This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
File:                     37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer (raw, json)
Hash identifier:          e5IiG4RfDdtysN2dVb5bFuP47YiFHcp2iphu8s1BGM8=
Subject key identifier:   C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584C8385690DAB90C38A21818B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 17:54:20 +0000
Certificate not after:    Sat 08 May 2027 19:01:28 +0000
Subordinate resources:    AS: 398862
                          IP: 23.135.196.0/24
                          IP: 206.183.159.0/24
                          IP: 2602:f98e::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:83:85:69:0d:ab:90:c3:8a:21:81:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 13 17:54:20 2026 GMT
            Not After : May  8 19:01:28 2027 GMT
        Subject: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:33:06:96:98:f7:19:86:53:36:91:5b:43:
                    ab:b1:06:e4:1f:c8:2c:cc:9a:fc:6a:20:e9:6a:ae:
                    b3:ee:80:37:65:61:1c:0e:ec:29:ab:6c:2d:17:74:
                    fb:51:43:0a:bc:f1:0b:fb:12:b7:3f:2d:6a:81:74:
                    19:85:d0:3c:f2:21:3b:29:7a:ed:58:97:e8:4b:dc:
                    f5:2f:97:75:13:63:c7:37:00:9f:84:bc:f0:6b:34:
                    95:93:06:28:6b:ec:ac:12:9a:ff:2e:4a:3f:c2:6e:
                    b3:be:9b:bf:8a:1e:9a:6d:e2:54:36:98:d7:68:fd:
                    b8:15:3a:aa:b8:c6:4a:c7:a2:39:fb:e5:70:c2:b7:
                    a1:bb:fb:2c:a2:80:cd:ad:29:53:e3:df:17:5c:4b:
                    ec:12:7a:87:2e:9c:e1:03:e8:e5:81:e4:7a:d3:32:
                    32:47:ca:bd:50:0c:41:e4:23:3d:19:cc:89:68:79:
                    0b:63:20:8e:93:69:6e:3b:4e:13:00:d3:39:64:98:
                    8e:ae:8e:74:66:91:43:e9:9c:3c:3b:4e:da:4d:ec:
                    34:e1:39:80:5b:35:89:3e:c1:98:36:ef:51:a1:89:
                    d6:40:22:ab:42:1e:e1:4b:8d:e3:27:81:7b:3a:e6:
                    89:04:76:48:d2:99:76:b4:07:2c:57:79:fb:bf:a6:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.196.0/24
                  206.183.159.0/24
                IPv6:
                  2602:f98e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398862

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:87:2b:9d:fa:50:72:3d:ce:ef:9f:f0:37:fd:b5:9a:9f:
         2e:89:83:d1:2c:82:ef:d8:bc:94:81:f5:66:88:b9:8f:6a:47:
         d7:07:56:b5:6e:a5:d2:9a:51:27:20:38:37:11:c3:d0:99:c5:
         95:c6:22:4c:e1:88:16:13:3b:15:78:a5:e6:9b:ec:2c:e5:03:
         75:5c:c1:45:cb:e2:8b:1f:06:aa:76:38:4c:bf:a6:69:85:a5:
         06:d3:99:75:61:5d:fe:66:f8:bc:7c:54:08:17:95:f1:1a:a2:
         8b:d0:64:13:21:2d:1e:9f:9c:05:1f:9f:37:e5:eb:fd:0c:85:
         95:ce:09:9e:8e:29:dc:29:df:08:0e:02:d7:fb:9c:0b:14:51:
         d6:14:b2:e0:0e:f1:2a:81:c6:bc:7c:db:64:e6:20:5a:04:3e:
         f9:f7:53:ef:4a:ea:bb:cb:69:9e:ba:57:8d:1a:3a:44:10:86:
         ec:1d:15:48:72:15:4b:65:07:2c:c4:72:8d:32:71:5c:c4:88:
         f1:fe:bc:92:be:5a:b0:8f:ed:14:dd:a9:38:c9:ad:52:10:a9:
         f0:ac:52:20:c0:3c:fc:bb:21:46:35:e3:45:1a:67:1a:be:c0:
         b5:43:17:8f:56:d9:28:e6:10:5a:ab:a9:86:db:dc:65:d7:c3:
         53:2a:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:12:24 2026 by rpki-client