This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
File:                     9c2a7225-dfea-460d-aa69-804ae5740036.cer (raw, json)
Hash identifier:          TZhKVFQuaYFby1gbq68OxMccLW/PEEBPeSP+72YHmW8=
Subject key identifier:   95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584BF8D8FE949FF09229E4D6DE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Nov 2025 01:45:23 +0000
Certificate not after:    Mon 28 Feb 2028 01:45:23 +0000
Subordinate resources:    AS: 20112
                          AS: 30221
                          IP: 63.247.144.0/20
                          IP: 68.68.192.0 -- 68.68.216.255
                          IP: 68.68.218.0/24
                          IP: 68.68.220.0/24
                          IP: 208.122.112.0/20
                          IP: 2607:fa28::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:d8:fe:94:9f:f0:92:29:e4:d6:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 25 01:45:23 2025 GMT
            Not After : Feb 28 01:45:23 2028 GMT
        Subject: CN=9c2a7225-dfea-460d-aa69-804ae5740036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:b5:78:a9:18:72:8a:56:37:da:2a:29:06:
                    9e:f4:bb:2d:d7:21:18:80:38:07:46:48:c0:35:95:
                    20:5f:f8:06:90:c3:1e:9d:40:8a:fb:38:17:aa:a2:
                    88:24:d2:4f:48:ff:75:91:8e:e6:49:f1:87:74:9a:
                    e3:9f:7c:7b:07:84:12:0a:de:c4:95:27:02:07:c6:
                    4f:91:a6:45:99:a6:28:6a:c2:83:bf:18:6b:4d:8c:
                    54:5b:42:c0:b7:a0:cb:1e:26:38:b9:da:34:33:2d:
                    d5:6e:6c:8f:fe:db:c8:b2:ed:c1:61:f1:79:ac:db:
                    cb:ca:54:26:11:cf:b7:e4:79:d9:93:1c:3d:23:8f:
                    ad:61:08:3d:e1:4d:cf:dd:ad:52:20:a2:18:44:f5:
                    f1:14:b2:05:47:dc:21:1f:7c:3f:ef:bb:8b:79:40:
                    3b:58:a4:a1:78:c4:10:ed:05:49:43:0e:c0:39:86:
                    a0:90:08:1d:23:51:7c:e2:d2:14:81:65:01:0b:e4:
                    a7:09:2d:8e:3c:03:47:ea:43:88:28:16:21:c9:3e:
                    d9:4a:f2:84:a9:1b:e8:de:55:31:b8:c1:7f:7e:b0:
                    7f:88:4c:b2:5e:cc:03:43:5c:5f:67:b1:b6:99:bb:
                    0a:95:ec:b6:8f:a4:2d:39:e1:43:ad:01:76:97:39:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.144.0/20
                  68.68.192.0-68.68.216.255
                  68.68.218.0/24
                  68.68.220.0/24
                  208.122.112.0/20
                IPv6:
                  2607:fa28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20112
                  30221

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:11:c5:6f:86:5f:a8:e6:89:44:6a:4a:70:98:72:bc:5e:a3:
         25:3d:e7:62:fb:5e:0e:c3:8f:a1:f5:88:6a:9f:42:c0:76:cc:
         db:3f:89:bb:1c:c8:78:92:41:fe:d9:24:ac:73:a1:09:d8:3e:
         ce:85:f8:2f:36:16:f0:4a:32:43:0a:c5:18:43:28:0d:ff:9d:
         37:eb:a2:6f:76:f3:70:63:da:4a:a4:36:a9:1c:bc:6f:63:7f:
         8d:0b:7e:e1:91:38:f6:b2:32:db:ae:50:8e:ff:0c:ab:1e:d4:
         3f:2e:b1:1a:17:6e:43:db:1e:8f:5f:96:0b:3f:5a:5f:00:2c:
         95:89:34:65:72:96:1c:be:a7:07:54:d5:84:26:0e:65:ed:e1:
         87:75:4e:15:c7:1b:fe:f2:42:18:46:1a:de:fd:fb:1c:95:fe:
         7b:f6:bb:d6:be:7f:da:de:78:db:15:50:b5:19:5c:83:2d:43:
         dc:d1:d1:3f:38:de:a0:b1:c5:1a:2e:cc:94:73:30:3b:78:5a:
         9b:4e:72:59:cf:20:6b:09:95:1f:9f:50:1f:39:9e:bb:94:97:
         53:98:4b:a7:54:7e:45:a4:f5:1c:5a:a7:37:0b:83:8d:30:5c:
         72:b1:01:a2:fe:42:fb:1e:20:a9:9f:71:2e:4f:52:0a:3b:07:
         5c:2b:2c:90
-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEv42P6Un/CSKeTW3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MTEyNTAxNDUyM1oXDTI4MDIyODAxNDUyM1owLzEtMCsGA1UEAxMk
OWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQwMDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVq1eKkYcopWN9oqKQae9Lst1yEYgDgHRkjA
NZUgX/gGkMMenUCK+zgXqqKIJNJPSP91kY7mSfGHdJrjn3x7B4QSCt7ElScCB8ZP
kaZFmaYoasKDvxhrTYxUW0LAt6DLHiY4udo0My3VbmyP/tvIsu3BYfF5rNvLylQm
Ec+35HnZkxw9I4+tYQg94U3P3a1SIKIYRPXxFLIFR9whH3w/77uLeUA7WKSheMQQ
7QVJQw7AOYagkAgdI1F84tIUgWUBC+SnCS2OPANH6kOIKBYhyT7ZSvKEqRvo3lUx
uMF/frB/iEyyXswDQ1xfZ7G2mbsKley2j6QtOeFDrQF2lzlusQIDAQABo4IETTCC
BEkwHQYDVR0OBBYEFJWK/sbIMwlYgT6Q6O+eySw623fDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85
YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljMmE3MjI1LWRmZWEtNDYwZC1h
YTY5LTgwNGFlNTc0MDAzNi85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3
NDAwMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTgYIKwYBBQUH
AQcBAf8EPzA9MCwEAgABMCYDBAQ/95AwDAMEBkREwAMEAERE2AMEAERE2gMEAERE
3AMEBNB6cDANBAIAAjAHAwUAJgf6KDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgJO
kAICdg0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAUBHFb4ZfqOaJRGpKcJhyvF6jJT3nYvteDsOPofWIap9C
wHbM2z+JuxzIeJJB/tkkrHOhCdg+zoX4LzYW8EoyQwrFGEMoDf+dN+uib3bzcGPa
SqQ2qRy8b2N/jQt+4ZE49rIy265Qjv8Mqx7UPy6xGhduQ9sej1+WCz9aXwAslYk0
ZXKWHL6nB1TVhCYOZe3hh3VOFccb/vJCGEYa3v37HJX+e/a71r5/2t542xVQtRlc
gy1D3NHRPzjeoLHFGi7MlHMwO3ham05yWc8gawmVH59QHzmeu5SXU5hLp1R+RaT1
HFqnNwuDjTBccrEBov5C+x4gqZ9xLk9SCjsHXCsskA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:03:47 2025 by rpki-client