This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer
File:                     a8e92fcb-845a-4526-b1f5-8d456add74c4.cer (raw, json)
Hash identifier:          oDUhluknkYEm2iI3aqhuDhBQxQdJZhMluU+VrtRkxR8=
Subject key identifier:   F0:BA:EC:D0:86:48:1E:FC:C5:89:BA:7D:B9:55:A9:10:8E:D6:BF:C1
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584C37B83EC9D814D91719F2C8C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 14:15:20 +0000
Certificate not after:    Tue 12 Oct 2027 06:02:12 +0000
Subordinate resources:    AS: 394729
                          IP: 199.167.191.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:37:b8:3e:c9:d8:14:d9:17:19:f2:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Dec 17 14:15:20 2025 GMT
            Not After : Oct 12 06:02:12 2027 GMT
        Subject: CN=a8e92fcb-845a-4526-b1f5-8d456add74c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:6d:92:f4:5d:04:d0:30:ce:29:91:a9:b7:
                    ac:df:9a:80:9f:37:46:e2:78:40:fc:7d:82:c7:9c:
                    47:77:a4:ce:60:f6:46:17:c1:92:c6:8b:20:62:3f:
                    9f:b2:e3:24:63:b1:75:e4:2b:e7:e7:44:98:53:a1:
                    d5:9a:9c:d6:a7:85:21:75:1f:94:53:4a:68:3d:2e:
                    aa:97:c9:86:55:96:08:ae:4c:09:97:5a:d8:03:3b:
                    6c:d0:9a:d0:b1:c6:81:ba:e7:84:5b:1f:0b:cd:2e:
                    c5:16:59:6e:80:69:0c:0f:3a:ea:dc:f3:4c:c0:b0:
                    92:6d:87:69:3b:8b:29:ef:7a:f3:71:22:b8:6e:8f:
                    b9:46:73:30:fd:e6:19:0a:7f:75:07:2f:25:06:00:
                    c5:08:5e:60:b0:72:ae:e2:08:1e:05:86:ea:18:61:
                    a0:77:73:4c:18:c6:0f:48:b5:66:a4:8d:cf:1b:7d:
                    02:ef:ab:5e:0a:3e:fb:4a:e0:7e:d4:29:34:12:03:
                    f7:9a:8f:1e:3f:fb:d6:27:93:36:99:ce:18:dd:1c:
                    e3:42:2b:97:8d:dc:b3:f4:a9:cc:50:10:d6:66:6a:
                    be:6d:73:c0:6e:73:f2:94:52:f1:6e:73:5b:c2:14:
                    e3:12:c3:20:b9:a9:bc:4d:24:ad:b2:14:da:8e:50:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:EC:D0:86:48:1E:FC:C5:89:BA:7D:B9:55:A9:10:8E:D6:BF:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.191.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394729

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:2e:ed:99:bb:9b:04:79:c4:68:b6:74:62:ff:12:99:4c:
         75:49:ca:09:f5:82:2b:98:23:bf:db:ae:66:35:b7:1d:57:5b:
         7a:bd:0f:6a:d4:75:db:c1:39:fc:22:c1:1c:fc:40:11:d8:19:
         2f:84:b0:28:de:b7:5c:68:ab:88:57:f4:46:04:aa:ee:f1:72:
         44:4c:a2:ab:f0:31:99:eb:4a:b2:82:a8:f2:0f:b6:72:8e:c2:
         6b:56:8c:df:0f:d7:0e:6f:80:cc:46:d2:a5:9f:58:66:d1:ef:
         c3:7a:1d:d5:02:48:c1:0b:ad:14:b0:a1:97:fa:f7:e2:3a:f9:
         26:c8:94:bd:03:92:ae:18:90:a0:9d:b2:d8:00:3d:93:4a:5b:
         53:9f:f0:87:00:9e:d2:84:bb:d5:30:97:c3:99:b7:dd:8b:96:
         3b:cd:7f:46:d6:20:16:24:83:65:7c:89:f4:00:c7:09:6b:76:
         20:ac:2b:ef:12:35:32:c6:34:a4:9b:6d:81:18:ca:3e:fe:35:
         c7:86:91:58:53:77:e9:cb:dd:0b:99:35:a3:d7:a2:3d:b0:5d:
         a0:29:f2:77:73:d1:c9:66:bd:43:8b:ad:f1:a3:47:7d:f8:45:
         81:69:58:ae:21:c0:8c:02:64:d4:43:99:ca:e5:d2:3f:25:4b:
         e8:ba:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:39:34 2025 by rpki-client