This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
File:                     fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer (raw, json)
Hash identifier:          PeFxSoft2IKZxS60Us4CNChoW8JmKPl4dVpa43Vxtzw=
Subject key identifier:   B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BE54E34ED60DDC4FE77263C20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 01:45:23 +0000
Certificate not after:    Mon 21 Feb 2028 01:45:23 +0000
Subordinate resources:    AS: 26347
                          IP: 64.90.32.0/19
                          IP: 64.111.96.0/19
                          IP: 66.33.192.0/19
                          IP: 67.205.0.0/18
                          IP: 69.163.128.0/17
                          IP: 75.119.192.0/19
                          IP: 107.180.224.0/19
                          IP: 173.236.128.0/17
                          IP: 205.196.208.0/20
                          IP: 208.97.128.0/18
                          IP: 208.113.128.0/17
                          IP: 2607:f298::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e5:4e:34:ed:60:dd:c4:fe:77:26:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 18 01:45:23 2025 GMT
            Not After : Feb 21 01:45:23 2028 GMT
        Subject: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:6f:98:60:c2:e1:e2:80:9e:c7:81:06:07:
                    d5:1d:21:a5:1a:51:a3:b4:98:c9:47:1e:79:15:cb:
                    e2:82:15:bb:b2:b2:b9:b0:6d:33:b9:8e:1c:1e:b1:
                    73:c8:80:4e:c6:72:7e:2e:d4:99:31:64:59:c7:21:
                    59:6d:0e:ee:15:29:3e:5f:83:3e:cf:61:89:ca:c3:
                    0a:13:55:f6:14:fe:09:b6:65:08:6f:6e:18:c2:fe:
                    4b:71:16:ad:fc:a8:80:10:f6:d6:f4:38:97:4a:b3:
                    46:76:b4:14:6c:8f:01:5f:48:8d:23:02:7c:34:ef:
                    47:33:bc:a2:06:5e:50:85:8e:cc:70:4c:de:04:d0:
                    1b:fa:f2:ce:36:40:57:c3:40:ab:3c:f4:8e:d3:60:
                    b7:0c:b0:cc:7e:37:f6:08:fa:18:d7:25:2e:45:09:
                    e1:f1:78:3e:0a:bd:d8:81:3c:91:a1:5e:81:78:e1:
                    be:b9:71:12:e6:0e:44:db:54:cb:93:ff:63:3d:2a:
                    9a:92:3b:e3:e5:f0:5d:a2:72:d9:9a:e2:c8:7c:82:
                    71:94:d5:96:af:10:83:eb:2e:59:84:45:e3:ed:a4:
                    03:16:66:ea:44:22:1a:50:da:36:d5:b5:22:b0:b3:
                    0a:31:4c:90:9f:35:c4:ac:2a:0d:c2:79:e7:6b:0d:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.32.0/19
                  64.111.96.0/19
                  66.33.192.0/19
                  67.205.0.0/18
                  69.163.128.0/17
                  75.119.192.0/19
                  107.180.224.0/19
                  173.236.128.0/17
                  205.196.208.0/20
                  208.97.128.0/18
                  208.113.128.0/17
                IPv6:
                  2607:f298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26347

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:22:34:68:81:6b:24:4a:ae:c8:66:df:05:ca:00:6e:55:
         92:42:01:6a:55:fb:57:7c:5f:d9:23:e7:b3:ae:08:25:1b:7b:
         bd:03:db:3e:f0:9e:a4:34:af:ac:82:e1:1f:af:85:4d:b3:51:
         97:11:6f:f7:99:e9:a6:88:34:ae:0f:12:76:8d:e7:26:ad:91:
         20:d9:e4:f6:7c:6b:b4:ff:5d:f3:0b:31:90:66:7c:d6:f1:17:
         72:ad:1c:e5:9b:3b:dc:63:0c:30:73:06:04:10:15:49:01:39:
         4f:1e:99:0f:cd:0c:53:f7:92:d2:e6:2f:74:33:45:b8:f0:81:
         5b:30:64:57:bb:c5:df:c7:25:4a:b0:f1:28:9d:ac:0f:1b:ab:
         b1:f8:23:67:38:0b:a9:75:81:fc:19:15:33:35:12:50:e5:75:
         7b:a2:5e:fe:00:b1:bb:fe:f9:fe:fe:b9:79:ca:6c:c7:9d:6a:
         85:fa:43:29:4d:90:db:4c:44:a8:94:18:a4:fd:5a:0b:3f:b7:
         ac:cb:2e:56:6a:f6:a6:3c:26:d0:17:d6:05:a0:95:fd:96:e3:
         69:61:62:e8:dd:f1:32:47:d5:51:21:1b:23:8e:dc:18:b3:e5:
         4b:97:98:af:89:3f:93:45:61:55:3f:a6:9f:f2:99:64:d5:78:
         1b:88:c4:e1
-----BEGIN CERTIFICATE-----
MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEvlTjTtYN3E/ncmPCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI1MTExODAxNDUyM1oXDTI4MDIyMTAxNDUyM1owLzEtMCsGA1UEAxMk
ZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0YmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYVvmGDC4eKAnseBBgfVHSGlGlGjtJjJRx55
FcvighW7srK5sG0zuY4cHrFzyIBOxnJ+LtSZMWRZxyFZbQ7uFSk+X4M+z2GJysMK
E1X2FP4JtmUIb24Ywv5LcRat/KiAEPbW9DiXSrNGdrQUbI8BX0iNIwJ8NO9HM7yi
Bl5QhY7McEzeBNAb+vLONkBXw0CrPPSO02C3DLDMfjf2CPoY1yUuRQnh8Xg+Cr3Y
gTyRoV6BeOG+uXES5g5E21TLk/9jPSqakjvj5fBdonLZmuLIfIJxlNWWrxCD6y5Z
hEXj7aQDFmbqRCIaUNo21bUisLMKMUyQnzXErCoNwnnnaw1KdQIDAQABo4IEZTCC
BGEwHQYDVR0OBBYEFLn1olGiO+rEsA9S/IZpui40UeQLMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m
ZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2ZlM2UxMDRlLWRhZWYtNGZkYi05
ZDY1LWFhMWVlNmRjNGJlMC9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZk
YzRiZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwagYIKwYBBQUH
AQcBAf8EWzBZMEgEAgABMEIDBAVAWiADBAVAb2ADBAVCIcADBAZDzQADBAdFo4AD
BAVLd8ADBAVrtOADBAet7IADBATNxNADBAbQYYADBAfQcYAwDQQCAAIwBwMFACYH
8pgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICZuswVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiA4iNGiBayRK
rshm3wXKAG5VkkIBalX7V3xf2SPns64IJRt7vQPbPvCepDSvrILhH6+FTbNRlxFv
95nppog0rg8Sdo3nJq2RINnk9nxrtP9d8wsxkGZ81vEXcq0c5Zs73GMMMHMGBBAV
SQE5Tx6ZD80MU/eS0uYvdDNFuPCBWzBkV7vF38clSrDxKJ2sDxursfgjZzgLqXWB
/BkVMzUSUOV1e6Je/gCxu/75/v65ecpsx51qhfpDKU2Q20xEqJQYpP1aCz+3rMsu
Vmr2pjwm0BfWBaCV/ZbjaWFi6N3xMkfVUSEbI47cGLPlS5eYr4k/k0VhVT+mn/KZ
ZNV4G4jE4Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:59 2025 by rpki-client