This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
File:                     159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer (raw, json)
Hash identifier:          IzKaJxxStYrWxPZLNqC3ji/tpG4udzp1MZC4/09uX6s=
Subject key identifier:   E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584BF1DE4833D5E7B80E69672780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 22 Nov 2025 13:45:23 +0000
Certificate not after:    Fri 25 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 6456
                          IP: 208.90.168.0/22
                          IP: 2620:0:cf0::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:de:48:33:d5:e7:b8:0e:69:67:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 22 13:45:23 2025 GMT
            Not After : Feb 25 13:45:23 2028 GMT
        Subject: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:37:cd:b4:45:a0:f3:b0:45:7a:9b:8e:05:
                    58:6d:05:89:50:dd:3a:fb:82:e7:3e:a8:73:c2:e4:
                    82:a4:c0:b5:b3:a8:76:17:91:e6:d3:19:86:0f:b0:
                    55:2b:8a:fd:2e:6b:e1:2f:d1:18:d4:96:21:dc:4d:
                    6f:5f:bb:cc:4e:95:e6:18:1e:a7:86:9b:32:e3:71:
                    cf:e1:08:f6:10:03:fa:d5:01:25:c2:ef:15:b0:18:
                    3c:3f:31:79:93:7d:f9:7a:50:c2:a9:34:d9:4f:da:
                    01:a0:0d:11:a9:b3:56:3f:c3:75:47:97:21:f4:f1:
                    4b:1c:ba:5f:9e:30:cc:5c:27:e0:bd:74:10:07:3c:
                    78:3d:6d:f9:86:d5:d9:09:13:b9:f0:54:f0:37:c7:
                    9d:e4:a5:83:7e:17:ab:ba:39:4c:66:d8:44:a3:d4:
                    b2:28:4b:ed:ea:7f:fd:5e:52:a2:1c:61:22:20:13:
                    72:1c:5a:e1:db:60:48:64:c2:2d:9a:5a:e8:aa:a8:
                    70:1b:ce:e6:96:87:0a:90:d1:cf:ed:b1:c8:93:69:
                    af:54:65:65:e3:8f:1a:3e:f6:af:30:74:d3:da:3c:
                    1c:62:30:2c:d2:85:68:55:08:fa:86:e9:ab:02:6c:
                    d9:d6:2e:88:7e:8a:e3:01:b3:25:b2:d9:2b:85:5b:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6456

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:58:84:af:e5:ae:3c:27:39:45:74:5c:17:c3:45:d2:9e:1a:
         ac:33:67:13:cd:84:1a:bf:c2:2b:f4:66:f8:a2:5f:b6:58:1e:
         58:98:ec:cd:be:a4:df:12:f0:d4:47:d4:4a:3c:84:f2:8f:47:
         1b:46:0d:91:b9:26:ce:3c:94:e5:f4:26:6c:60:d7:1f:22:fa:
         63:f2:66:f6:39:b0:ef:3c:89:e4:a3:db:55:f6:d5:e6:2d:dc:
         c6:04:0e:20:6d:92:84:4a:8a:59:09:3e:5e:a0:be:33:4c:16:
         e9:9a:e4:62:73:d1:5c:87:91:b5:94:57:01:ec:40:f2:09:ca:
         de:21:2f:bd:ff:3c:f4:01:f0:e5:45:61:be:7b:2b:5d:c5:8c:
         ba:00:5f:dd:d0:2a:39:ff:7e:89:29:b4:89:b4:e6:3d:f5:af:
         91:73:4b:ea:ed:63:aa:e9:5f:f2:fd:a7:a5:fd:08:ca:f0:03:
         41:3f:d1:df:f0:0e:c3:a7:b6:49:08:fc:5c:f0:ad:cc:e8:7c:
         ea:62:30:c2:8d:25:c5:89:6a:bf:14:14:c8:e5:8a:88:99:0f:
         bc:06:0f:fd:d2:4e:00:9e:8b:c0:12:fa:0d:43:96:a2:70:88:
         f8:9c:01:42:df:cf:9c:5e:f8:b0:61:12:5b:50:25:da:fe:06:
         59:e0:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----