This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
File:                     74a9db22-8d49-4938-9c6f-e3fd428c158e.cer (raw, json)
Hash identifier:          GOE1hG1KwTwL7n5NsLdSDTCzxRR5wOX0Q/RqUjHAFt4=
Subject key identifier:   98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584C90FF4793BAEF34FB40A60080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 18 Jan 2026 13:45:23 +0000
Certificate not after:    Sat 22 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 63399
                          AS: 394574
                          IP: 170.10.192.0/19
                          IP: 199.27.150.0/23
                          IP: 209.127.80.0/20
                          IP: 2620:e1:4000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:90:ff:47:93:ba:ef:34:fb:40:a6:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan 18 13:45:23 2026 GMT
            Not After : Apr 22 12:45:23 2028 GMT
        Subject: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:9e:72:47:67:b9:6d:40:75:cd:3e:3f:9c:
                    a3:02:21:a5:81:ed:35:49:ab:86:53:dd:da:ac:5e:
                    4c:0f:7b:13:3a:a2:f6:39:da:4f:63:77:10:69:b7:
                    8a:91:7b:66:be:20:76:19:06:36:90:38:2f:4c:f4:
                    d3:3d:18:e3:65:f1:2d:b2:f7:73:d0:c7:8b:e4:b5:
                    df:51:31:6e:3d:cc:c1:5a:78:b1:b9:d9:e5:23:b3:
                    19:15:21:f4:72:58:db:f1:de:38:ff:35:c1:0d:21:
                    b9:ee:80:c8:05:d6:2e:ed:b9:d8:f5:7d:dc:9e:1b:
                    08:e2:7c:17:56:3b:79:b3:00:dd:d2:ae:66:ff:06:
                    f2:6b:73:8d:67:14:29:02:5a:cc:dc:1e:6e:4e:fc:
                    c5:24:1a:e7:eb:e9:56:2c:50:24:00:2f:8a:b0:30:
                    0f:fe:18:f1:85:fb:38:4d:e7:a6:4f:ad:6f:3a:02:
                    40:b6:5d:27:bb:cc:bd:11:c2:71:a3:b9:44:a4:39:
                    45:42:76:8f:c9:38:a2:0b:e9:78:bd:6c:3e:1b:fa:
                    c2:bd:80:2c:8f:96:1b:69:cf:c1:84:12:74:f6:b7:
                    85:f9:84:36:95:b8:5f:74:71:0b:6e:f4:19:94:77:
                    f2:bf:fc:83:8a:93:fc:a9:7f:96:76:70:33:4b:5f:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.192.0/19
                  199.27.150.0/23
                  209.127.80.0/20
                IPv6:
                  2620:e1:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63399
                  394574

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:df:56:dc:4e:45:71:8e:15:73:7f:8d:aa:30:e2:08:9b:
         78:e0:27:0b:07:35:41:b0:8b:c0:54:48:f4:f5:47:d9:7b:fd:
         6f:f0:3b:ad:93:58:89:c6:f2:36:22:1c:8f:9c:00:9e:b9:e1:
         ff:17:e0:82:ab:48:d4:7a:96:8b:7a:6d:bb:ed:b4:00:ce:05:
         d7:97:d6:ad:07:8d:9f:83:7e:3e:08:4e:f2:76:de:d1:d8:c6:
         55:de:86:e8:6a:33:ff:aa:56:69:35:bb:ba:32:38:24:e2:2f:
         5c:4f:59:cd:4a:54:6b:41:bf:5e:47:eb:5e:9f:4c:bb:8f:76:
         a5:74:7c:3a:d7:b7:f7:44:5f:07:c9:86:04:27:e9:92:f7:48:
         f0:97:48:d6:c9:1c:09:a0:42:9c:39:73:c2:fc:b3:a0:d7:53:
         95:78:7e:a9:c3:23:7d:f4:22:ed:b7:b3:45:c7:53:be:00:b6:
         1a:9f:4c:16:dc:46:6c:11:f3:42:aa:33:a4:d5:2a:81:35:a2:
         d4:31:06:67:53:1a:7e:e8:d3:4c:56:c7:51:d8:8f:7e:4e:25:
         4b:98:ce:a1:74:90:5e:f7:41:c8:ab:cb:a1:d8:b7:33:90:a5:
         d9:6f:cb:54:2d:ea:cb:c0:a4:c6:c1:24:4f:3e:ed:c9:fb:e2:
         0a:e3:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:54 2026 by rpki-client