This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
File:                     e286fd28-0939-48b9-86ba-cbe791497d15.cer (raw, json)
Hash identifier:          UHZx4PtExLfca3jgF520Tj5mB3qFQZKcw7pOWuobz9Q=
Subject key identifier:   1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584C995F5270D92A0E3D78A88080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 13:45:22 +0000
Certificate not after:    Tue 25 Apr 2028 12:45:22 +0000
Subordinate resources:    AS: 400214
                          IP: 136.175.106.0/23
                          IP: 142.202.204.0/24
                          IP: 207.2.116.0/22
                          IP: 2606:9c40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:5f:52:70:d9:2a:0e:3d:78:a8:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan 21 13:45:22 2026 GMT
            Not After : Apr 25 12:45:22 2028 GMT
        Subject: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:90:fe:3d:1c:39:66:c1:d9:15:6a:c5:38:
                    70:78:46:3f:36:31:43:a3:1a:66:bb:6f:b5:81:97:
                    bb:a8:23:f6:2f:24:14:62:c3:dc:b3:e1:48:5f:ec:
                    82:4f:21:33:d9:03:30:9d:aa:ab:6b:f8:4a:55:28:
                    76:a8:c8:14:5c:73:90:93:b4:97:f4:90:0d:62:f8:
                    ba:fd:81:f6:66:5d:54:25:f0:bc:9b:10:2f:f3:ef:
                    54:a6:26:99:46:2b:67:c8:df:f3:17:25:ad:18:0c:
                    e5:ee:bb:fa:f7:1f:0d:d5:cb:b7:b5:29:c0:7d:78:
                    9b:60:bb:96:d4:c1:eb:18:2c:cb:a6:99:0a:8a:6d:
                    9d:81:31:80:40:26:cf:1b:33:72:1c:69:b8:90:b5:
                    e4:ee:11:d6:af:86:50:e4:7c:33:39:a3:47:fc:25:
                    17:1a:4e:d8:17:b2:99:ce:50:16:ae:81:31:c1:ef:
                    2c:57:8e:d6:c8:05:c7:45:ac:a1:e1:93:e6:93:8c:
                    e6:6c:d2:20:9f:47:89:43:f5:20:db:49:f7:0a:58:
                    d8:ef:13:53:e5:f4:2b:40:37:0f:58:a7:70:59:af:
                    8d:88:4b:15:39:c2:3f:48:26:ca:a7:3f:b6:db:8f:
                    3b:5e:91:06:c4:4a:13:44:23:ee:0f:b0:40:ef:20:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.106.0/23
                  142.202.204.0/24
                  207.2.116.0/22
                IPv6:
                  2606:9c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400214

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:de:59:3d:6d:c2:60:56:de:cb:cc:0d:76:a7:4b:54:d1:b9:
         ba:53:94:c7:65:7e:e6:d1:91:c4:bf:f4:65:40:c3:35:92:51:
         e0:b4:e9:c4:a6:e4:7f:ab:77:91:49:12:a1:4b:ad:42:e8:67:
         62:cb:09:45:44:70:be:71:bb:e5:d2:17:82:8f:cd:a4:1c:24:
         97:bd:fb:01:97:b2:12:c5:88:ac:10:66:ab:4c:06:64:15:37:
         31:1a:81:de:54:19:55:c6:6f:19:4b:06:b9:a1:77:88:ab:85:
         2c:80:c1:9d:48:15:70:55:e3:d4:58:71:a2:e6:d1:26:14:ba:
         bb:37:ae:be:3f:50:08:fe:93:06:f9:b3:c6:5a:f2:cf:27:72:
         9b:29:36:93:61:c2:31:76:d2:d3:b2:4a:ae:c4:36:9a:f4:89:
         a0:b8:d7:54:18:b5:3f:2f:2d:e6:32:55:1d:48:52:78:60:ab:
         2e:49:ee:a0:40:3f:45:3d:0f:ca:80:1c:65:0e:40:d4:5d:b5:
         03:fe:05:62:0d:8c:7e:e7:8e:5d:72:46:6a:fb:b7:a8:9e:c7:
         83:41:e3:6a:c3:96:9a:70:95:9e:45:df:72:80:6a:62:92:78:
         ea:12:9c:6c:90:ed:ff:eb:c3:f2:ee:c9:34:1d:f4:1c:de:f0:
         7c:e9:6d:74
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEyZX1Jw2SoOPXiogIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI2MDEyMTEzNDUyMloXDTI4MDQyNTEyNDUyMlowLzEtMCsGA1UEAxMk
ZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3ZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XCQ/j0cOWbB2RVqxThweEY/NjFDoxpmu2+1
gZe7qCP2LyQUYsPcs+FIX+yCTyEz2QMwnaqra/hKVSh2qMgUXHOQk7SX9JANYvi6
/YH2Zl1UJfC8mxAv8+9UpiaZRitnyN/zFyWtGAzl7rv69x8N1cu3tSnAfXibYLuW
1MHrGCzLppkKim2dgTGAQCbPGzNyHGm4kLXk7hHWr4ZQ5HwzOaNH/CUXGk7YF7KZ
zlAWroExwe8sV47WyAXHRayh4ZPmk4zmbNIgn0eJQ/Ug20n3CljY7xNT5fQrQDcP
WKdwWa+NiEsVOcI/SCbKpz+22487XpEGxEoTRCPuD7BA7yDnwQIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFBqknBiDeor2m8ko3zNEMPLdcQ6cMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l
Mjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2UyODZmZDI4LTA5MzktNDhiOS04
NmJhLWNiZTc5MTQ5N2QxNS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0
OTdkMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAGIr2oDBACOyswDBALPAnQwDQQCAAIwBwMFACYG
nEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhtWMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACPeWT1twmBW
3svMDXanS1TRubpTlMdlfubRkcS/9GVAwzWSUeC06cSm5H+rd5FJEqFLrULoZ2LL
CUVEcL5xu+XSF4KPzaQcJJe9+wGXshLFiKwQZqtMBmQVNzEagd5UGVXGbxlLBrmh
d4irhSyAwZ1IFXBV49RYcaLm0SYUurs3rr4/UAj+kwb5s8Za8s8ncpspNpNhwjF2
0tOySq7ENpr0iaC411QYtT8vLeYyVR1IUnhgqy5J7qBAP0U9D8qAHGUOQNRdtQP+
BWINjH7njl1yRmr7t6iex4NB42rDlppwlZ5F33KAamKSeOoSnGyQ7f/rw/LuyTQd
9Bze8HzpbXQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:43 2026 by rpki-client