This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer
File:                     9cf68654-01a9-4653-b981-d0349f39e0a5.cer (raw, json)
Hash identifier:          gCRDrrECwwqUcfoDru0TJS75cw+lI8w+aaTkdaR45+Q=
Subject key identifier:   18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C8F99EF7B164FF6DDA409D380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 18 Jan 2026 01:45:23 +0000
Certificate not after:    Sat 22 Apr 2028 00:45:23 +0000
Subordinate resources:    IP: 140.235.44.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8f:99:ef:7b:16:4f:f6:dd:a4:09:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan 18 01:45:23 2026 GMT
            Not After : Apr 22 00:45:23 2028 GMT
        Subject: CN=9cf68654-01a9-4653-b981-d0349f39e0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:1f:6e:39:48:69:28:55:80:38:d7:dd:b0:
                    76:90:0b:33:cd:0e:0e:00:03:61:02:a5:8f:bc:70:
                    4f:80:c8:6a:25:38:f5:fb:20:46:68:2a:69:91:e8:
                    df:6f:de:3a:cc:b2:2e:0d:d8:de:6a:94:87:6f:76:
                    36:06:24:2f:56:7d:cd:ef:ef:72:27:23:74:5b:42:
                    58:83:36:97:2f:6b:32:28:0e:48:2a:b8:05:f4:e9:
                    5f:42:9f:ad:43:b8:7d:82:80:03:c2:00:06:f5:f5:
                    4f:92:48:87:13:0e:21:74:79:3c:ef:46:a2:a9:bd:
                    f0:d9:0d:9a:c2:86:8f:64:43:92:84:a8:18:2a:b4:
                    49:10:7b:db:f7:88:87:0f:cc:c4:07:fa:45:40:1c:
                    81:45:68:cc:58:5c:ad:15:b2:1a:3f:f5:ce:46:1d:
                    de:a8:fd:93:8e:8b:ef:73:40:f3:c9:14:af:ff:e8:
                    74:71:55:7f:ca:a4:7a:0b:be:31:42:a3:80:2a:be:
                    6f:31:d2:e7:c1:6f:b8:62:e0:7b:64:dc:be:d1:33:
                    e5:b7:9c:f9:5a:a2:7c:9a:ea:cd:e2:43:6c:c9:c2:
                    cd:eb:9e:e3:03:44:f3:0f:36:47:ba:57:ce:6d:4e:
                    f3:c1:f4:9d:48:8a:9e:c6:99:bd:90:e9:64:56:f5:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:a1:f5:26:42:56:fe:6d:05:3f:6b:26:91:7d:69:22:06:
         c9:1d:b5:70:fb:d9:32:47:1a:fc:45:17:a6:cc:67:99:38:3a:
         a3:9f:c4:73:25:d7:f9:25:d2:d3:e0:82:70:58:23:76:cf:ee:
         7f:67:07:3f:44:d9:29:12:16:e7:85:b4:44:b9:66:5c:69:76:
         41:0b:d5:ac:2c:9d:16:ce:f2:2d:9c:73:f1:ee:17:3a:58:6c:
         a2:0a:e4:af:42:f0:f2:c4:93:5e:c9:c9:e7:75:e7:1c:d2:69:
         03:b9:24:a8:41:2c:72:23:7c:92:ac:c3:01:12:86:c6:ea:bf:
         62:24:08:80:47:8c:48:39:94:d9:f3:d7:38:73:1c:3a:dc:44:
         81:4c:5b:27:5b:da:b4:a7:0a:2a:b1:e3:90:de:69:64:d5:4e:
         30:a3:03:d5:1f:97:96:25:b4:96:6e:36:e7:b8:12:22:d0:11:
         1b:fa:83:be:1c:54:bc:22:7e:76:a8:e6:51:a9:1c:51:49:00:
         d0:a4:04:ac:b6:d0:61:ea:89:65:e7:c8:f7:82:dd:48:27:c3:
         c1:50:fc:5d:b7:9b:dc:7e:e3:13:f8:25:20:20:ae:03:cf:83:
         3b:80:86:cf:db:99:90:e6:dc:29:66:bc:14:42:b7:e2:d9:81:
         3c:d9:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----