This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer
File:                     7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer (raw, json)
Hash identifier:          24bYjaepLNnGb9B4kYJ1tZwGuPwOjPXkvEggY/fvK/E=
Subject key identifier:   BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584BC268A7033924AAC41688A0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Nov 2025 13:45:23 +0000
Certificate not after:    Tue 08 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 11754
                          AS: 16841
                          IP: 199.48.96.0/22
                          IP: 199.66.224.0/22
                          IP: 199.167.236.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:68:a7:03:39:24:aa:c4:16:88:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov  5 13:45:23 2025 GMT
            Not After : Feb  8 13:45:23 2028 GMT
        Subject: CN=7befaca5-f1e5-400b-a1f2-8c6e82630b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:75:48:4c:94:60:1c:9f:44:b4:14:03:85:10:
                    5e:83:8a:d2:41:cb:9f:24:ef:2f:30:e7:af:14:62:
                    c5:1c:0c:dc:34:c1:8e:1d:ab:73:90:3a:eb:d4:f6:
                    d6:96:3c:4a:7a:16:32:1c:4a:c8:dc:f2:4e:af:0e:
                    ac:49:f1:c7:54:5f:f2:70:8c:32:8d:f9:90:14:6d:
                    e8:f0:3e:3b:ac:1e:2d:d8:9c:93:7c:3b:5f:b3:6a:
                    8e:1b:6f:6d:b8:df:f5:34:1d:6a:30:fd:ab:0a:be:
                    1c:d8:b7:e9:0c:f0:5e:6f:06:9d:b2:2e:64:f8:42:
                    19:0c:4f:da:d6:1c:1b:9a:d9:56:54:bf:19:a0:c9:
                    ea:29:66:fb:29:f3:bc:e3:cc:dc:00:d9:53:f4:64:
                    be:35:9a:c1:0a:04:59:3b:64:dc:65:47:9d:4b:21:
                    56:00:10:13:4e:e4:b9:1c:fb:88:20:37:3e:70:76:
                    aa:c9:7a:0d:a4:16:5a:e9:99:c0:d2:f7:41:fc:ff:
                    12:ea:38:4a:ed:08:d2:49:08:61:c9:9c:6e:9e:47:
                    a5:93:69:22:57:41:c3:5e:9f:d5:76:39:19:9d:ca:
                    7f:31:f6:36:2a:8a:b7:a3:4a:f5:51:60:60:6c:c2:
                    15:66:b0:22:60:46:40:aa:95:7c:8b:03:5a:34:84:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.96.0/22
                  199.66.224.0/22
                  199.167.236.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11754
                  16841

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:af:96:77:f8:76:96:de:df:90:f6:12:d7:f9:01:01:ba:
         ea:a8:9f:53:a7:de:b6:d0:74:34:73:b5:e7:f9:c3:6e:db:89:
         1d:8a:92:5b:ef:9a:5e:2e:ff:e8:ca:29:5b:f2:50:ac:91:7f:
         e7:0a:39:72:75:53:ee:05:09:61:13:7b:29:b4:7c:88:c3:57:
         77:ac:37:d3:90:a6:6f:ff:3e:c2:cc:4d:86:cd:23:ca:4d:64:
         ec:cc:98:35:9d:65:3a:29:df:0a:79:0a:34:0b:33:78:3f:1c:
         50:04:c7:f4:06:94:c0:3a:52:c8:b9:48:c2:32:5e:fe:ff:12:
         ee:cc:d3:d1:51:75:8e:73:77:fd:f9:4f:79:e3:b5:38:ac:ce:
         f5:de:ac:75:d1:5f:bf:e5:32:76:f2:78:d1:a5:13:87:6a:0f:
         65:8f:a4:cf:53:dd:a9:99:66:da:01:e1:de:c8:ba:41:9f:3c:
         40:34:c6:41:a1:37:27:48:4d:57:c4:45:4d:7a:f9:60:80:87:
         45:85:f4:6f:a7:3f:1d:c3:c9:5e:54:f6:d0:36:f9:6c:d4:28:
         d2:04:40:ee:eb:17:84:b2:2a:87:23:bf:58:fe:79:7b:46:5a:
         08:0f:35:d0:f4:03:86:08:54:c0:48:c1:aa:d7:d4:36:1a:9f:
         92:74:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 23:09:22 2025 by rpki-client