This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
File:                     8753160d-30e1-48b1-afdb-394389cbcc81.cer (raw, json)
Hash identifier:          uxSaFy9XeETxKZakz/VXyI6LkfMLw/cG+Ib1KdIyYyI=
Subject key identifier:   F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C73AF168B60F8325C32A28340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Jan 2026 01:45:23 +0000
Certificate not after:    Wed 12 Apr 2028 00:45:23 +0000
Subordinate resources:    IP: 64.85.32.0/19
                          IP: 97.75.192.0/19
                          IP: 162.211.192.0/21
                          IP: 162.222.120.0/21
                          IP: 162.246.128.0/22
                          IP: 162.255.248.0/21
                          IP: 172.85.80.0/21
                          IP: 172.103.48.0/20
                          IP: 198.1.56.0/21
                          IP: 199.91.80.0/21
                          IP: 199.192.184.0/21
                          IP: 199.193.88.0/21
                          IP: 207.232.96.0/19
                          IP: 208.85.212.0/22
                          IP: 209.207.64.0/18
                          IP: 216.21.128.0/19
                          IP: 216.40.96.0/19
                          IP: 2607:fc70::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:73:af:16:8b:60:f8:32:5c:32:a2:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan  8 01:45:23 2026 GMT
            Not After : Apr 12 00:45:23 2028 GMT
        Subject: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:9e:70:e8:70:c9:3c:38:80:c9:5a:0c:31:
                    03:36:c2:3f:f7:7d:19:1d:86:41:27:e1:18:67:fb:
                    e9:e9:d1:1b:53:99:27:4c:6e:e1:d9:6f:dc:f0:f9:
                    11:0c:d1:4a:3e:5e:19:e3:fd:55:b0:73:e3:e2:08:
                    d1:91:a1:3e:ef:79:6e:cb:5b:14:27:4e:03:be:c6:
                    a2:48:99:fb:46:1b:03:23:e6:dc:2d:70:fa:90:c6:
                    ae:ff:84:fa:74:99:13:6c:80:20:62:0b:2f:28:ef:
                    84:77:df:a6:3d:78:a7:8c:63:f6:ed:07:6e:0d:06:
                    bf:32:52:ee:09:36:0e:d2:ae:d4:5b:9e:8d:f8:bd:
                    a1:3d:4c:ed:83:9d:3b:bc:12:d8:d8:5a:80:62:3d:
                    de:dd:43:17:5d:fe:f5:76:da:22:b6:c6:3f:fb:2a:
                    b3:78:d4:0c:63:48:3f:bf:65:11:1d:8e:d7:c4:b7:
                    41:b8:2a:eb:cd:3c:e6:3b:b2:bb:90:d6:8f:f1:6e:
                    2c:8f:bf:f4:a2:f8:dd:06:0f:8e:b7:bc:da:a8:53:
                    51:79:2e:a4:b6:bc:fe:95:80:d7:e4:ae:39:6a:99:
                    ce:1b:1e:d7:cb:ca:1c:70:91:b0:ec:df:43:39:9e:
                    66:08:8a:38:b9:0e:fb:39:3e:7a:a5:de:23:74:e3:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.32.0/19
                  97.75.192.0/19
                  162.211.192.0/21
                  162.222.120.0/21
                  162.246.128.0/22
                  162.255.248.0/21
                  172.85.80.0/21
                  172.103.48.0/20
                  198.1.56.0/21
                  199.91.80.0/21
                  199.192.184.0/21
                  199.193.88.0/21
                  207.232.96.0/19
                  208.85.212.0/22
                  209.207.64.0/18
                  216.21.128.0/19
                  216.40.96.0/19
                IPv6:
                  2607:fc70::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:97:e1:2d:0d:1f:64:76:30:9a:ee:dd:2e:5a:94:df:d1:
         3a:83:3e:f4:d7:15:38:22:1c:37:21:81:f4:d2:62:3b:37:fe:
         47:3c:eb:14:ac:f4:a7:35:ed:cc:8a:5b:5d:96:90:1e:db:e6:
         e0:15:da:30:11:4d:71:b7:f0:57:dc:ae:2c:87:f9:19:e0:44:
         eb:4d:40:c6:08:14:62:bf:15:fd:fc:39:6e:3c:89:6d:cf:25:
         cb:9b:d5:4d:7b:87:ed:fe:a7:f8:0f:19:3b:6a:4c:7f:63:bf:
         e8:e9:a2:55:63:90:69:d3:01:48:0a:87:2b:88:29:dd:95:67:
         2a:ad:43:f9:52:33:2d:98:24:f1:58:e3:de:6d:ad:ca:4f:d8:
         42:c5:20:77:1e:be:75:76:d4:5d:2a:ba:7e:76:ba:f1:52:a5:
         a3:c1:65:9f:7a:f5:17:71:31:70:2f:8d:37:8d:2e:61:31:a9:
         ad:8d:fb:7a:b5:bd:09:97:eb:44:1b:89:c0:51:41:eb:86:be:
         16:df:8d:a1:9a:fc:96:f5:8a:9d:a6:ec:7c:c2:19:04:93:59:
         74:51:4e:b3:42:45:26:15:03:9c:1c:5d:3b:4d:75:09:64:e5:
         bb:80:04:b5:98:e1:7a:3c:6b:57:4d:07:20:fa:c6:63:92:66:
         f3:05:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:17 2026 by rpki-client