This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
File:                     c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer (raw, json)
Hash identifier:          LSf1GdxgS5xSRbYM5AP72n7vsp2gyu1i1xf678D6LFA=
Subject key identifier:   2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584BD62C012FFD528FFFDDDCE500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 15:39:21 +0000
Certificate not after:    Thu 03 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 1958
                          IP: 131.222.0.0/16
                          IP: 132.242.0.0/15
                          IP: 135.106.0.0/16
                          IP: 135.126.0.0 -- 135.128.255.255
                          IP: 135.132.0.0/16
                          IP: 135.136.0.0/15
                          IP: 149.25.0.0 -- 149.26.255.255
                          IP: 153.51.192.0 -- 153.61.255.255
                          IP: 153.63.0.0/16
                          IP: 153.66.0.0 -- 153.87.255.255
                          IP: 192.127.0.0/16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:2c:01:2f:fd:52:8f:ff:dd:dc:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 12 15:39:21 2025 GMT
            Not After : Jun  3 00:45:33 2027 GMT
        Subject: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:14:2c:ef:5c:eb:fc:65:7a:da:b6:13:41:
                    91:ce:0e:12:c9:42:dc:76:0c:eb:98:62:f1:38:84:
                    3a:5c:a7:6a:28:51:08:03:9e:14:ef:05:4f:42:ff:
                    80:4e:13:11:bf:c2:cc:a4:9b:0a:c3:dc:0b:58:73:
                    86:af:63:d1:b3:bf:9a:12:1d:b0:50:1a:2c:ed:45:
                    54:1e:4c:09:81:4e:a9:72:2f:ad:11:97:e2:04:88:
                    14:25:18:9e:0d:98:71:71:c4:5c:d5:ca:05:70:0d:
                    95:3f:05:5a:a3:2b:1c:65:c2:de:9c:14:a1:84:2b:
                    37:13:8f:a7:b4:36:f4:cf:e8:10:20:45:d4:f2:62:
                    ba:76:48:c5:c0:b9:5f:35:00:5b:e9:c8:62:11:eb:
                    c5:97:f2:5b:e8:51:3e:73:2e:43:ed:1a:11:d6:71:
                    30:31:98:68:18:fc:38:8e:e3:1c:6b:97:c6:5f:bc:
                    ed:4f:2d:c3:b2:e4:b3:1c:f5:7e:79:ba:74:45:eb:
                    db:1f:53:7e:14:9c:a1:4d:b1:01:cd:53:3a:7a:7c:
                    2d:e5:45:b3:81:73:7a:b1:c3:66:f8:f1:ca:6d:2d:
                    6f:2a:a1:9b:a2:d3:77:a6:3a:5e:8c:90:a0:8d:53:
                    8c:a3:a1:f4:72:a2:07:b3:fe:fb:8f:09:43:84:90:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.222.0.0/16
                  132.242.0.0/15
                  135.106.0.0/16
                  135.126.0.0-135.128.255.255
                  135.132.0.0/16
                  135.136.0.0/15
                  149.25.0.0-149.26.255.255
                  153.51.192.0-153.61.255.255
                  153.63.0.0/16
                  153.66.0.0-153.87.255.255
                  192.127.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1958

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:39:14:10:87:f3:a2:4b:d6:52:c7:c6:14:72:c3:0e:b2:2e:
         b0:62:9c:7a:2b:42:0c:9d:5b:fb:2f:b8:e0:d5:95:fe:50:f5:
         0a:e7:5b:f2:ae:54:9c:e4:86:63:f9:b1:28:bf:62:5f:db:e0:
         92:ea:a9:88:02:d7:b0:c9:c1:da:40:d4:ff:74:24:6a:18:4c:
         b2:5c:64:c3:8d:c8:47:16:54:50:74:d6:68:3f:f8:bc:bc:a4:
         df:af:46:6f:06:21:16:9c:3e:1a:4c:aa:4a:a7:e7:c0:8d:2b:
         8f:97:fa:fd:93:19:80:67:22:c3:79:25:50:6d:cc:57:58:39:
         b3:4c:a9:31:8f:51:9f:64:cb:36:0e:91:86:ac:ba:28:fb:d2:
         67:22:82:b1:67:4e:1c:a4:d3:50:94:ad:af:c7:87:ae:6d:1f:
         cd:26:99:7d:62:47:22:1c:48:8a:80:75:be:a4:01:e1:29:fe:
         61:a7:45:da:d4:e2:1c:43:4d:c4:bd:09:93:22:bd:01:27:b6:
         61:1c:6a:06:73:65:7b:73:aa:00:50:d6:52:bd:a5:32:3d:ef:
         91:ea:30:d1:85:4c:0c:12:2b:2f:77:28:42:06:58:0f:ce:69:
         4e:2d:1d:6e:5c:5e:61:0b:f0:aa:72:3a:ac:f0:ee:83:ac:11:
         a3:ba:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 15:08:29 2025 by rpki-client