This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
File:                     d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer (raw, json)
Hash identifier:          g8C/LetbPROOLwIL1BTl4jajqXL2ITXmL1wnEEKkz4Y=
Subject key identifier:   7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C029E63501D5036AD67132800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Nov 2025 13:45:23 +0000
Certificate not after:    Thu 02 Mar 2028 13:45:23 +0000
Subordinate resources:    AS: 393444
                          IP: 72.46.112.0/20
                          IP: 143.246.128.0/21
                          IP: 207.162.208.0/20
                          IP: 2605:e8c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:02:9e:63:50:1d:50:36:ad:67:13:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 28 13:45:23 2025 GMT
            Not After : Mar  2 13:45:23 2028 GMT
        Subject: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:a0:51:35:df:7c:a8:90:14:df:e0:41:12:
                    15:47:6a:31:4a:cb:13:1b:8c:fb:38:c3:8f:2e:b7:
                    bb:e2:bb:d5:0c:33:59:31:4c:fd:ea:47:f7:f0:85:
                    73:b9:8a:2a:8b:b3:ab:2b:45:00:9c:2a:a9:b5:7d:
                    df:25:dc:cc:92:37:92:53:ef:84:56:1d:59:f7:dd:
                    d4:7f:2d:19:cc:8f:5f:3a:a1:8a:bb:a6:ac:ba:68:
                    ea:48:db:e5:4d:58:cf:23:87:23:cf:46:f7:a5:a5:
                    da:8a:b2:d7:2d:d1:a7:7d:3d:a4:87:ab:3b:b7:04:
                    f5:67:56:f0:9d:7a:e7:64:29:cc:66:5b:16:21:66:
                    fe:6e:ac:2d:d6:f4:2a:2d:10:64:98:3e:db:97:88:
                    a1:a1:75:27:f8:83:7b:e1:3b:d5:09:76:10:23:0d:
                    65:d9:29:00:bb:49:af:7b:78:65:6b:d5:0b:0f:cd:
                    fd:fb:3f:7d:b2:c2:bf:2f:42:e9:21:40:3d:df:29:
                    05:25:76:a7:78:88:4c:d0:a4:1b:80:ca:be:c4:ac:
                    48:c3:e5:7b:02:cf:cb:87:94:36:2f:1b:11:68:7e:
                    18:90:3f:27:0f:ca:51:95:dd:01:6d:e5:20:a8:4d:
                    ff:d8:bc:32:20:21:af:b3:67:95:f5:45:53:83:96:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.112.0/20
                  143.246.128.0/21
                  207.162.208.0/20
                IPv6:
                  2605:e8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393444

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:b5:77:97:7e:68:00:8e:3a:05:2b:95:01:18:b3:ea:b1:
         31:4b:5b:e0:b2:d0:d4:66:09:d0:1f:29:82:19:30:e5:e9:fa:
         8a:9b:67:a5:1b:89:6b:d8:98:c4:df:6f:01:84:4b:41:14:64:
         52:99:ac:37:05:e9:69:b0:90:1e:be:fa:93:ea:61:c3:33:37:
         81:d2:ba:55:04:b6:fb:dd:22:eb:41:d3:04:7c:f6:cf:3e:23:
         37:31:0e:8d:10:90:37:7a:88:2e:1c:71:40:56:00:c1:6c:6f:
         7b:ec:b4:ea:12:db:76:a6:12:59:dd:0e:26:27:b1:8b:72:9d:
         74:fc:22:34:32:27:72:59:c1:4a:09:a5:be:63:7a:aa:01:b5:
         86:93:3e:2e:9e:c4:f4:d1:15:61:07:56:0d:42:1c:d0:06:4f:
         2a:38:20:61:60:1b:d4:c1:17:7b:13:54:11:ba:1b:36:39:b3:
         a1:26:98:af:74:76:e4:35:ce:a4:b5:ea:f2:fc:02:27:bc:87:
         be:ca:a5:59:ed:65:1b:81:d4:7c:31:3b:14:b4:8b:11:74:d6:
         fa:98:a5:5d:36:02:c9:41:73:3c:65:d8:d3:4f:19:e7:d5:73:
         b5:57:00:55:6f:65:b7:d7:f1:9a:21:4f:01:c4:7e:44:b1:89:
         22:8b:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:53:40 2025 by rpki-client