This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07.cer
File:                     8490019f-3334-4789-b5d8-222fabc92a07.cer (raw, json)
Hash identifier:          VofEozRhN5HLApmAz4VrJOEI3iMQstHx7t9W+Wg9cr4=
Subject key identifier:   CE:2F:F5:25:FE:A4:78:5D:25:89:E6:0B:7D:DE:1A:D0:31:E1:FD:5B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C0403B9F21D1B5DC4BF3A4700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/8490019f-3334-4789-b5d8-222fabc92a07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 29 Nov 2025 01:45:23 +0000
Certificate not after:    Fri 03 Mar 2028 01:45:23 +0000
Subordinate resources:    IP: 2620:42:c000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:04:03:b9:f2:1d:1b:5d:c4:bf:3a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 29 01:45:23 2025 GMT
            Not After : Mar  3 01:45:23 2028 GMT
        Subject: CN=8490019f-3334-4789-b5d8-222fabc92a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:f3:d4:3e:c5:fc:73:e1:9b:94:10:1e:ff:
                    5f:94:ea:08:51:91:46:8d:e9:32:c7:9b:16:c7:e8:
                    b9:32:f5:bf:ee:0e:fc:d4:46:3d:59:3e:f9:f0:71:
                    77:92:d6:bf:91:89:6c:6a:38:33:ea:fa:b8:15:5f:
                    15:49:c1:63:da:98:26:0a:f5:30:ba:1c:93:4a:88:
                    c1:88:db:6d:b9:38:38:80:61:7a:56:f3:a1:35:5c:
                    dd:31:b7:e5:fa:31:a6:e0:b4:ad:a2:3e:06:3c:2e:
                    7c:99:22:6c:fc:df:38:f4:ff:2e:93:25:fb:f6:63:
                    cb:89:73:8c:fc:af:4f:c5:89:d7:a6:26:fc:19:18:
                    2e:a1:ec:38:b9:24:f4:3a:2e:cd:4d:82:8c:5f:fb:
                    cf:32:85:f0:ab:94:95:5b:00:e9:d6:3e:1a:a8:2e:
                    94:b4:20:d4:96:b7:59:48:b6:61:33:3b:18:80:3a:
                    1c:ec:20:bd:b8:29:91:72:c7:57:2e:fe:32:99:6e:
                    e1:4f:17:ed:4c:88:f8:ba:97:11:cd:bd:c5:fe:c5:
                    a7:53:72:52:d3:9f:4e:2e:2c:12:41:39:4d:98:ad:
                    8a:f3:41:7b:9d:fa:73:bc:71:a1:81:96:33:a6:65:
                    c0:f0:c1:0a:8a:ce:31:8d:07:22:27:3c:20:42:d4:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:F5:25:FE:A4:78:5D:25:89:E6:0B:7D:DE:1A:D0:31:E1:FD:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/8490019f-3334-4789-b5d8-222fabc92a07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:42:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:a2:b2:a8:c7:6b:ef:0f:5b:30:09:13:d6:47:a1:7f:6f:
         f1:54:13:bb:d0:c0:c2:34:a6:5f:3d:83:a5:b6:7c:02:3d:28:
         64:9d:d7:fc:ec:1f:dd:df:b8:55:7f:33:f8:a5:44:28:95:35:
         3c:b5:9c:86:99:b7:92:24:74:f4:1f:38:25:6d:df:e4:ff:fa:
         64:95:1c:d8:e5:ad:98:88:fd:fe:2a:6a:29:6b:5b:e4:6b:a9:
         f2:09:ee:66:06:02:45:be:82:2b:b7:83:24:2f:ca:bf:4c:a6:
         bf:52:4d:e0:cd:ee:b3:eb:24:97:0f:ac:ed:7c:2b:71:39:36:
         78:ce:06:e0:f9:4f:82:09:8d:c5:42:25:7a:8c:d0:24:aa:11:
         e1:cc:22:fd:3b:ac:a8:3e:9f:bd:ca:92:a3:54:06:b8:be:9a:
         4a:ca:41:ba:a9:3f:f0:78:a5:71:13:8a:b4:c0:a1:c6:18:0d:
         81:6d:9d:00:32:fc:09:65:d2:0e:8b:b5:1e:28:82:79:dd:67:
         e8:36:44:ab:d7:9b:01:9f:cc:8f:e2:8b:0f:5c:0c:cf:22:33:
         84:b1:06:6e:00:ae:57:4b:9f:b5:55:e2:43:d4:1a:ee:5a:51:
         b1:8b:ce:4d:78:6b:a0:59:12:04:55:e8:8c:b5:63:5e:b8:10:
         03:b8:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----