This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
File:                     65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer (raw, json)
Hash identifier:          TNSN1uQi+1PyoUzOUsYA4LY95RkTuxObvEbAAdN4jz8=
Subject key identifier:   9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584BE3E8DC4157DF4AD1E08EC900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Nov 2025 13:45:23 +0000
Certificate not after:    Sun 20 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 12059
                          IP: 216.223.128.0/19
                          IP: 2001:18f0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e3:e8:dc:41:57:df:4a:d1:e0:8e:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 17 13:45:23 2025 GMT
            Not After : Feb 20 13:45:23 2028 GMT
        Subject: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:a4:e4:be:95:a2:cb:ce:b3:90:31:21:59:
                    78:84:34:a1:86:32:41:47:1d:7e:d7:ba:bb:e2:be:
                    3b:2c:20:0e:29:cc:07:75:10:01:fc:29:a1:89:2a:
                    93:e3:cd:84:8f:02:bc:b8:1e:7d:3a:d9:df:66:68:
                    ea:c4:7e:da:cd:c8:14:67:39:11:9f:bb:0b:c5:24:
                    91:32:f0:be:8b:25:d9:e9:f4:0c:7f:b7:19:b1:5e:
                    f6:26:ce:a9:34:5f:f0:b1:56:6a:fa:0f:d8:d9:1f:
                    85:09:c6:f3:0b:8c:5e:49:c3:01:db:19:32:8f:58:
                    db:3c:14:e0:8c:ca:f3:90:e8:18:a2:a7:ef:2c:9c:
                    3a:ac:fb:3d:f0:ed:ff:b1:61:5e:bf:6d:85:64:2b:
                    7e:a6:06:e4:8f:75:96:70:77:9f:14:b9:15:af:22:
                    4a:d3:49:92:40:a6:54:5d:6c:f4:eb:57:f0:ef:df:
                    01:f3:44:7b:ba:3d:61:7f:7d:e5:f4:58:20:30:d9:
                    8d:74:b5:d5:5c:6b:2d:eb:40:2a:aa:7b:f6:a9:91:
                    d6:76:6f:a4:ce:ae:57:1f:b9:78:5a:a2:ae:51:32:
                    5f:f8:aa:82:bb:5b:64:a6:c0:e3:b7:ef:40:87:a3:
                    1c:ff:05:33:b4:94:7a:ad:84:49:d2:72:f7:c7:af:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.223.128.0/19
                IPv6:
                  2001:18f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12059

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:75:0f:5b:fa:61:48:11:9f:cb:42:58:23:04:b4:5c:71:
         4d:a6:37:aa:a5:d6:b0:e5:0d:56:46:a6:39:73:c2:7c:8b:cf:
         30:39:e6:f6:60:46:ae:95:b3:0a:56:d8:26:21:a2:19:dc:a4:
         17:24:97:8e:b3:aa:93:77:3a:06:b2:9f:97:02:52:2b:17:e8:
         ca:fc:73:2b:a1:04:ab:50:46:47:e6:57:d9:67:ca:7e:d4:6f:
         81:61:7a:80:a7:bd:b2:cb:70:19:5b:63:df:0a:6b:fe:51:a7:
         cd:f5:7b:95:ba:d6:aa:84:6d:0e:11:33:cb:83:18:50:51:f7:
         e3:8f:49:34:63:87:0b:0b:70:33:eb:40:8d:d1:f0:6c:2a:2e:
         d5:87:12:52:97:34:b2:70:2c:a3:1c:77:30:34:62:2f:d0:a3:
         0c:48:17:1d:71:3a:30:f5:71:da:14:71:fb:3a:8d:9f:a4:dc:
         cb:24:f6:db:0e:0d:65:e5:8c:d8:11:66:c5:94:5c:69:ff:72:
         cc:53:db:de:a4:41:57:b5:e1:4b:fe:bb:f0:d0:8a:a9:13:d6:
         8f:30:55:5f:2e:26:26:00:d9:66:cb:27:12:e8:79:16:0b:7b:
         6c:b6:d7:64:13:60:fd:e6:5c:be:e3:58:f7:d9:62:bf:18:73:
         f9:c0:09:46
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEvj6NxBV99K0eCOyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI1MTExNzEzNDUyM1oXDTI4MDIyMDEzNDUyM1owLzEtMCsGA1UEAxMk
NjVlMWM5NTQtNjdmYy00YjFjLTg1ZWEtOGYyYjI1N2ZkMzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiGk5L6VosvOs5AxIVl4hDShhjJBRx1+17q7
4r47LCAOKcwHdRAB/CmhiSqT482EjwK8uB59OtnfZmjqxH7azcgUZzkRn7sLxSSR
MvC+iyXZ6fQMf7cZsV72Js6pNF/wsVZq+g/Y2R+FCcbzC4xeScMB2xkyj1jbPBTg
jMrzkOgYoqfvLJw6rPs98O3/sWFev22FZCt+pgbkj3WWcHefFLkVryJK00mSQKZU
XWz061fw798B80R7uj1hf33l9FggMNmNdLXVXGst60Aqqnv2qZHWdm+kzq5XH7l4
WqKuUTJf+KqCu1tkpsDjt+9Ah6Mc/wUztJR6rYRJ0nL3x6+buQIDAQABo4IEKTCC
BCUwHQYDVR0OBBYEFJznP3sXmQHDtCui3czXLYAe+PTgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82
NWUxYzk1NC02N2ZjLTRiMWMtODVlYS04ZjJiMjU3ZmQzN2IvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY1ZTFjOTU0LTY3ZmMtNGIxYy04
NWVhLThmMmIyNTdmZDM3Yi82NWUxYzk1NC02N2ZjLTRiMWMtODVlYS04ZjJiMjU3
ZmQzN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAXY34AwDQQCAAIwBwMFACABGPAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICLxswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAp951D1v6YUgRn8tCWCMEtFxxTaY3
qqXWsOUNVkamOXPCfIvPMDnm9mBGrpWzClbYJiGiGdykFySXjrOqk3c6BrKflwJS
KxfoyvxzK6EEq1BGR+ZX2WfKftRvgWF6gKe9sstwGVtj3wpr/lGnzfV7lbrWqoRt
DhEzy4MYUFH3449JNGOHCwtwM+tAjdHwbCou1YcSUpc0snAsoxx3MDRiL9CjDEgX
HXE6MPVx2hRx+zqNn6TcyyT22w4NZeWM2BFmxZRcaf9yzFPb3qRBV7XhS/678NCK
qRPWjzBVXy4mJgDZZssnEuh5Fgt7bLbXZBNg/eZcvuNY99livxhz+cAJRg==
-----END CERTIFICATE-----