This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
File:                     3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer (raw, json)
Hash identifier:          Bf4VQm3XBzl2ghE8u5KBiBXYDuVhGgmtSn09+Iv8pu4=
Subject key identifier:   BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C952F4D35BF39805ECDD6C1F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Jan 2026 01:45:23 +0000
Certificate not after:    Mon 24 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 19718
                          IP: 2600:2700::/28
                          IP: 2610:28::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:2f:4d:35:bf:39:80:5e:cd:d6:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan 20 01:45:23 2026 GMT
            Not After : Apr 24 00:45:23 2028 GMT
        Subject: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:54:3f:8f:1a:86:93:dd:e0:33:14:fb:21:
                    53:8a:a8:6f:1d:91:eb:a4:0b:ac:02:9a:cd:33:32:
                    80:42:98:b7:65:5c:22:9f:ad:a7:09:80:7a:70:a4:
                    5f:c1:e9:a8:6f:e5:1c:17:22:c2:99:f3:25:f5:5c:
                    7b:e7:c7:a2:6d:87:bd:d1:ee:80:6a:05:67:34:92:
                    43:95:54:80:54:b9:9c:cd:d0:6d:a6:af:fa:50:a3:
                    10:50:15:21:dd:4c:b0:79:a6:09:e1:b4:08:90:c5:
                    29:a2:f9:e6:d7:cc:b0:3e:11:d8:69:d8:e7:c4:a6:
                    50:5e:42:6c:a3:8a:f8:6b:ba:ed:23:9f:41:a6:9d:
                    5d:3c:18:72:7d:23:31:53:ae:48:a0:8b:2c:2d:ff:
                    21:bf:76:ea:ba:4b:ce:fe:43:8c:5b:c8:99:42:63:
                    11:66:04:00:ab:96:e5:b7:91:82:82:90:c3:38:69:
                    23:1a:3e:04:64:4a:7a:ad:24:50:f8:4b:58:77:d5:
                    6c:a6:a4:b4:92:e1:4e:a8:86:43:3f:4b:bf:32:7d:
                    28:98:20:68:69:e0:c2:db:a3:76:d3:b0:6e:2e:08:
                    8c:96:b6:55:d9:19:4a:72:d4:b3:5b:45:34:05:79:
                    97:3e:88:d9:15:bb:9f:d4:62:98:14:05:03:14:73:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2700::/28
                  2610:28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19718

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:79:7b:df:b5:b3:4a:d0:25:be:ed:0a:f7:9c:69:70:f8:03:
         d4:15:c9:6f:f6:fc:29:d6:96:91:19:39:c8:65:e7:5b:f3:be:
         80:50:be:e1:82:47:44:1d:47:48:9c:3b:81:f1:bf:34:06:71:
         7d:ad:e4:0d:00:15:d8:1e:de:26:51:2f:ad:06:e8:39:9c:5f:
         b6:34:7c:a5:24:6f:67:e8:98:eb:a7:4d:e2:ea:d8:d7:4e:16:
         0f:d4:c4:84:86:59:a9:67:66:9c:b9:45:09:8f:23:16:93:9b:
         95:3c:aa:d4:95:da:92:2e:04:c5:29:74:74:ce:ab:d0:0a:f7:
         c3:73:93:0c:3a:9c:cc:f6:f0:94:b8:b3:81:a7:3b:8c:d3:c6:
         83:2b:6c:31:f4:51:d1:54:e6:d1:fa:50:f2:57:77:36:20:d3:
         66:d1:df:98:cd:7d:96:20:d3:6f:55:f8:a8:df:96:ad:32:b6:
         db:27:60:21:d8:0a:f6:f7:70:c5:90:7a:d6:62:41:a8:18:f5:
         0a:10:f5:d5:5e:bc:4b:ba:2c:6c:8e:2d:1e:9d:af:96:fb:9d:
         39:cc:89:49:02:09:d4:bf:a3:97:e5:5b:1b:6c:e3:fb:2f:69:
         bc:b3:75:6c:ab:73:a4:33:db:63:ec:25:28:bb:35:19:9c:9c:
         13:cf:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----