This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer
File:                     06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer (raw, json)
Hash identifier:          OQsbaxOVdIHT5SQ+rLQAguZ/rD51FkerjSNM6Xg1WEg=
Subject key identifier:   B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584BE6B38C6589838C5C7869E0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 13:45:23 +0000
Certificate not after:    Mon 21 Feb 2028 13:45:23 +0000
Subordinate resources:    IP: 23.147.56.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e6:b3:8c:65:89:83:8c:5c:78:69:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 18 13:45:23 2025 GMT
            Not After : Feb 21 13:45:23 2028 GMT
        Subject: CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:e1:05:a0:c1:94:ee:e5:65:a8:4a:7a:a8:
                    29:19:aa:50:e9:58:da:fb:d5:57:c5:1a:92:70:7b:
                    f9:b5:3e:23:c4:e3:52:8e:8f:6a:f2:f3:ab:89:dd:
                    fd:d6:53:5b:b5:69:20:fb:33:87:90:76:80:9c:d5:
                    ba:61:4b:67:70:82:97:cd:ae:83:20:54:f8:53:c3:
                    46:e4:85:35:32:31:fc:e3:65:8d:db:57:39:01:26:
                    c7:d9:c6:8e:9d:2d:d8:c7:15:f7:56:93:ec:0d:0f:
                    1f:33:0f:87:98:0b:f5:47:9b:9b:66:c5:1b:d4:a4:
                    06:76:73:9a:8e:f7:17:d8:58:21:2b:da:d4:d4:81:
                    e2:3a:07:19:82:2f:69:a6:5b:99:4e:de:7c:03:fa:
                    19:c2:0b:36:1f:23:ac:fd:61:da:f3:9d:31:e9:59:
                    bf:8a:fb:ef:fa:8f:c0:d5:04:a4:c7:24:b9:e2:4f:
                    ea:22:5f:c2:16:d5:c8:84:1b:da:08:0f:80:b3:cd:
                    27:d9:29:80:42:f7:48:b7:48:bc:e1:45:3b:2c:c1:
                    d7:6f:9d:a0:99:70:6c:4b:4b:65:83:01:49:87:c3:
                    f1:da:07:23:75:d4:d3:d6:6d:73:83:70:a3:90:b2:
                    a3:40:5a:73:8b:05:14:1c:24:74:71:ce:a0:32:10:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:8f:b0:dc:35:e3:16:f5:20:9a:19:0d:2c:80:97:00:3c:
         83:8c:fc:34:b1:ae:b0:eb:09:a0:5a:e2:99:7b:e8:92:35:40:
         7a:b9:e9:e5:df:86:47:13:07:1d:23:eb:ba:05:83:58:80:e0:
         0f:49:3a:59:72:80:b4:15:a7:8a:5c:91:c5:73:89:22:24:0d:
         c3:26:79:41:1c:0e:59:d6:32:d8:85:ef:9e:11:e0:23:a0:9a:
         5f:cc:ca:bd:dc:c5:49:89:5f:5d:28:d4:70:2f:09:8b:5d:26:
         ac:63:e4:56:7f:b1:94:92:c4:ba:2a:05:9d:4d:1b:04:72:70:
         f5:ad:d0:cf:96:88:4d:04:7d:65:16:c9:3c:6d:58:0d:c4:58:
         fd:f8:db:c2:f7:c8:f8:07:66:40:ae:37:0f:d0:e7:c1:b7:e3:
         a7:2e:29:99:b1:b2:1f:1f:44:4b:e4:03:6a:ca:18:32:c0:3e:
         62:45:56:ef:40:ab:93:8b:28:55:76:73:7c:32:38:b0:d8:59:
         8b:9c:ce:27:56:26:2e:6e:c9:77:ac:7f:6e:9e:91:ed:6f:a2:
         83:7b:b3:be:88:ab:69:1d:af:3a:f8:6a:51:65:ef:71:9e:bf:
         e1:0d:54:82:76:0a:8e:73:74:eb:cc:7c:d7:57:f6:5e:e4:87:
         1f:6d:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----