This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
File:                     511ed25c-3ac7-4d86-9290-879e3813322e.cer (raw, json)
Hash identifier:          LHL2Ob5iEN9tFWNKtpFqvFQ837bhWpAp5Y4oksn+iYs=
Subject key identifier:   BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584BFA3E576C11039996C58FA900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Nov 2025 13:45:24 +0000
Certificate not after:    Mon 28 Feb 2028 13:45:24 +0000
Subordinate resources:    AS: 13325
                          IP: 2620:167::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fa:3e:57:6c:11:03:99:96:c5:8f:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 25 13:45:24 2025 GMT
            Not After : Feb 28 13:45:24 2028 GMT
        Subject: CN=511ed25c-3ac7-4d86-9290-879e3813322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:4b:39:f5:09:61:c4:83:3a:bd:2a:36:c0:
                    97:8e:55:1c:bf:7f:40:7e:b0:05:51:53:a2:e4:d7:
                    21:b1:68:dc:91:aa:28:6f:84:de:b6:21:75:8a:43:
                    9c:09:f5:ac:65:e2:d2:8a:1f:17:a9:8f:84:14:bc:
                    b0:f0:27:24:7d:5d:ed:f3:2f:0d:45:6a:19:c6:a9:
                    7c:d3:96:a9:1a:23:1c:b9:17:56:81:c6:0e:ec:a6:
                    3e:11:7e:a1:6c:70:db:d4:26:fd:e7:58:84:ab:63:
                    b6:9c:56:c3:1e:e1:ec:99:3f:f7:79:58:f3:bc:07:
                    0d:66:96:f1:6d:54:48:13:63:93:4c:3f:df:84:68:
                    c1:ce:bd:9e:8f:6e:9f:a6:df:e9:74:45:3c:e1:1c:
                    a9:b2:aa:71:ac:ce:c5:00:e8:c2:09:c8:76:e9:9a:
                    8f:86:33:16:56:58:3a:3c:e2:43:4f:3f:4d:0c:5e:
                    cc:27:ef:2f:35:c3:65:27:45:ec:61:2c:3f:c3:d5:
                    ff:50:7a:78:aa:92:db:22:6b:dd:2f:4d:96:ae:01:
                    7f:ac:0e:c8:56:b7:7c:fc:3f:fa:9d:55:69:17:a9:
                    7f:f6:6c:89:23:cf:aa:5d:94:a2:b5:21:dc:7f:1d:
                    3e:c1:16:00:38:5b:04:1e:96:e9:8c:4f:4b:ed:29:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:167::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13325

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d7:66:b8:fe:24:22:c5:43:ad:45:f8:88:b9:5c:4c:39:41:
         54:1c:73:a4:d4:71:17:af:6b:f6:7a:fe:b5:ac:0c:9e:ce:54:
         1c:45:ab:8e:2d:78:16:e8:0a:03:93:9f:d2:e2:72:b9:15:24:
         b3:6d:4c:ae:bc:d5:3f:46:15:e8:c0:a0:88:aa:c3:99:13:dd:
         df:38:cc:f3:8f:ad:a0:42:a4:80:cc:58:e4:2c:4c:1a:36:33:
         ed:9f:0f:96:66:a3:e5:ae:73:78:d1:e3:ae:b3:65:ec:7e:50:
         23:8e:f9:7e:7d:56:1b:f0:45:e4:49:c2:8b:05:e0:c5:d9:42:
         7f:f8:3e:09:b7:28:b8:6d:4d:4f:29:e5:fe:26:d5:b8:ba:f9:
         9b:d9:9a:b5:41:f6:2a:3b:69:83:83:9b:0a:45:53:c2:11:a1:
         e4:f8:ba:bd:bc:5d:39:36:69:88:a2:02:b3:43:02:f6:96:83:
         85:18:df:99:e4:18:00:ba:a6:9d:8c:66:95:78:0e:8c:c5:07:
         df:52:6f:4c:ec:dc:76:e5:fc:3f:12:58:e9:83:53:70:e8:54:
         5e:1b:2c:04:f4:aa:fd:86:3c:11:07:2b:66:a0:52:fd:64:0f:
         b3:cf:10:0e:ca:64:fa:95:d9:80:04:2c:da:9b:22:0a:62:8f:
         03:9c:10:17
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEv6PldsEQOZlsWPqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MTEyNTEzNDUyNFoXDTI4MDIyODEzNDUyNFowLzEtMCsGA1UEAxMk
NTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMzMjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TlLOfUJYcSDOr0qNsCXjlUcv39AfrAFUVOi
5NchsWjckaoob4TetiF1ikOcCfWsZeLSih8XqY+EFLyw8CckfV3t8y8NRWoZxql8
05apGiMcuRdWgcYO7KY+EX6hbHDb1Cb951iEq2O2nFbDHuHsmT/3eVjzvAcNZpbx
bVRIE2OTTD/fhGjBzr2ej26fpt/pdEU84RypsqpxrM7FAOjCCch26ZqPhjMWVlg6
POJDTz9NDF7MJ+8vNcNlJ0XsYSw/w9X/UHp4qpLbImvdL02WrgF/rA7IVrd8/D/6
nVVpF6l/9myJI8+qXZSitSHcfx0+wRYAOFsEHpbpjE9L7Sn+uQIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFL7XimByhXAQeyhD8S7l1Nxvx1suMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81
MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzUxMWVkMjVjLTNhYzctNGQ4Ni05
MjkwLTg3OWUzODEzMzIyZS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgx
MzMyMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQmIAFnADAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgI0DTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQAT12a4/iQixUOtRfiIuVxMOUFUHHOk1HEXr2v2ev61rAye
zlQcRauOLXgW6AoDk5/S4nK5FSSzbUyuvNU/RhXowKCIqsOZE93fOMzzj62gQqSA
zFjkLEwaNjPtnw+WZqPlrnN40eOus2XsflAjjvl+fVYb8EXkScKLBeDF2UJ/+D4J
tyi4bU1PKeX+JtW4uvmb2Zq1QfYqO2mDg5sKRVPCEaHk+Lq9vF05NmmIogKzQwL2
loOFGN+Z5BgAuqadjGaVeA6MxQffUm9M7Nx25fw/Eljpg1Nw6FReGywE9Kr9hjwR
BytmoFL9ZA+zzxAOymT6ldmABCzamyIKYo8DnBAX
-----END CERTIFICATE-----