D4=
Subject key identifier:   7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C73AF16AA42E7F2EB81C13560
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Jan 2026 01:45:23 +0000
Certificate not after:    Wed 12 Apr 2028 00:45:23 +0000
Subordinate resources:    IP: 140.235.20.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:73:af:16:aa:42:e7:f2:eb:81:c1:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan  8 01:45:23 2026 GMT
            Not After : Apr 12 00:45:23 2028 GMT
        Subject: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:4b:00:9c:aa:1e:b9:af:b3:da:15:27:be:
                    59:9d:bd:b6:9e:57:63:1a:93:5f:f0:15:84:c4:44:
                    d7:50:35:1a:7e:ca:0d:1a:0e:e4:04:2c:71:26:b2:
                    c7:f1:bb:4f:6f:ef:69:4c:ea:b9:8e:a3:72:dd:49:
                    ec:25:1f:a5:e9:1d:65:9a:db:e2:21:86:ef:be:12:
                    f7:a8:d7:dd:b8:06:99:f1:4f:94:c2:55:87:68:0b:
                    d6:02:ca:ed:8a:ef:56:f2:6a:e8:2e:b4:f9:58:38:
                    f6:ca:16:04:b3:0c:c5:23:9a:c5:28:42:88:86:b1:
                    28:1f:81:a8:ee:11:40:88:2c:01:60:6e:24:6b:b4:
                    54:0f:b6:03:41:aa:74:d1:64:2d:4a:6c:9e:de:86:
                    db:b6:b9:d8:2a:aa:4a:48:19:47:f3:8a:e5:f3:8d:
                    56:7e:69:ae:84:9a:93:95:b3:b1:aa:6f:5a:b9:fb:
                    ab:05:96:4f:d1:67:af:b5:b8:64:da:af:50:3d:10:
                    43:ab:4c:b0:42:12:d2:d2:fe:87:fc:d9:e4:77:5d:
                    81:bc:7c:55:76:01:b6:2d:7e:f3:50:a2:d0:8a:9a:
                    9c:f5:10:60:79:19:9c:b3:6b:6e:0a:04:c1:9e:d3:
                    ee:1b:ba:50:e1:71:1e:5f:bf:2b:d0:d4:3f:75:7a:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:d9:ae:0c:c4:a7:9a:4b:7d:e2:73:f8:35:12:b9:a6:0d:
         b3:85:50:4b:38:7e:26:4f:07:45:a7:32:58:5d:d8:56:d9:c8:
         f0:87:39:b4:2c:ee:9f:0b:f2:5c:91:12:ec:7c:25:b1:06:da:
         00:9d:0f:77:36:4b:a6:c7:e5:c2:c7:c4:14:c8:a1:7f:d3:f9:
         d8:3c:c8:db:42:c3:f2:4c:aa:91:35:cc:5c:6c:f3:81:d7:82:
         1f:be:18:19:19:d5:0b:1d:2d:b1:c3:a9:1d:2b:c2:34:bb:9c:
         b4:3a:5e:ee:07:5a:82:ac:69:6f:34:e3:50:c1:f3:ca:03:2b:
         0d:a6:8a:75:78:88:e8:00:de:d8:2f:ef:80:24:7d:e8:21:7f:
         10:79:49:b8:1e:66:80:62:82:01:a6:5a:55:c5:a7:28:f9:39:
         2d:55:19:6e:5d:2d:b6:8d:d3:58:5b:b4:74:d0:70:48:1a:6e:
         41:52:ba:81:69:c5:77:28:d3:f9:93:29:86:c2:90:65:c1:3a:
         04:99:dc:df:0a:71:0f:57:af:63:4a:b4:05:c5:7d:3a:89:86:
         18:ae:b3:eb:91:d6:60:61:39:9b:53:91:6d:56:48:6c:8a:aa:
         32:84:07:dc:be:e3:2d:ba:72:e1:47:89:69:0d:74:8d:04:34:
         69:a9:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----