This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer
File:                     4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer (raw, json)
Hash identifier:          aJjzu/duAUHuzIrOx16+m01pJplbPwKbNINql55XUSs=
Subject key identifier:   6F:D1:B4:14:9F:83:AC:05:DB:92:A9:58:10:C2:AC:B6:39:F7:60:9F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C846F31E56F34D7AB097CA540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Jan 2026 01:45:23 +0000
Certificate not after:    Tue 18 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 12117
                          AS: 18618
                          IP: 66.208.96.0/20
                          IP: 69.7.80.0/20
                          IP: 74.84.0.0/19
                          IP: 209.55.64.0/18
                          IP: 2606:9000::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:6f:31:e5:6f:34:d7:ab:09:7c:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan 14 01:45:23 2026 GMT
            Not After : Apr 18 00:45:23 2028 GMT
        Subject: CN=4fa8d320-d449-4e92-b9cc-502f6f725a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:a0:51:d4:d1:b1:e2:51:a7:1f:21:b4:80:
                    b0:94:eb:a2:29:eb:95:2a:9e:ff:57:90:58:66:65:
                    88:25:e3:d0:f8:6f:47:b6:30:47:f1:e1:58:86:e0:
                    bf:9a:42:2d:8e:b7:6d:95:f3:66:59:15:5f:a6:93:
                    ae:56:4e:3e:52:c3:fb:83:c5:7c:3a:f5:4f:1d:bf:
                    bd:89:23:33:a6:9b:57:bb:26:4f:4b:8d:59:53:aa:
                    51:05:b2:ed:ca:eb:3b:97:6c:ed:80:10:36:9b:ac:
                    e2:b4:03:97:01:62:7e:c5:03:7d:11:40:6b:26:0f:
                    b2:ca:1b:52:3a:36:fd:f5:89:a1:ad:91:7d:10:3b:
                    c1:a8:8f:a2:df:2c:23:32:53:b9:6a:82:45:a9:74:
                    10:c7:f3:40:d3:10:ff:7d:d1:33:2d:e7:cc:13:ef:
                    e4:00:23:0d:58:d6:7f:fd:fd:8f:1e:2e:82:46:65:
                    5e:cc:88:d2:b8:fc:29:69:d0:c6:fd:a2:f4:74:5d:
                    5a:00:0f:cf:57:59:7c:76:ce:10:b9:cf:23:1d:01:
                    ef:5b:1d:56:af:36:35:bf:86:b2:de:82:bb:62:f2:
                    66:62:3f:1b:2c:9e:fe:03:bd:d3:b2:86:a2:0f:dc:
                    98:51:56:8f:78:19:80:bc:e1:00:fa:db:53:30:aa:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D1:B4:14:9F:83:AC:05:DB:92:A9:58:10:C2:AC:B6:39:F7:60:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.96.0/20
                  69.7.80.0/20
                  74.84.0.0/19
                  209.55.64.0/18
                IPv6:
                  2606:9000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12117
                  18618

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:64:0a:88:08:7b:0a:b3:ae:96:f9:93:c7:78:e3:db:99:
         26:b4:c9:09:71:ed:65:24:3e:73:4f:56:ee:7d:b0:56:2b:0d:
         d4:e2:ab:cd:41:95:d2:bc:83:40:e7:e2:b0:bc:2e:37:33:bc:
         48:56:b3:ff:10:9f:e0:83:ae:6f:f7:67:0e:6e:e9:a5:30:1b:
         42:ca:70:f1:15:9d:20:83:a3:b1:e6:ae:f5:04:ba:5d:e0:c1:
         6f:98:ce:87:07:cb:c6:b1:9b:da:88:5f:38:11:7a:9f:e5:e6:
         e0:0e:d3:ba:10:b7:50:c0:ae:43:fc:18:42:39:f0:ab:e8:9e:
         32:71:3d:37:75:a7:2b:d1:c9:b1:7f:b9:62:2b:5d:e4:ba:7f:
         6d:7f:6f:65:9a:f5:92:83:b9:04:99:67:6e:a3:dc:ba:5c:fe:
         06:ba:c6:5c:70:be:f2:b2:9a:a7:a8:40:76:d5:55:32:b9:c9:
         b3:d9:65:b6:b4:62:01:c6:bd:a6:55:e8:d8:12:c1:7f:79:db:
         2b:49:81:a0:42:e7:68:04:23:e3:0f:1d:88:0d:20:d6:36:d9:
         9f:5f:22:75:f0:9d:32:e2:73:21:34:4f:fd:2a:38:16:d4:51:
         4c:7e:62:b6:54:dc:13:35:84:a6:1d:f4:cb:79:d0:2a:3e:10:
         3c:c0:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:55 2026 by rpki-client