This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5a4ebdad-c39c-4305-86a9-e2aad72df09a.cer
File:                     5a4ebdad-c39c-4305-86a9-e2aad72df09a.cer (raw, json)
Hash identifier:          ntx3scOkxQfnXLAN7CUHzs0sy/wPADtFIUZhh1YOlgE=
Subject key identifier:   61:BA:6F:28:83:46:3A:B7:B2:65:D5:B3:64:1F:A0:FD:12:68:8B:3B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C10C43043BD493EC49D89B340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5a4ebdad-c39c-4305-86a9-e2aad72df09a/5a4ebdad-c39c-4305-86a9-e2aad72df09a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5a4ebdad-c39c-4305-86a9-e2aad72df09a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Dec 2025 15:22:52 +0000
Certificate not after:    Tue 07 Mar 2028 15:22:52 +0000
Subordinate resources:    AS: 399491
                          IP: 69.161.34.0/24
                          IP: 69.161.39.0 -- 69.161.41.255
                          IP: 74.206.50.0/23
                          IP: 209.142.124.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:10:c4:30:43:bd:49:3e:c4:9d:89:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec  3 15:22:52 2025 GMT
            Not After : Mar  7 15:22:52 2028 GMT
        Subject: CN=5a4ebdad-c39c-4305-86a9-e2aad72df09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:0a:ef:08:96:e8:1a:37:b4:19:be:f0:3f:
                    a5:a6:f2:94:03:82:d4:6d:dc:8c:52:2f:fb:90:49:
                    49:e1:ed:83:5a:04:f3:22:87:3a:2d:3d:c5:b8:83:
                    67:14:25:ef:b7:25:ae:30:1b:66:ef:87:ca:f9:20:
                    6c:2e:79:bc:5a:9f:18:33:eb:7b:26:8f:6d:eb:19:
                    a3:60:97:cb:68:36:40:d8:b5:3a:ce:f6:b8:f6:df:
                    d2:8f:b8:3d:9f:29:8f:9e:1b:71:ae:c3:1a:d6:ca:
                    e3:d2:94:a0:ad:8d:01:2a:d4:8b:a0:d0:60:6b:e0:
                    56:94:03:20:d2:20:01:f7:b5:e8:04:78:73:b1:8c:
                    98:66:31:b6:f4:2a:b8:c0:b9:59:a0:4c:1a:f5:75:
                    a1:d2:9d:77:7f:0d:e7:4e:dd:25:2b:4d:43:cd:ed:
                    1b:19:eb:a1:72:94:fe:19:23:e7:9a:05:9f:50:83:
                    46:c0:68:67:0f:5c:3e:6d:6a:0b:e2:66:73:f9:aa:
                    b7:26:7a:70:92:84:90:de:0f:44:3e:82:ee:16:85:
                    dc:f3:07:81:01:0f:a5:be:8f:d0:50:e3:58:8e:47:
                    bc:a9:8c:1a:6a:91:6f:f9:c5:6b:45:4e:75:f0:bd:
                    cb:32:2e:66:b9:f9:3a:d7:1a:f1:80:5f:7d:ee:a5:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:6F:28:83:46:3A:B7:B2:65:D5:B3:64:1F:A0:FD:12:68:8B:3B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5a4ebdad-c39c-4305-86a9-e2aad72df09a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5a4ebdad-c39c-4305-86a9-e2aad72df09a/5a4ebdad-c39c-4305-86a9-e2aad72df09a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.34.0/24
                  69.161.39.0-69.161.41.255
                  74.206.50.0/23
                  209.142.124.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399491

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:b1:64:13:64:ee:bf:af:93:63:3a:b7:17:ba:dd:b7:a0:
         89:bf:c8:14:0b:67:1a:f5:08:de:84:69:e0:a5:96:19:45:62:
         f8:ca:ac:50:1c:40:59:c5:cc:46:a7:27:0b:44:5a:a6:16:ae:
         42:3f:d5:26:8a:3d:ef:96:75:7a:a3:f6:6e:87:e0:c6:4c:5e:
         c5:c8:ce:08:b2:63:fa:12:58:2d:66:84:0d:8a:64:77:87:bc:
         fe:c2:5b:96:c3:ea:32:97:10:f6:fb:22:b5:69:d9:81:63:7a:
         27:4f:6c:36:b2:a5:c1:f7:92:3f:78:c6:33:63:a7:49:82:9f:
         2e:28:5b:bf:64:ed:09:a7:8b:3a:b5:37:09:54:43:b9:53:21:
         ef:91:e4:5e:02:73:3b:e5:eb:7f:1d:6a:d3:51:4d:58:c6:2e:
         02:c1:30:67:f0:5a:09:8e:b7:e0:54:4b:1e:ad:36:e9:45:fd:
         f6:4e:32:ca:68:df:de:e6:5d:5a:f8:2c:18:28:62:cc:e8:2c:
         26:2d:17:e0:93:09:89:61:6b:7a:01:dd:8d:95:b7:e7:92:92:
         b1:f7:e0:bf:d1:51:e1:c5:da:2d:e2:a0:02:0b:a9:82:07:63:
         40:63:50:64:d9:91:52:f0:1e:f6:53:32:6f:81:3e:7f:4b:fa:
         35:4f:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:36:14 2025 by rpki-client