This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
File:                     ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer (raw, json)
Hash identifier:          D27CDKnMyzb0oqw5S9K/HisF97hEdO5dmfwsLMQu1f8=
Subject key identifier:   65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584C2583EFDAFFCF4F7E6D35EE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 01:45:23 +0000
Certificate not after:    Wed 15 Mar 2028 00:45:23 +0000
Subordinate resources:    AS: 20213
                          IP: 23.135.16.0/23
                          IP: 134.195.142.0/23
                          IP: 172.99.160.0/23
                          IP: 207.174.88.0/23
                          IP: 2605:4640::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:25:83:ef:da:ff:cf:4f:7e:6d:35:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Dec 11 01:45:23 2025 GMT
            Not After : Mar 15 00:45:23 2028 GMT
        Subject: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:bf:be:e9:af:f6:e1:16:13:56:a4:ff:1f:
                    c5:85:0c:20:7e:75:2f:1d:43:e3:a1:aa:80:9e:14:
                    ea:f9:c0:b4:15:a7:99:f8:fb:9c:e2:ec:36:31:2b:
                    b3:2f:ae:fd:ab:a4:a6:39:66:6d:b3:9e:85:34:2d:
                    84:06:1a:85:45:72:6f:8f:7f:8f:6e:98:28:f6:4b:
                    ca:ca:9a:54:cb:90:0f:d2:86:8f:0c:ee:7d:5a:68:
                    24:9f:d7:36:75:55:69:07:7b:2e:18:51:d1:05:20:
                    d5:a3:54:a3:f8:56:39:d1:c9:0d:2e:fd:12:17:3e:
                    fb:89:ae:8c:a3:ca:8f:1b:b7:e9:c3:b2:3a:31:eb:
                    d4:c8:a0:23:5d:4f:2a:e4:f7:27:06:12:76:25:0c:
                    6a:8b:a3:08:df:c4:6a:4a:75:74:bc:e7:0b:40:2a:
                    4e:f5:1d:68:cf:12:fa:ac:e4:08:8f:cb:3d:a4:14:
                    0e:24:a6:0a:a8:dd:23:09:85:e7:cc:04:d7:01:f7:
                    37:75:6c:aa:61:06:a0:30:f7:42:c9:aa:41:6e:85:
                    42:4d:e7:34:2f:ca:7c:0b:26:fa:55:34:3f:a0:09:
                    75:ee:8f:82:5d:f8:26:27:49:45:4b:f5:fb:7f:0c:
                    95:33:31:22:e6:44:6d:b6:da:73:a5:9e:2c:30:54:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.16.0/23
                  134.195.142.0/23
                  172.99.160.0/23
                  207.174.88.0/23
                IPv6:
                  2605:4640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20213

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:ca:e7:51:d4:b9:d7:61:26:66:83:db:3e:dc:ae:1f:19:
         9a:3e:bd:51:4c:3c:f4:68:52:58:c1:7a:57:78:74:99:fc:e2:
         e2:09:2d:a1:1f:53:ce:d1:c5:7e:4a:d8:77:63:17:47:ef:67:
         ac:5a:29:9b:13:c3:5f:fa:72:82:83:ce:2c:7f:1b:08:60:81:
         b5:f5:55:f1:c1:ac:2d:9f:d3:14:75:f1:73:39:62:0e:1a:12:
         fd:32:dd:f6:f0:ec:99:9c:d8:00:0a:d3:d6:7a:f8:1b:a7:26:
         f2:36:db:df:e0:14:e2:a5:40:53:cb:55:ae:50:6f:cc:26:aa:
         12:88:63:75:4f:8a:5f:75:c2:c6:60:d0:3a:24:f7:cc:87:83:
         5f:2a:20:a7:4c:25:2d:0f:b8:2f:af:b7:6f:52:ff:49:23:bf:
         88:61:d8:fe:e5:6f:ee:d9:c2:ed:47:a7:cf:b3:bd:94:3e:97:
         87:6d:62:bd:ec:f2:84:b0:4c:c5:43:cc:83:a9:61:3d:85:64:
         69:92:39:f4:7f:1c:0b:95:8b:95:af:80:e7:10:51:7e:a7:d5:
         5d:d1:bd:6b:e0:b7:d2:12:b9:ed:8a:44:b4:10:11:60:d2:48:
         72:39:4a:01:46:7f:dd:fb:cf:2b:21:30:80:59:98:7b:47:92:
         6d:4a:e7:ff
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEwlg+/a/89Pfm017oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI1MTIxMTAxNDUyM1oXDTI4MDMxNTAwNDUyM1owLzEtMCsGA1UEAxMk
ZWM4ZWYxN2UtZDhkMy00OGU5LTkyZTctODRlOTZmYTY0NDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwi/vumv9uEWE1ak/x/FhQwgfnUvHUPjoaqA
nhTq+cC0FaeZ+Puc4uw2MSuzL679q6SmOWZts56FNC2EBhqFRXJvj3+Pbpgo9kvK
yppUy5AP0oaPDO59Wmgkn9c2dVVpB3suGFHRBSDVo1Sj+FY50ckNLv0SFz77ia6M
o8qPG7fpw7I6MevUyKAjXU8q5PcnBhJ2JQxqi6MI38RqSnV0vOcLQCpO9R1ozxL6
rOQIj8s9pBQOJKYKqN0jCYXnzATXAfc3dWyqYQagMPdCyapBboVCTec0L8p8Cyb6
VTQ/oAl17o+CXfgmJ0lFS/X7fwyVMzEi5kRtttpzpZ4sMFRZGQIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFGUMSnayeqXIBwKO/zICxHW0NPe+MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l
YzhlZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5NmZhNjQ0MTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2VjOGVmMTdlLWQ4ZDMtNDhlOS05
MmU3LTg0ZTk2ZmE2NDQxMC9lYzhlZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5NmZh
NjQ0MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAEXhxADBAGGw44DBAGsY6ADBAHPrlgwDQQCAAIw
BwMFACYFRkAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTvUwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXYLK
51HUuddhJmaD2z7crh8Zmj69UUw89GhSWMF6V3h0mfzi4gktoR9TztHFfkrYd2MX
R+9nrFopmxPDX/pygoPOLH8bCGCBtfVV8cGsLZ/TFHXxczliDhoS/TLd9vDsmZzY
AArT1nr4G6cm8jbb3+AU4qVAU8tVrlBvzCaqEohjdU+KX3XCxmDQOiT3zIeDXyog
p0wlLQ+4L6+3b1L/SSO/iGHY/uVv7tnC7Uenz7O9lD6Xh21ivezyhLBMxUPMg6lh
PYVkaZI59H8cC5WLla+A5xBRfqfVXdG9a+C30hK57YpEtBARYNJIcjlKAUZ/3fvP
KyEwgFmYe0eSbUrn/w==
-----END CERTIFICATE-----
Generated at Tue Dec 16 14:20:00 2025 by rpki-client