This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
File:                     d9a6669b-6d25-4186-a757-3c289bdc8031.cer (raw, json)
Hash identifier:          Xhf1WgEyRBN1G9G+o7Tj9siD84D2RwaQsjuETUUZ16w=
Subject key identifier:   EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C5D599F41C1911BB26C8FC820
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Dec 2025 01:45:23 +0000
Certificate not after:    Tue 04 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 12022
                          IP: 192.190.188.0/23
                          IP: 208.83.152.0/21
                          IP: 2620:a3:c020::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5d:59:9f:41:c1:91:1b:b2:6c:8f:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 31 01:45:23 2025 GMT
            Not After : Apr  4 00:45:23 2028 GMT
        Subject: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:c7:9e:c4:72:7e:6c:cf:e9:90:e3:e0:0c:
                    56:8e:a5:ef:9c:a4:40:96:3d:de:de:68:5a:d7:77:
                    4e:55:42:d0:f7:06:cc:b7:8b:58:68:49:70:eb:9a:
                    c6:c9:73:61:fc:a4:e7:b3:d0:81:46:11:d9:31:9b:
                    7c:47:2b:f4:3d:b0:55:31:46:24:09:da:93:47:4c:
                    76:64:cc:6e:46:e1:1d:fe:79:42:af:1d:9f:0b:fe:
                    2a:41:c9:c4:cc:04:f6:6e:37:e6:d0:69:6e:f2:bd:
                    81:1e:89:60:e8:85:05:38:f0:ed:6d:bf:22:6c:b5:
                    86:30:23:26:64:c7:8c:59:02:37:c5:c1:72:86:1b:
                    b2:74:32:ce:06:86:c9:1f:9d:60:82:7a:cd:97:93:
                    da:7a:a8:34:10:6e:61:1b:eb:ef:67:3d:0d:ca:2c:
                    fc:ff:82:07:e5:80:c1:f2:c2:c2:cc:51:cf:81:81:
                    75:a7:6f:22:b9:39:40:8e:ea:c6:5e:9f:09:19:c2:
                    18:cf:b1:64:54:5c:21:ff:47:0c:e3:89:4a:e1:af:
                    11:1d:56:1d:ce:74:00:c3:57:ee:5e:33:20:a9:bf:
                    3d:12:13:04:8e:58:78:1b:6c:fc:a5:3d:82:cd:0b:
                    30:1e:ab:a5:3c:f1:da:bb:1c:72:e3:d7:d9:d7:f1:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.188.0/23
                  208.83.152.0/21
                IPv6:
                  2620:a3:c020::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12022

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:5c:cb:78:2b:6e:61:73:d8:22:bc:0b:d4:99:91:b7:fc:
         98:1b:63:d5:52:02:11:0b:f3:c9:a2:be:14:9e:5f:43:12:14:
         af:c8:c9:8e:57:8a:25:95:b6:01:37:aa:26:0b:b6:cf:79:71:
         73:3f:8b:94:e9:4f:0b:a8:ce:d3:a3:7b:e4:5e:6b:08:c1:9a:
         dc:39:1a:e3:50:42:88:6c:33:20:14:fe:9b:57:99:3b:3d:eb:
         31:e7:f4:2c:a2:f1:bd:5e:3f:65:80:cf:2c:6f:72:62:94:4b:
         13:c4:27:77:e2:4f:64:f0:b1:ad:0f:74:b6:67:12:1e:26:96:
         0c:53:c9:85:4e:af:d3:6f:5a:16:50:97:dc:f0:7a:82:b0:cc:
         7b:7c:02:5a:92:4b:d5:7a:6a:b3:af:eb:1c:ed:96:5d:04:86:
         e5:fd:5b:1e:0c:52:b8:a1:3e:96:f4:12:41:b8:6b:4f:11:f1:
         77:5d:53:7b:bc:39:f7:c3:f2:90:6b:71:7a:7a:90:e2:bd:6f:
         f0:55:2f:c9:1b:19:47:45:42:0f:9f:b2:68:03:07:c9:93:37:
         53:f4:e7:7c:7c:b9:83:c6:ec:5d:f6:ac:49:b5:7b:cb:86:c6:
         49:74:45:46:4b:99:86:94:79:3b:37:be:8f:bb:f6:9b:94:58:
         8c:1b:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:38:24 2026 by rpki-client