This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
File:                     8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer (raw, json)
Hash identifier:          d/4pf7McPpKhxHipMmBCahBqxgMZN4/4AYQKEezYYIs=
Subject key identifier:   95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584C145B97A6D79A5831CB04F080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Dec 2025 22:15:21 +0000
Certificate not after:    Tue 23 Feb 2027 01:45:32 +0000
Subordinate resources:    AS: 62958
                          AS: 397929
                          IP: 168.100.20.0 -- 168.100.31.255
                          IP: 205.145.161.0/24
                          IP: 205.145.163.0/24
                          IP: 205.145.168.0/24
                          IP: 205.145.170.0/24
                          IP: 205.145.175.0 -- 205.145.177.255
                          IP: 205.145.181.0/24
                          IP: 205.145.183.0/24
                          IP: 205.145.190.0/24
                          IP: 216.224.192.0/23
                          IP: 216.224.210.0 -- 216.224.217.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:14:5b:97:a6:d7:9a:58:31:cb:04:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec  4 22:15:21 2025 GMT
            Not After : Feb 23 01:45:32 2027 GMT
        Subject: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:3c:b6:fd:8a:a6:2e:f1:47:dc:ad:ac:c0:
                    13:89:58:82:00:a2:94:ba:9c:8b:7a:64:69:24:5c:
                    35:e8:3a:12:8f:e0:61:ff:2c:10:df:fd:c3:7d:f9:
                    45:5a:0a:e9:a9:ba:35:32:64:bf:94:30:25:4b:99:
                    48:29:41:26:89:60:5b:3d:e2:c1:cf:54:fa:bb:64:
                    6a:6c:77:13:92:26:51:d7:c4:f5:99:4d:9e:7e:e8:
                    8d:21:2f:4f:4b:2a:68:dc:2b:9c:bd:06:48:18:ce:
                    f2:18:a3:eb:14:8a:2f:3b:ec:85:f4:82:34:a9:fc:
                    79:c7:ad:05:6c:fc:f6:36:c7:29:2e:4b:5b:b1:1f:
                    31:6c:83:b9:11:17:db:82:33:91:d3:47:8a:66:fb:
                    b5:0f:fa:4f:e1:9c:e7:88:bf:c5:10:4a:ab:cd:de:
                    8d:58:2a:2f:ea:d6:28:f7:c1:c3:86:43:c7:a9:a2:
                    58:77:77:cb:c0:dc:5f:87:8c:b5:46:23:c9:6c:cc:
                    5f:8a:cd:39:c2:0a:1b:7a:09:80:b7:bf:bf:e9:0c:
                    56:e9:e3:f5:b1:43:af:b4:a3:7a:83:4a:dd:f9:7f:
                    0b:a6:db:81:03:3c:48:18:89:3e:c9:16:3c:73:bb:
                    dd:d6:d9:f6:65:fd:65:89:5e:79:50:4b:4d:f4:23:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.20.0-168.100.31.255
                  205.145.161.0/24
                  205.145.163.0/24
                  205.145.168.0/24
                  205.145.170.0/24
                  205.145.175.0-205.145.177.255
                  205.145.181.0/24
                  205.145.183.0/24
                  205.145.190.0/24
                  216.224.192.0/23
                  216.224.210.0-216.224.217.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62958
                  397929

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:e4:9f:7d:31:e9:a4:28:05:15:17:e2:65:d3:9a:78:65:
         f8:fb:4c:3f:fd:46:dc:b9:f9:01:03:b3:36:9b:ed:63:6a:5c:
         34:52:98:f5:47:ec:1b:e8:fe:1d:62:62:ea:12:e1:60:b5:6f:
         38:f4:32:5e:ac:43:15:98:fe:ad:6e:26:9e:ea:72:e2:1a:0e:
         cf:31:9b:f4:ad:ee:62:4e:d4:15:f3:bf:2c:b5:02:67:25:d1:
         41:fe:8d:26:6f:cc:21:a9:75:60:31:f6:4b:d3:fa:31:f6:aa:
         9c:0d:d9:9c:73:5a:40:8f:cf:3a:1d:8b:13:4c:83:5a:78:89:
         a1:50:95:41:59:2c:0e:55:d6:1d:aa:64:32:e8:70:ba:0f:60:
         69:ff:a0:be:2d:bc:c2:58:8c:4d:6b:bc:ee:94:0d:58:6c:cf:
         32:ed:88:55:6e:46:cc:94:32:ac:e0:24:6d:bd:87:7d:f0:95:
         0e:24:7b:0f:d2:8c:1e:67:eb:92:f3:eb:65:0b:a8:ab:4e:70:
         91:f1:3d:1b:e2:20:0f:b8:e5:8c:c1:e9:9c:8e:48:4c:8f:01:
         b0:ef:e8:08:37:03:40:c2:cb:45:be:ce:a7:df:dc:a8:66:83:
         be:7c:84:bc:27:cc:e3:02:6e:39:c7:80:eb:9f:72:68:73:0b:
         34:99:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:19 2025 by rpki-client