This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
File:                     60f3bf9e-9df6-4935-a73a-d336655a686b.cer (raw, json)
Hash identifier:          pz5uwPeDOBX55lGtCHFi/OEz/DAx1l0irZBaoIRyHV0=
Subject key identifier:   55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C60244DF21E8578AFFE64A700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:45:23 +0000
Certificate not after:    Wed 05 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 19107
                          IP: 68.235.0.0/20
                          IP: 162.219.152.0/22
                          IP: 216.234.64.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:24:4d:f2:1e:85:78:af:fe:64:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan  1 01:45:23 2026 GMT
            Not After : Apr  5 00:45:23 2028 GMT
        Subject: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:28:3e:3e:f8:82:00:6d:66:0d:af:51:cc:
                    55:fd:48:52:ed:68:8b:e7:51:e0:06:01:b4:30:d2:
                    b6:84:a2:a6:12:dd:10:06:40:6d:cb:76:89:78:87:
                    53:c4:1c:4d:d1:89:5b:84:f0:5a:a3:86:88:07:6e:
                    ff:60:8f:48:9a:28:1c:4c:66:00:3c:68:14:20:76:
                    f4:7c:3f:37:7e:f6:3a:15:39:f7:5a:9c:88:7b:b5:
                    82:34:8c:29:2f:7e:71:59:a5:f7:cf:6c:91:1d:b6:
                    47:2c:45:a4:ee:4d:a1:2e:0d:f1:1f:68:a3:de:91:
                    5b:7c:2d:f4:8b:66:58:d0:a5:93:2d:40:0c:0f:55:
                    26:83:51:04:62:a5:8e:2d:8c:8a:13:50:1f:c5:c8:
                    5f:4c:11:e9:5c:60:68:d4:0f:c1:75:1e:c3:9e:7e:
                    03:5e:96:fc:b4:16:8e:27:d1:41:ff:a7:eb:4b:d5:
                    91:8d:44:84:69:2f:7b:98:c0:19:44:b9:9e:a4:42:
                    ad:b0:88:fe:a0:31:cd:27:fe:7c:9d:da:81:d2:42:
                    9a:fc:0c:f3:b7:fe:b9:90:79:61:09:42:40:98:86:
                    9f:e9:69:50:f9:b1:5d:c5:7a:43:48:f3:d7:66:df:
                    45:68:7d:1b:88:b1:24:83:fe:47:76:79:ac:33:c1:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.0.0/20
                  162.219.152.0/22
                  216.234.64.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19107

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:69:b4:15:4e:e6:30:c6:f5:4b:d9:97:d9:b8:15:c7:6d:92:
         65:42:92:77:16:3c:a5:ed:23:22:0d:5e:f7:a0:81:61:f1:1d:
         25:db:c5:06:26:63:65:ea:ab:db:c9:7c:94:4c:b2:db:bc:4d:
         77:83:15:37:2e:03:1b:65:e7:78:b0:55:f7:3d:9b:64:ed:60:
         2f:b4:c2:d3:9c:59:8a:f4:2e:b8:20:06:49:57:49:1c:f2:c0:
         84:75:c4:93:6b:91:f6:83:cc:15:32:53:62:83:08:79:16:5e:
         e9:ab:3c:7e:ae:51:7b:a5:e1:55:48:78:1a:10:8a:86:d1:64:
         cd:51:02:a0:75:f4:36:0a:69:88:80:aa:e6:7f:28:a2:89:a2:
         70:18:37:aa:8e:83:7b:85:41:da:40:5f:74:dc:9b:a3:e7:ec:
         e6:97:6e:22:a7:b6:7b:39:fc:44:31:d7:88:e6:5e:34:40:84:
         b9:74:fe:15:60:8a:13:08:1a:5b:9a:b5:cb:d9:f6:2a:ac:a7:
         0a:f4:93:e2:94:78:91:af:8e:79:6a:b7:ea:23:e2:54:34:a8:
         d6:03:1a:a1:c7:c6:03:ef:d7:04:47:ef:27:9e:51:7b:28:ad:
         40:51:8c:c5:de:1c:f0:08:89:f7:41:08:15:ac:f1:c9:f4:9a:
         36:03:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:19:56 2026 by rpki-client