This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
File:                     c892586d-1638-476b-994e-499f179da6da.cer (raw, json)
Hash identifier:          I7s8XRYxUwJr9+5I2TxwzP0lRrf8pAkkAWk1guhu0ng=
Subject key identifier:   8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584BCC2E0E0949B7B9BBC732F400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 09 Nov 2025 01:45:24 +0000
Certificate not after:    Sat 12 Feb 2028 01:45:24 +0000
Subordinate resources:    AS: 36375
                          IP: 67.194.0.0/16
                          IP: 192.206.53.0/24
                          IP: 2605:42c0::/32
                          IP: 2607:f018::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cc:2e:0e:09:49:b7:b9:bb:c7:32:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov  9 01:45:24 2025 GMT
            Not After : Feb 12 01:45:24 2028 GMT
        Subject: CN=c892586d-1638-476b-994e-499f179da6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:1e:9b:a0:54:45:44:99:8b:3e:10:ee:86:
                    b5:5a:f7:e8:82:dd:08:99:99:8e:f0:b8:28:99:fc:
                    58:f0:50:cb:c3:5f:0b:39:27:db:6b:84:2b:d1:7b:
                    b3:0c:f7:2d:fc:1f:9e:02:70:ac:00:79:3d:d1:10:
                    ad:1e:c2:00:23:79:de:58:4f:1f:eb:30:86:ff:50:
                    34:40:e7:d7:0f:ce:ae:f9:1d:73:1c:c4:a2:cb:d3:
                    c0:ee:6a:06:a7:50:34:a7:96:47:21:73:18:05:51:
                    46:da:8c:6f:6b:56:97:08:7f:4f:1b:ab:b6:5a:b7:
                    2f:c0:96:20:1b:67:45:e5:5e:e3:f2:f4:f6:8e:9a:
                    88:e9:12:5a:e6:9e:a9:1c:ab:bd:13:4d:8e:f3:68:
                    14:f6:c4:c6:6e:45:63:4b:11:73:9d:b4:3a:c3:42:
                    a7:f3:d5:13:4e:57:37:bf:e3:d8:48:63:47:56:4d:
                    f8:7f:39:19:9c:f0:03:4f:72:43:56:bc:c9:23:ca:
                    6a:60:2b:f0:cf:33:c4:a3:91:83:61:48:e4:34:bd:
                    90:d1:71:62:0b:52:6c:d9:5a:8d:02:2e:f2:97:27:
                    a8:cc:6b:2d:70:71:5d:64:50:ba:7b:71:f6:cd:28:
                    d2:98:28:7f:16:c7:aa:44:35:86:35:02:03:ff:6a:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.194.0.0/16
                  192.206.53.0/24
                IPv6:
                  2605:42c0::/32
                  2607:f018::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36375

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0a:4d:d1:94:8f:d1:12:63:35:b8:a7:e6:fa:32:78:b3:d4:
         bb:a9:a5:5a:7a:aa:95:6b:14:a2:5f:bb:77:08:b1:60:1b:37:
         d1:b8:c4:99:a6:b1:68:99:69:b0:4f:45:f9:20:61:fb:1a:ec:
         04:2a:86:66:4b:f4:54:d3:db:45:e0:06:a4:ea:98:aa:30:63:
         d2:24:04:67:31:b4:13:7e:e3:c6:78:d8:83:0c:50:49:a1:3f:
         fb:d1:6b:16:4d:1e:2a:69:bb:aa:47:8f:b3:1d:06:85:63:b7:
         02:01:a3:8f:ab:c7:04:88:9f:8c:79:3d:b4:0f:d3:6e:55:21:
         c9:c9:e0:e4:2b:90:db:33:60:cc:0c:98:ab:91:dd:b1:2b:51:
         1d:68:12:01:3a:45:48:6e:d5:9e:50:82:9e:94:a1:4e:23:85:
         20:94:9d:22:1e:11:a9:fc:04:c9:37:57:28:eb:b8:2d:b1:4f:
         33:b8:f3:1b:d3:22:42:9e:ab:3c:52:f3:f6:0a:a8:66:d0:b2:
         e0:e7:ab:9c:c6:ff:2a:7c:b3:ef:cf:d1:cb:c2:6b:e5:48:91:
         4c:28:f4:9b:e7:86:c9:9b:8f:c9:61:94:a8:73:c6:d3:7a:0a:
         25:50:c9:a3:b0:7e:be:8d:37:ad:dc:35:fe:05:0e:3c:16:6a:
         cf:2c:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:43:35 2025 by rpki-client