This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
File:                     73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer (raw, json)
Hash identifier:          2GQYYpEP3Tka/XHUjuaNv9y60aKM1K6i6aKMvLm43bQ=
Subject key identifier:   92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C9C29FEE9997B6D0D101FE840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Jan 2026 13:45:21 +0000
Certificate not after:    Wed 26 Apr 2028 12:45:21 +0000
Subordinate resources:    AS: 36829
                          IP: 104.156.148.0/22
                          IP: 141.195.98.0/23
                          IP: 172.111.56.0/22
                          IP: 206.83.151.0/24
                          IP: 209.142.100.0/22
                          IP: 2602:fc64::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:29:fe:e9:99:7b:6d:0d:10:1f:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 22 13:45:21 2026 GMT
            Not After : Apr 26 12:45:21 2028 GMT
        Subject: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:c1:82:f9:23:53:d2:12:31:42:3e:e4:fd:
                    a6:2c:58:71:da:70:63:5f:a8:43:1a:e6:e6:10:c8:
                    e9:e4:d3:0f:21:ae:c2:02:dd:f7:55:61:c2:57:69:
                    95:56:92:62:93:d6:57:96:97:d0:fa:3b:41:0f:d5:
                    77:ef:4e:a1:d0:29:49:f5:19:ce:c5:35:a6:2a:de:
                    6a:73:45:c7:62:09:1c:87:59:4c:5c:3e:52:12:40:
                    ff:c8:fc:4e:d5:93:c3:42:2a:2e:34:16:6e:c4:88:
                    66:7f:8b:e3:f7:fe:d8:8c:83:77:7f:48:16:9d:56:
                    2d:74:2a:34:d0:6a:34:63:81:eb:0c:4c:cc:2d:b2:
                    36:b3:19:9e:03:92:0e:ad:06:ce:74:3c:3d:67:24:
                    3c:38:c6:b1:c9:b4:ac:f8:f8:ee:b7:2e:a0:aa:d1:
                    2d:89:c2:1a:ac:fe:cf:d6:de:05:af:5d:f3:57:a0:
                    0f:3c:e6:8c:3c:49:93:8a:db:57:27:32:42:40:ec:
                    bc:91:a0:06:9f:25:c1:0b:fa:31:9d:76:04:6e:dd:
                    d0:95:50:fd:be:a2:7c:09:bc:85:b6:a5:a6:88:65:
                    8a:93:0d:7a:94:37:0d:50:ef:89:cd:0e:62:cc:9a:
                    7d:83:70:2f:ac:7e:50:a5:6c:bc:e4:22:74:d4:11:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.148.0/22
                  141.195.98.0/23
                  172.111.56.0/22
                  206.83.151.0/24
                  209.142.100.0/22
                IPv6:
                  2602:fc64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36829

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:39:49:f3:ed:ba:99:6a:96:8d:b4:cd:cc:82:7a:2d:96:
         41:a8:cd:81:ce:bd:a8:91:63:11:0d:3b:ce:33:de:04:3f:ab:
         9c:4d:69:61:ea:07:d4:90:65:ca:a5:83:11:36:d5:34:b8:f0:
         63:50:85:40:7b:4e:99:f8:d8:37:ed:ae:2d:8a:4b:1f:56:25:
         13:fd:ad:13:21:14:27:04:48:0e:0c:1a:c8:03:38:da:f6:40:
         65:dc:a2:50:8f:49:28:ea:8d:00:e8:b0:ae:8a:09:15:b5:27:
         46:6c:43:d1:1c:57:c7:5b:17:c9:48:94:28:3e:50:49:50:66:
         08:be:88:36:0b:d4:e0:71:8f:8e:94:e8:5d:c5:cd:1a:87:37:
         6f:ea:13:2a:35:82:72:ac:c9:4e:4b:1f:de:6b:08:92:e5:26:
         97:79:7e:39:ff:dd:e6:4c:7d:f3:9e:93:53:5f:8b:15:ea:53:
         70:ab:ea:e2:6c:f7:2d:32:9c:fe:27:3b:53:60:4e:5b:88:70:
         56:7b:5e:ac:70:91:eb:52:c9:95:9e:3f:ae:95:d3:6f:1c:ed:
         90:f6:c4:b7:6e:8c:bc:06:57:95:f7:02:45:69:48:38:d1:87:
         86:e5:c4:75:52:48:47:3c:9a:7d:66:50:9d:5c:ee:11:10:29:
         8c:5a:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:57:59 2026 by rpki-client