This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
File:                     b112dbf9-e037-4085-8a8c-b84035c902a4.cer (raw, json)
Hash identifier:          /Q3WICtRgHhnAMhGUF/pSBspcokhz9qDZogZ2VBNPLw=
Subject key identifier:   56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C97F9F723781EBB5BDA2B28C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 01:45:21 +0000
Certificate not after:    Tue 25 Apr 2028 00:45:21 +0000
Subordinate resources:    AS: 53971
                          IP: 141.193.80.0/22
                          IP: 167.248.136.0/21
                          IP: 173.250.232.0/21
                          IP: 204.122.20.0/22
                          IP: 2605:81c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:97:f9:f7:23:78:1e:bb:5b:da:2b:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan 21 01:45:21 2026 GMT
            Not After : Apr 25 00:45:21 2028 GMT
        Subject: CN=b112dbf9-e037-4085-8a8c-b84035c902a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:1f:10:8d:9f:63:6e:9f:af:ff:90:70:e5:
                    91:e6:8c:ae:52:15:99:2f:16:55:40:a4:79:4f:57:
                    82:2d:de:76:c7:b3:46:08:84:e2:ea:2b:70:a8:da:
                    15:83:27:25:04:da:9f:9b:cf:5b:13:2d:ec:ae:42:
                    06:f1:40:ee:0f:96:95:e1:90:58:8b:df:79:fa:42:
                    5a:22:92:6f:18:f4:ac:d7:26:1e:86:74:32:77:45:
                    d4:63:b6:ff:69:bf:fa:6d:cf:25:85:ee:6d:fd:23:
                    8b:6c:e6:d5:df:1f:e4:04:fc:cb:c6:9f:ab:d3:d9:
                    bf:39:b6:bc:49:04:fa:26:6d:d3:56:9d:eb:50:2b:
                    16:b0:bc:bb:d0:5a:38:0c:61:c6:23:5c:0d:d5:d0:
                    ff:0a:be:b0:c5:b0:a5:0e:cb:30:b6:72:08:52:64:
                    56:af:3f:5e:45:41:d0:24:ea:ae:54:1b:7a:a8:45:
                    93:5a:23:7f:72:5e:df:9e:39:fc:a0:8e:d7:5a:54:
                    ca:85:96:80:47:6a:d3:b3:3b:70:f4:13:c9:1a:de:
                    7a:64:27:f7:77:de:6a:a5:26:68:96:e7:ee:93:2c:
                    ef:78:e7:ba:07:54:37:78:dd:75:d7:d3:07:85:9c:
                    8b:15:99:29:dd:60:3b:c9:d6:2d:a0:bd:bb:57:dd:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.80.0/22
                  167.248.136.0/21
                  173.250.232.0/21
                  204.122.20.0/22
                IPv6:
                  2605:81c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53971

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:01:cf:f3:8d:be:3b:23:9e:6e:d0:d4:58:47:79:e6:59:f4:
         a7:8a:9e:f4:f6:a5:4b:21:1e:6c:ed:5f:6e:1d:c4:81:79:a8:
         60:8a:01:7c:34:39:a3:d2:67:44:55:ee:3c:a7:3f:d3:35:64:
         42:32:53:b3:9a:87:99:b2:da:48:43:dd:60:ca:d6:a0:3a:b3:
         41:73:f5:5b:f4:d2:2b:93:5e:11:a0:c9:1b:84:1a:e5:db:53:
         29:d6:41:f0:49:1f:c4:3c:f2:81:30:d8:da:5c:8d:c9:ed:04:
         6d:7e:f7:ed:98:55:e7:bd:39:d8:e1:05:30:71:11:13:71:02:
         b7:9f:76:2d:21:01:30:3c:a2:44:8b:a6:47:84:c3:a7:7c:ed:
         4d:65:71:25:c0:ae:a4:c2:91:56:7e:95:66:3c:c0:c3:4f:36:
         7d:fb:95:79:fc:5f:6c:ec:a3:c7:40:40:9e:71:cb:90:e3:29:
         23:66:d9:ca:6e:f0:c8:db:3a:dc:47:41:44:fa:cf:9f:f0:44:
         3c:a8:12:3e:63:e6:58:9b:84:05:a9:aa:f7:dd:1d:87:83:cf:
         65:5d:0a:fc:96:7c:90:1a:bb:01:75:7c:f7:9c:a1:6e:ac:48:
         e1:81:f8:7a:0d:34:a4:1c:ea:ff:25:7d:c6:17:3b:fa:81:6f:
         fb:d5:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:36 2026 by rpki-client