This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
File:                     259ec515-1c64-4ed2-96d4-729fb5a0107e.cer (raw, json)
Hash identifier:          3mij4rDlN2LdKEq9LvFYv9vZNVZi8qXaTbNMWAnRGGo=
Subject key identifier:   1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584C5C4F14DB0855FFF31D39EE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Dec 2025 16:48:21 +0000
Certificate not after:    Tue 16 Mar 2027 23:44:16 +0000
Subordinate resources:    AS: 18956
                          IP: 209.196.72.0/23
                          IP: 2602:f775::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5c:4f:14:db:08:55:ff:f3:1d:39:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 30 16:48:21 2025 GMT
            Not After : Mar 16 23:44:16 2027 GMT
        Subject: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:29:17:5e:fe:9a:38:3c:94:02:27:43:c2:5f:
                    ba:85:fe:82:55:4f:ec:ea:e7:d2:dc:48:4c:64:c3:
                    ea:7c:1d:42:da:6e:5c:3f:ba:a2:89:c1:2f:c4:9c:
                    c6:a6:cd:90:08:7c:8b:a2:f4:db:fa:76:c5:d9:92:
                    96:bc:2f:3a:c8:67:54:b9:d0:08:7c:23:b8:bd:87:
                    b0:9e:c2:3a:51:66:ee:21:2e:0d:1f:99:83:42:b1:
                    20:4d:34:3a:0a:02:5d:7c:37:39:0c:2c:a9:76:e3:
                    28:5b:8f:0c:e3:b7:ea:46:55:4b:1e:01:48:a9:f6:
                    5b:e9:f2:68:5e:b9:ce:dd:34:e0:d0:62:45:98:8b:
                    74:fb:82:ed:a1:56:69:66:1b:7a:86:ed:33:3e:2a:
                    97:80:37:ad:18:d0:7e:35:bb:d8:d4:10:ec:dd:30:
                    84:17:ec:41:38:8b:18:91:24:1f:d6:90:19:38:d6:
                    da:17:65:67:af:33:ca:fa:01:45:68:8f:07:64:2c:
                    33:61:ef:2b:0d:29:4f:0f:51:1d:0f:9b:1d:54:9b:
                    c6:3a:dc:68:24:b2:d2:6f:53:e2:81:f1:fb:1c:f9:
                    e3:86:d2:f4:ff:f4:d3:72:0f:0f:aa:bf:ce:37:72:
                    6d:3c:30:1a:72:d6:9a:34:34:82:fe:c0:ff:f2:22:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.72.0/23
                IPv6:
                  2602:f775::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18956

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:a3:7d:34:86:d3:c0:00:87:39:04:fb:53:2f:e5:09:f1:
         26:2e:61:40:97:ae:b0:e3:65:49:8b:5e:8d:f9:03:b4:3a:18:
         3a:58:e0:94:7d:b1:1d:73:1c:93:73:62:a4:9a:9f:f1:97:9a:
         96:ca:74:eb:af:a4:e6:86:ce:36:cc:fc:a9:6b:49:6b:89:2b:
         a1:f1:19:1d:a1:f7:42:f5:ac:68:ba:d9:ec:70:1f:9b:17:d0:
         8d:28:3b:b1:25:86:5b:c6:de:6c:0c:9d:c7:f1:95:fe:e9:4b:
         fe:89:f5:c4:9c:25:ce:08:9c:8b:83:29:b8:d9:e8:74:e1:f1:
         42:47:89:06:f9:ee:78:d1:9b:23:e3:53:72:5a:45:b8:0e:9b:
         5e:28:0d:b2:3e:20:f5:68:c5:ef:4b:dc:39:77:cf:a7:d4:97:
         25:52:ef:99:71:18:c4:9d:05:46:e9:99:2f:c9:60:df:77:e6:
         70:bd:b7:10:ff:f3:fe:3f:37:e4:1c:73:d6:30:fa:6b:37:c7:
         51:be:a4:a7:37:91:b2:ee:8e:d3:e8:76:f3:96:ca:46:96:24:
         1b:a8:57:b8:f3:d5:26:69:3b:f6:58:83:ce:d5:99:d0:81:e6:
         28:5d:01:31:4c:67:1f:c5:f9:6b:d4:a0:ad:42:8b:0e:09:57:
         77:f6:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----