This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer
File:                     b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer (raw, json)
Hash identifier:          XKbea5kwA0rwkl0S29tEeIw7nHrUw9jn5ZfmqNO5yh8=
Subject key identifier:   F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584C0AFE729079ABFFC070263480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Dec 2025 13:45:24 +0000
Certificate not after:    Sun 05 Mar 2028 13:45:24 +0000
Subordinate resources:    AS: 397913
                          IP: 204.108.182.0/23
                          IP: 204.235.160.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0a:fe:72:90:79:ab:ff:c0:70:26:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec  1 13:45:24 2025 GMT
            Not After : Mar  5 13:45:24 2028 GMT
        Subject: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:ba:de:48:32:7f:ff:c5:9d:d3:82:b2:db:
                    da:13:1a:c6:e0:fd:14:92:06:0d:c3:40:a7:15:9d:
                    98:b4:20:7f:42:e1:a1:cc:d8:4c:66:d2:06:ff:e9:
                    a3:09:28:d5:58:50:55:6d:63:8a:c1:29:b5:5c:3e:
                    e4:fa:b8:4d:37:fc:49:b7:4c:38:6c:9f:61:de:7c:
                    01:9e:fc:59:fe:cd:88:6a:7a:42:1d:06:c4:26:fd:
                    0c:ea:c6:3e:40:5d:75:6e:f5:45:9a:5e:18:6a:af:
                    a7:4d:47:74:ac:b4:ff:4c:f9:9a:1e:a2:75:9b:d3:
                    0c:f8:8b:d3:38:0d:96:28:20:96:39:a8:e7:24:c5:
                    47:d6:c3:bc:75:ba:43:a4:fc:e2:d0:62:d8:3c:f0:
                    65:96:74:de:93:35:52:72:a4:cf:9a:5a:5d:c7:80:
                    ef:1f:28:4a:eb:19:73:d7:91:c6:5b:ad:d0:44:bd:
                    98:30:cd:51:05:0c:dd:42:74:d9:64:fd:7f:86:7e:
                    84:50:0b:3b:38:06:a7:25:02:d6:01:41:39:2a:61:
                    22:eb:8d:74:43:c3:4a:e7:31:df:a5:02:c8:b0:09:
                    76:95:13:20:b4:24:7d:91:52:82:ff:b5:0b:3a:d1:
                    b7:a5:b0:7e:1f:ed:1c:89:d3:76:96:ff:3d:0a:c2:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.182.0/23
                  204.235.160.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397913

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:29:17:c6:fd:c8:3d:c3:56:43:25:8e:34:9b:e2:eb:a6:34:
         67:49:8d:19:b8:00:3c:ca:69:9c:06:fb:e0:00:14:d6:63:3f:
         24:fc:d1:53:79:c6:99:26:d2:f6:7a:3a:d2:17:51:5f:51:26:
         51:91:48:88:0c:f7:9b:96:f5:58:2b:1a:93:ac:76:9a:82:36:
         e9:aa:d3:ac:3e:1e:18:c2:ec:81:10:3a:a4:79:fb:ee:30:9a:
         af:f3:0a:10:59:a3:1f:69:db:87:58:6f:8f:f2:74:f6:07:8a:
         c5:63:2c:2e:5f:fe:f3:a4:b0:5a:9b:8a:d1:4b:33:c3:e0:70:
         85:40:c8:8d:59:2d:03:ff:f2:d5:c6:61:37:14:5f:30:17:27:
         2e:67:4c:3a:57:54:9e:d3:8b:b0:c1:65:aa:d5:35:c8:fd:9f:
         e9:11:7e:98:c8:78:98:88:a9:32:72:18:8a:d8:2f:ee:b0:34:
         6e:c5:6f:be:b4:c5:b0:45:e1:7e:2e:55:e0:4f:f2:29:b5:b3:
         53:cd:67:37:95:f4:6b:4a:e9:02:3e:92:82:66:e0:3a:b8:3e:
         f7:a9:7e:42:85:32:8d:48:c9:0d:8e:ba:3b:af:86:b3:1a:db:
         62:e1:59:99:58:b4:c4:52:27:2d:c0:74:fa:e5:9f:df:fc:0f:
         3d:a2:d7:73
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEwK/nKQeav/wHAmNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MTIwMTEzNDUyNFoXDTI4MDMwNTEzNDUyNFowLzEtMCsGA1UEAxMk
YjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMyMTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLq63kgyf//FndOCstvaExrG4P0UkgYNw0Cn
FZ2YtCB/QuGhzNhMZtIG/+mjCSjVWFBVbWOKwSm1XD7k+rhNN/xJt0w4bJ9h3nwB
nvxZ/s2IanpCHQbEJv0M6sY+QF11bvVFml4Yaq+nTUd0rLT/TPmaHqJ1m9MM+IvT
OA2WKCCWOajnJMVH1sO8dbpDpPzi0GLYPPBllnTekzVScqTPmlpdx4DvHyhK6xlz
15HGW63QRL2YMM1RBQzdQnTZZP1/hn6EUAs7OAanJQLWAUE5KmEi6410Q8NK5zHf
pQLIsAl2lRMgtCR9kVKC/7ULOtG3pbB+H+0cidN2lv89CsKswQIDAQABo4IEITCC
BB0wHQYDVR0OBBYEFPPT7XUQlaBYZ3NaYe+X+dbzFpS8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i
MjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IyNDIyNGJhLTgzNDAtNGEyZS05
ODZhLTVlMWY5YjJjMjE4Mi9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIy
YzIxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAHMbLYDBAHM66AwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDBhJZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEYpF8b9yD3DVkMljjSb4uumNGdJjRm4ADzKaZwG
++AAFNZjPyT80VN5xpkm0vZ6OtIXUV9RJlGRSIgM95uW9VgrGpOsdpqCNumq06w+
HhjC7IEQOqR5++4wmq/zChBZox9p24dYb4/ydPYHisVjLC5f/vOksFqbitFLM8Pg
cIVAyI1ZLQP/8tXGYTcUXzAXJy5nTDpXVJ7Ti7DBZarVNcj9n+kRfpjIeJiIqTJy
GIrYL+6wNG7Fb760xbBF4X4uVeBP8im1s1PNZzeV9GtK6QI+koJm4Dq4PvepfkKF
Mo1IyQ2OujuvhrMa22LhWZlYtMRSJy3AdPrln9/8Dz2i13M=
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:09:22 2025 by rpki-client