This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
File:                     8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer (raw, json)
Hash identifier:          LUBknW87cPzyA4SIqabghUgQ+LLV9ArtCoQK5vvu+w8=
Subject key identifier:   A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BFD0905A85E03442389CB91D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Nov 2025 13:45:23 +0000
Certificate not after:    Tue 29 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 32797
                          IP: 23.156.40.0/24
                          IP: 2602:2ef::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fd:09:05:a8:5e:03:44:23:89:cb:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 26 13:45:23 2025 GMT
            Not After : Feb 29 13:45:23 2028 GMT
        Subject: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:e6:a0:fa:b8:91:f0:7d:7d:e9:0e:55:77:
                    df:4c:7c:c5:33:8e:f7:e3:f6:09:fc:d9:78:99:fd:
                    97:be:99:78:f6:89:d4:22:67:66:97:c5:93:2c:74:
                    be:96:65:64:d9:3a:f1:d1:4d:40:6d:1d:3a:2e:99:
                    d9:7e:d9:3e:0b:5e:bb:b4:82:b1:88:9d:78:a9:13:
                    ce:48:b4:cc:44:49:3c:4d:c9:f9:53:68:2b:ca:b5:
                    9b:95:42:02:ad:dc:8f:03:13:cd:16:60:6d:0f:2a:
                    67:c1:63:ec:19:2f:c1:5a:d3:7a:e5:00:99:07:da:
                    ec:f0:da:27:b9:c6:5e:17:03:5d:e8:1d:bd:db:90:
                    b2:6b:42:9e:f1:1a:d0:5c:63:19:f7:11:e1:fc:8c:
                    8c:54:4a:18:ef:b5:16:ee:3c:b6:6b:64:b0:6f:a4:
                    92:94:24:1e:61:3a:b6:ef:07:8c:a5:0a:59:c9:99:
                    1b:ec:46:39:fe:1c:bb:6c:b2:1f:60:62:40:35:03:
                    a7:4c:29:75:6a:95:4f:2a:4c:9d:5a:bf:de:85:88:
                    2f:1b:d7:15:e2:04:26:77:45:48:b5:3b:ab:9e:59:
                    6b:4b:96:55:f9:f2:3c:c4:2c:01:1c:a3:78:0b:a4:
                    95:8c:74:35:f4:f4:cc:2c:16:5a:2c:78:5e:5e:81:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.40.0/24
                IPv6:
                  2602:2ef::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32797

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:80:a0:ff:36:d8:44:f3:81:8f:1e:78:08:85:67:8a:2e:be:
         b1:04:a6:1b:0d:7a:47:93:d1:a2:0d:ca:8b:3d:f6:9c:1d:a3:
         1f:38:4a:99:40:3c:0e:6d:e7:65:47:f0:0a:e1:da:de:f1:02:
         02:10:c7:d5:1b:06:a3:e2:79:d8:34:1e:e6:67:9e:23:03:3d:
         61:f3:50:f3:09:56:74:1a:3b:8c:8d:b3:a2:7b:a8:74:e4:45:
         a8:1d:5f:13:f4:ff:64:c5:63:3e:3d:11:01:1e:d8:fb:cb:92:
         f7:03:b3:66:c2:16:c9:c4:9a:be:c7:e3:44:16:e6:e0:15:bb:
         61:e2:4d:21:1b:dd:05:83:cd:79:82:8c:f3:c3:8f:b2:15:a2:
         91:6e:07:ae:d6:1d:ee:32:b3:55:23:4a:9b:5a:8c:97:92:04:
         2c:34:ed:e9:34:82:e9:82:fa:2b:82:e4:f7:80:df:7f:64:1a:
         8d:c1:23:4b:02:f5:57:a9:37:6b:b2:94:65:74:c9:da:c0:7e:
         7e:90:eb:d6:a0:e6:08:3f:b2:04:f5:77:ef:d2:62:d8:44:bb:
         cb:8c:c7:16:41:3a:ef:d1:76:af:69:d0:6c:1c:ac:af:b5:a0:
         7d:8a:2f:3b:13:16:e4:a2:52:58:66:57:99:bb:26:2a:70:0e:
         4b:06:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----