This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
File:                     41415190-afe9-4f90-902f-9102f69180fb.cer (raw, json)
Hash identifier:          XPjZ79+6dGNx2uxy1gBytwkeAvKKaQuKzWiJUQZzs50=
Subject key identifier:   9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584C803F2D4113675BE29DF97740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 13:45:23 +0000
Certificate not after:    Sun 16 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 6556
                          AS: 47192
                          IP: 23.141.112.0/24
                          IP: 66.248.232.0/22
                          IP: 2602:801:3000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:3f:2d:41:13:67:5b:e2:9d:f9:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan 12 13:45:23 2026 GMT
            Not After : Apr 16 12:45:23 2028 GMT
        Subject: CN=41415190-afe9-4f90-902f-9102f69180fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3c:16:87:90:eb:db:6a:5e:5c:53:97:cb:ae:
                    31:69:98:62:6a:c7:46:0c:06:56:4c:d6:15:03:6f:
                    cd:5b:1d:48:df:28:bb:46:bb:e5:28:b5:40:2e:67:
                    0b:b7:75:c2:c7:b5:11:19:c6:5f:48:cd:e3:f5:50:
                    e2:c1:b5:19:e5:a1:17:0e:de:3f:e8:61:2d:e6:83:
                    ae:a4:a6:55:b6:a9:92:63:fc:d6:09:7a:5d:e7:bd:
                    ef:bf:be:c0:e9:25:bc:17:03:6d:da:6c:34:2b:ac:
                    54:02:c3:67:c5:ff:e7:fb:e0:30:b7:00:2c:89:b4:
                    35:25:40:90:56:a6:3d:6a:28:55:74:7d:76:d9:62:
                    33:65:8c:3e:2a:b2:16:4e:23:95:23:43:70:95:9b:
                    ab:80:a2:c5:92:d7:67:f8:84:54:00:2d:bc:f8:5c:
                    a8:f9:cd:14:54:2d:14:77:28:d5:b9:5e:46:48:5a:
                    22:bc:e0:23:19:04:e1:92:db:50:0c:26:d0:b3:35:
                    60:36:5e:ac:e5:99:4a:29:9d:83:f5:5b:24:83:c8:
                    eb:25:51:3e:5c:c9:6a:ab:66:77:12:91:1c:87:f3:
                    82:58:7b:dd:be:f1:88:1d:04:c8:70:56:f7:da:b6:
                    d7:da:c6:b4:2d:fc:27:4d:15:24:e9:51:9e:0c:ed:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.112.0/24
                  66.248.232.0/22
                IPv6:
                  2602:801:3000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6556
                  47192

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:eb:b2:ec:ee:92:1c:a0:3b:d8:b1:fb:61:37:8b:ab:9c:15:
         35:1d:ac:69:37:ab:a6:ea:ff:fb:8c:7a:24:f2:5a:15:dc:e9:
         22:1c:8f:9f:93:a8:8b:a0:4f:b3:a1:39:b1:eb:b5:a4:af:fb:
         94:82:67:74:c4:e6:2c:22:2a:83:34:b3:fb:24:d9:91:77:44:
         0d:ce:b7:25:37:5e:23:fd:a6:53:01:0a:40:0a:aa:d5:4e:8e:
         a7:22:04:03:4b:91:da:8e:49:08:d3:78:a7:22:57:09:f8:37:
         2a:6a:71:cd:0a:e1:1c:6e:78:60:55:24:13:2e:05:7f:fc:20:
         23:a7:f3:b6:4c:a0:7a:df:18:d3:7c:15:10:d7:3f:ce:08:3f:
         a4:c7:5d:34:a3:99:36:f3:57:bc:55:32:fe:b6:48:38:a6:bd:
         cb:99:77:74:10:83:de:3c:be:86:5b:77:f0:42:e2:8f:0e:b8:
         48:a4:16:b5:84:d4:bc:04:4f:7e:a6:f2:c8:58:e0:1e:60:92:
         e0:21:b1:d8:65:d1:93:93:3e:e4:7d:da:6f:0a:5e:6a:5b:98:
         15:42:b3:bf:53:f3:6d:55:f7:0a:c2:10:ec:95:07:58:d3:63:
         2a:6a:aa:db:ad:a0:e4:0a:5f:9c:ca:b4:9a:ed:d1:e4:c8:91:
         56:b6:09:0e
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEyAPy1BE2db4p35d0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI2MDExMjEzNDUyM1oXDTI4MDQxNjEyNDUyM1owLzEtMCsGA1UEAxMk
NDE0MTUxOTAtYWZlOS00ZjkwLTkwMmYtOTEwMmY2OTE4MGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jwWh5Dr22peXFOXy64xaZhiasdGDAZWTNYV
A2/NWx1I3yi7RrvlKLVALmcLt3XCx7URGcZfSM3j9VDiwbUZ5aEXDt4/6GEt5oOu
pKZVtqmSY/zWCXpd573vv77A6SW8FwNt2mw0K6xUAsNnxf/n++AwtwAsibQ1JUCQ
VqY9aihVdH122WIzZYw+KrIWTiOVI0NwlZurgKLFktdn+IRUAC28+Fyo+c0UVC0U
dyjVuV5GSFoivOAjGQThkttQDCbQszVgNl6s5ZlKKZ2D9Vskg8jrJVE+XMlqq2Z3
EpEch/OCWHvdvvGIHQTIcFb32rbX2sa0LfwnTRUk6VGeDO2TawIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFJ0yE9gOQ408eG89HNcl+pwiWWn6MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80
MTQxNTE5MC1hZmU5LTRmOTAtOTAyZi05MTAyZjY5MTgwZmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQxNDE1MTkwLWFmZTktNGY5MC05
MDJmLTkxMDJmNjkxODBmYi80MTQxNTE5MC1hZmU5LTRmOTAtOTAyZi05MTAyZjY5
MTgwZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXjXADBAJC+OgwDgQCAAIwCAMGACYCCAEwMB4G
CCsGAQUFBwEIAQH/BA8wDaALMAkCAhmcAgMAuFgwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALOuy7O6SHKA7
2LH7YTeLq5wVNR2saTerpur/+4x6JPJaFdzpIhyPn5Ooi6BPs6E5seu1pK/7lIJn
dMTmLCIqgzSz+yTZkXdEDc63JTdeI/2mUwEKQAqq1U6OpyIEA0uR2o5JCNN4pyJX
Cfg3KmpxzQrhHG54YFUkEy4Ff/wgI6fztkyget8Y03wVENc/zgg/pMddNKOZNvNX
vFUy/rZIOKa9y5l3dBCD3jy+hlt38ELijw64SKQWtYTUvARPfqbyyFjgHmCS4CGx
2GXRk5M+5H3abwpealuYFUKzv1PzbVX3CsIQ7JUHWNNjKmqq262g5ApfnMq0mu3R
5MiRVrYJDg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:14:16 2026 by rpki-client