This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
File:                     df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer (raw, json)
Hash identifier:          VCBg/1NWCwOFoK/tNz59gGXpsTf3OwySJq19KH3ZHMs=
Subject key identifier:   FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C803F2D36C8F2338E3FFF33C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 13:45:23 +0000
Certificate not after:    Sun 16 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 25649
                          IP: 74.112.192.0/21
                          IP: 104.153.204.0/22
                          IP: 129.220.224.0/19
                          IP: 142.147.84.0/22
                          IP: 143.55.84.0/22
                          IP: 143.55.152.0/23
                          IP: 161.38.42.0/23
                          IP: 162.33.240.0/20
                          IP: 172.110.240.0/22
                          IP: 192.34.208.0/22
                          IP: 198.207.148.0/22
                          IP: 199.187.232.0/22
                          IP: 208.74.8.0/22
                          IP: 208.86.44.0/22
                          IP: 2607:fa38::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:3f:2d:36:c8:f2:33:8e:3f:ff:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 12 13:45:23 2026 GMT
            Not After : Apr 16 12:45:23 2028 GMT
        Subject: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:cc:41:45:a6:1b:b7:27:8d:1e:67:b5:92:
                    46:1e:82:be:62:43:3c:8e:5c:85:cd:28:21:22:de:
                    de:82:a8:e0:e0:de:0c:3f:f9:75:11:de:e5:08:f9:
                    7b:2f:2f:52:53:5b:61:1e:e4:1d:5c:10:8a:3d:53:
                    a5:96:43:03:6f:bd:63:97:f7:1f:5e:87:af:66:4b:
                    77:76:85:98:3b:80:c0:a7:88:23:4b:4c:da:4d:1f:
                    e8:c0:ec:f8:d3:03:a1:bb:cb:70:bd:0a:cd:94:a0:
                    7c:34:31:d7:12:89:ce:c4:fa:2d:36:da:37:40:5e:
                    e3:ee:d5:12:41:70:51:eb:b4:60:5d:c0:a2:ac:ff:
                    e5:74:f0:1f:fb:24:80:7e:13:59:8f:a1:c3:98:b6:
                    74:ac:37:2b:bc:5d:56:b1:9a:31:ff:f8:92:31:87:
                    ac:67:c1:08:3b:e7:67:c1:59:ab:f8:68:7d:4d:db:
                    d5:91:80:60:83:90:f7:98:09:ae:e1:d5:11:91:d8:
                    4f:90:a5:42:90:cc:aa:76:ff:2f:4b:4f:35:66:6f:
                    5e:5e:fe:06:08:0c:3b:e5:fd:8c:06:d8:b4:07:31:
                    4d:0a:7b:e2:11:67:64:02:8b:29:79:ad:06:6e:8e:
                    da:c1:62:0b:87:0c:b3:cf:ab:3e:07:0a:a2:34:0f:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.192.0/21
                  104.153.204.0/22
                  129.220.224.0/19
                  142.147.84.0/22
                  143.55.84.0/22
                  143.55.152.0/23
                  161.38.42.0/23
                  162.33.240.0/20
                  172.110.240.0/22
                  192.34.208.0/22
                  198.207.148.0/22
                  199.187.232.0/22
                  208.74.8.0/22
                  208.86.44.0/22
                IPv6:
                  2607:fa38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25649

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:f6:44:fc:7a:ff:70:77:c9:6b:1e:9b:79:ea:d0:b0:b7:
         59:ec:e5:d7:b0:c5:6f:94:bb:0e:14:52:db:41:e1:ed:5b:9f:
         f2:21:2b:27:ce:52:fc:db:6d:9f:14:92:2f:34:80:b3:08:58:
         19:48:cb:a9:ce:30:60:d4:3c:f1:ab:0a:5a:33:1f:3f:ce:40:
         a8:80:a6:c2:ad:72:eb:35:ce:e5:e2:dc:12:f7:0a:67:33:e7:
         a6:7e:d0:9a:c4:c0:69:45:8b:ea:c4:24:61:b9:0a:c8:01:13:
         2b:26:6b:4e:45:d5:a4:45:f0:70:09:65:54:09:f9:c9:40:b4:
         37:d3:48:6e:91:7d:23:4a:2a:a0:92:98:e3:39:75:f3:2a:79:
         ae:a6:9c:4a:1d:86:d7:00:32:68:5e:8e:c9:df:e1:54:58:d4:
         96:89:27:c5:fa:97:a2:a7:f8:40:22:12:fa:d6:48:6f:78:90:
         e1:9f:25:15:66:f2:a8:9e:c1:9d:15:43:55:5b:8b:a7:70:b2:
         ad:b4:61:38:59:ce:f5:5a:c9:44:ed:24:09:9d:05:d1:00:17:
         6a:b1:9b:49:fc:cc:62:1d:59:8f:16:70:aa:32:61:7d:44:e6:
         27:06:10:27:3e:ec:ab:58:a8:7b:02:48:c2:5e:f8:3b:25:a7:
         4a:10:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:52 2026 by rpki-client