This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
File:                     c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer (raw, json)
Hash identifier:          4QtANGrNG1Vgbk+2aJc+ikk5lLrwrM+t3DIcIAZyLxU=
Subject key identifier:   1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584C75CA4F1E4D826E1C5F55F160
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Jan 2026 19:51:51 +0000
Certificate not after:    Wed 12 Apr 2028 18:51:51 +0000
Subordinate resources:    AS: 11946
                          AS: 26077
                          AS: 40197
                          AS: 54298
                          AS: 54868
                          AS: 54938
                          AS: 393620
                          AS: 395059
                          AS: 398490
                          AS: 399343
                          IP: 23.159.48.0/24
                          IP: 45.42.148.0/22
                          IP: 52.128.48.0/20
                          IP: 52.144.96.0/20
                          IP: 67.219.112.0/20
                          IP: 75.119.0.0/17
                          IP: 104.167.48.0/20
                          IP: 104.255.24.0/21
                          IP: 107.178.0.0/20
                          IP: 132.147.128.0/18
                          IP: 142.147.112.0/20
                          IP: 143.55.32.0/19
                          IP: 161.38.8.0/22
                          IP: 161.199.162.0/24
                          IP: 192.104.128.0/21
                          IP: 198.100.48.0/20
                          IP: 199.180.120.0/21
                          IP: 216.169.149.0/24
                          IP: 2602:ff92::/36
                          IP: 2605:4080::/32
                          IP: 2605:c2c0::/32
                          IP: 2607:6c0::/32
                          IP: 2607:3080::/32
                          IP: 2607:bf00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:ca:4f:1e:4d:82:6e:1c:5f:55:f1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jan  8 19:51:51 2026 GMT
            Not After : Apr 12 18:51:51 2028 GMT
        Subject: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:a4:f6:59:9d:79:59:ad:09:10:3f:a9:ae:
                    3a:f0:b4:e8:d6:5c:70:6a:b3:ea:c0:4d:1e:a4:e2:
                    94:4d:40:17:6d:29:4f:b0:2c:0f:41:7a:ae:aa:ed:
                    8f:d5:af:b9:cb:9f:91:37:56:53:f2:03:18:ea:e8:
                    ff:e2:cc:8a:4f:eb:67:ca:ce:ab:c4:ce:73:76:f1:
                    c5:97:de:aa:f2:6c:3c:72:96:64:e7:d5:86:1a:bd:
                    31:e8:d1:e4:b0:94:ba:4b:d2:2d:07:32:7a:a9:85:
                    0a:13:63:c5:82:95:0a:c0:af:b1:e5:f6:0b:19:5b:
                    97:a4:73:48:f3:39:ae:4c:7d:0b:5a:ab:88:d1:58:
                    db:16:59:bf:c4:9a:50:2c:05:58:c6:2a:5d:47:29:
                    d4:bf:04:2e:ad:d2:8b:3d:7c:04:71:80:f6:56:f1:
                    db:5f:d5:ec:c4:c4:00:5b:1d:86:ee:bf:ee:5c:7c:
                    eb:01:36:e2:a2:a3:4f:d2:98:df:31:a9:fc:a2:11:
                    67:1e:6c:d4:30:33:c3:34:c2:77:70:7d:89:63:5f:
                    1d:70:d2:e6:86:90:ce:8c:40:5d:d8:17:c9:b4:5f:
                    ef:b5:a2:74:fd:d2:37:5a:9f:d8:42:89:d9:5f:af:
                    e8:b3:8e:d1:b2:9e:bc:93:4d:81:f3:59:b2:06:25:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.48.0/24
                  45.42.148.0/22
                  52.128.48.0/20
                  52.144.96.0/20
                  67.219.112.0/20
                  75.119.0.0/17
                  104.167.48.0/20
                  104.255.24.0/21
                  107.178.0.0/20
                  132.147.128.0/18
                  142.147.112.0/20
                  143.55.32.0/19
                  161.38.8.0/22
                  161.199.162.0/24
                  192.104.128.0/21
                  198.100.48.0/20
                  199.180.120.0/21
                  216.169.149.0/24
                IPv6:
                  2602:ff92::/36
                  2605:4080::/32
                  2605:c2c0::/32
                  2607:6c0::/32
                  2607:3080::/32
                  2607:bf00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11946
                  26077
                  40197
                  54298
                  54868
                  54938
                  393620
                  395059
                  398490
                  399343

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:41:cd:78:0b:d5:a7:ed:2e:eb:9b:91:24:ab:34:ad:7b:49:
         d9:be:17:56:b5:9c:6c:9a:79:38:22:5d:67:32:79:8c:cb:db:
         41:e5:dc:02:49:c9:44:ac:dd:39:85:80:95:8b:4c:a1:12:ff:
         24:89:72:b9:25:87:76:22:90:f9:e9:91:7f:f2:6b:79:dc:8e:
         78:0b:54:aa:9f:ec:f1:83:bd:ab:56:60:be:ed:e3:b4:2d:15:
         b2:a6:83:53:95:7b:38:98:04:54:43:16:8b:d1:59:fc:be:dd:
         8d:fc:11:1a:f6:b0:f1:5a:22:51:21:a5:9d:16:18:d2:89:24:
         e8:a7:74:32:5a:7f:2f:00:1b:91:48:31:b6:14:f0:a3:0c:b5:
         f7:ae:8a:e4:ce:48:6d:ba:2e:e8:dd:1e:be:df:f0:9a:cb:13:
         5d:d9:c8:9e:00:c3:9e:85:50:ed:cb:65:66:3b:90:52:2c:69:
         5b:b7:07:be:ef:03:12:0b:8a:2b:f9:05:39:24:c0:54:8b:0e:
         96:bf:16:76:73:e2:6c:f8:9d:ef:99:e2:6e:b4:9d:ee:82:37:
         b4:d7:0e:f8:6a:92:ae:f9:ce:6e:be:1c:7f:3c:55:78:58:91:
         27:c9:c6:bc:f8:36:97:f6:20:10:70:e3:e7:17:98:14:d7:07:
         84:7f:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:04 2026 by rpki-client