This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
File:                     ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer (raw, json)
Hash identifier:          aZwsb1kCvL8h55iPnzQld6gnehecz5GWvMRrNXUv9Us=
Subject key identifier:   3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584BF1DE4753F4DCFB6C015C2C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 22 Nov 2025 13:45:23 +0000
Certificate not after:    Fri 25 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 55105
                          IP: 63.131.176.0/20
                          IP: 69.57.80.0/20
                          IP: 150.252.208.0/20
                          IP: 2607:800::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:de:47:53:f4:dc:fb:6c:01:5c:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 22 13:45:23 2025 GMT
            Not After : Feb 25 13:45:23 2028 GMT
        Subject: CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:dc:4c:ac:e0:17:fb:cc:bf:f3:6a:f7:80:
                    7f:8b:56:33:34:33:f4:72:fa:cf:0d:cd:43:a0:60:
                    2b:25:50:52:75:57:ac:de:bb:c5:26:1d:3b:f6:1f:
                    f7:a3:c1:dc:84:27:6c:b7:53:0d:ec:a2:d1:22:01:
                    c6:ff:c7:d7:9d:42:a1:23:c6:09:52:e4:ee:be:1c:
                    80:26:87:d7:92:a9:fb:b2:aa:29:1f:8d:7a:b1:33:
                    35:1c:19:c8:a1:07:66:60:29:a3:ec:1b:19:10:95:
                    73:d8:9b:71:4a:92:ea:79:9c:72:c9:0f:ff:70:63:
                    c3:a2:69:0f:38:8a:60:05:90:01:23:fa:98:da:a8:
                    77:56:c0:0a:dc:e2:68:b9:6a:d8:77:8e:ec:bd:f1:
                    c5:d2:ee:ce:d0:9e:99:7b:3e:6a:bf:bb:cf:24:4c:
                    05:ef:1e:49:02:f7:52:4a:dd:24:d6:fa:4f:39:84:
                    ae:dd:05:21:b3:b6:54:0d:f7:b7:dd:68:0a:b4:06:
                    d1:8b:26:15:81:60:cb:3c:33:8a:16:82:4d:23:06:
                    8b:97:02:86:0c:a2:7c:5b:87:9a:fb:e5:d2:ec:a0:
                    54:ca:3b:bd:0d:7e:85:f3:c4:50:da:c7:30:0e:0e:
                    fb:d6:2a:fc:be:66:4c:aa:bd:c6:7c:e2:07:62:82:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.131.176.0/20
                  69.57.80.0/20
                  150.252.208.0/20
                IPv6:
                  2607:800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55105

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:e1:d7:a4:ac:71:9b:63:c9:33:4d:6e:d0:3e:be:52:8b:
         d9:68:3e:ce:b2:29:be:16:f0:1c:c9:21:0c:84:30:e3:cd:18:
         4e:89:9c:55:4a:47:27:70:70:9d:8a:6a:13:2e:1a:fa:24:53:
         3b:f2:9c:fb:41:7d:2e:80:1a:a0:70:50:45:12:10:a3:05:4d:
         85:98:03:07:82:59:96:39:b9:fd:4b:c8:a5:1d:9f:3b:39:9d:
         7d:2f:f8:ff:c1:41:3f:21:38:01:df:ca:07:ba:48:78:fc:8d:
         a7:54:25:89:2d:67:aa:71:17:d1:5e:6c:45:5d:54:8e:d2:48:
         f9:01:f0:8f:c0:db:be:14:bc:e5:d1:9c:ce:5e:c2:fb:2c:ac:
         11:eb:57:ad:ee:56:f5:50:b0:ba:ab:ad:6f:73:47:0f:bf:b0:
         e8:a8:a7:2d:55:e8:61:8f:73:c2:24:4c:ed:22:d0:2b:ea:5e:
         ee:f3:8e:a0:49:58:3d:e5:98:95:c6:f8:d3:80:d2:f2:37:94:
         8c:b4:fe:85:5c:02:c1:2c:71:07:0d:df:5f:d0:1b:bf:b9:fc:
         bf:b9:42:69:dc:01:65:ea:92:26:46:6d:b7:b8:9d:ce:74:f5:
         0b:93:7d:bf:ec:11:94:68:07:8c:27:1f:1d:c3:b1:3d:74:6f:
         2a:91:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:53:08 2025 by rpki-client