This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer
File:                     a38ff47f-825f-4455-b429-60f899d42ec6.cer (raw, json)
Hash identifier:          t9heDGX+ERsNXPgR8hBdW82gGge09z+iGn3MqLa5aA8=
Subject key identifier:   5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584C0DC91EF3856BCCF4E563DFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Dec 2025 13:45:23 +0000
Certificate not after:    Mon 06 Mar 2028 13:45:23 +0000
Subordinate resources:    AS: 399840
                          IP: 192.43.246.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0d:c9:1e:f3:85:6b:cc:f4:e5:63:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec  2 13:45:23 2025 GMT
            Not After : Mar  6 13:45:23 2028 GMT
        Subject: CN=a38ff47f-825f-4455-b429-60f899d42ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:62:5f:52:48:e4:f2:0c:79:4b:c1:90:41:
                    a2:b5:fb:23:a2:39:ad:c7:de:3b:9e:dc:02:a7:20:
                    4e:e8:de:61:03:62:eb:5e:e6:ce:46:e7:a7:2b:4e:
                    34:a5:5c:9c:1a:d3:3b:4d:5a:73:13:ec:53:eb:be:
                    28:9d:61:96:aa:4d:b9:5d:5d:75:7d:a9:70:5c:10:
                    cf:89:3a:6c:be:9f:07:1b:2e:4a:4c:02:00:12:87:
                    b2:4e:6d:2a:57:6f:90:b4:ef:98:dc:8d:7b:1c:c6:
                    84:6a:83:96:7f:ec:7e:48:e2:a3:ea:65:db:68:1d:
                    31:b4:f0:79:87:a2:ba:16:1b:eb:8a:c8:ad:08:91:
                    57:20:1f:89:90:78:55:17:7e:e0:ca:23:d4:6d:c6:
                    68:52:a8:a2:10:59:29:4a:f8:c5:0e:d2:c1:a1:50:
                    a2:c3:2a:ab:78:5d:00:5a:cc:87:b2:53:21:a1:d3:
                    73:39:42:85:32:16:a2:17:f4:8f:a2:0f:26:02:26:
                    3b:1f:19:df:6d:89:78:20:d6:60:de:cd:11:a0:b5:
                    ea:3a:80:6e:71:6c:24:e2:e1:73:af:f4:fa:ce:cc:
                    34:a9:52:12:8a:a8:42:35:56:94:65:e2:fd:30:26:
                    20:a3:b5:df:48:a6:77:49:be:f8:2d:25:2e:cd:a3:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.246.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399840

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:50:1d:c5:79:3f:c8:d7:ed:07:f8:6d:8f:fa:ac:20:43:d7:
         59:58:cf:69:d5:7b:2d:dd:57:e4:18:ca:d6:0e:82:90:0c:17:
         18:b5:8a:51:6e:6c:31:51:fd:37:39:20:43:57:10:01:ed:fb:
         39:9d:21:ee:93:5b:5a:aa:ec:bc:3e:62:14:e3:a7:6d:42:e6:
         89:af:a1:22:0c:53:1f:f1:4b:f1:73:77:a5:25:15:cb:f8:db:
         dc:10:48:03:e3:06:17:ce:cb:2b:29:1b:6f:38:de:4c:ce:b5:
         89:1d:d5:ea:78:68:a4:7e:09:da:09:52:a7:10:0a:48:3a:f0:
         52:1c:82:a5:45:f2:ce:12:39:48:ff:fb:98:50:54:9e:80:60:
         9b:d6:67:72:42:00:11:21:dc:bc:a9:7c:6a:c3:e0:ae:ae:85:
         eb:e0:51:23:f4:85:17:9e:ae:69:c8:1b:3e:ec:d3:bc:df:92:
         1f:f7:bc:41:00:89:89:18:5c:a8:eb:48:e0:c6:78:7b:4a:22:
         67:69:09:0c:ba:85:86:a1:64:2e:7f:3d:ad:8f:9a:4d:82:7e:
         8e:14:64:84:dd:02:66:04:4e:37:15:5f:65:a8:90:c2:1a:2a:
         4c:d7:f9:9f:fa:db:8f:f2:0a:db:ae:40:7e:85:bb:48:b8:c2:
         13:c5:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:52:22 2025 by rpki-client