This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer
File:                     650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer (raw, json)
Hash identifier:          lqsuosLAUY//Kth7znuCOJfBfS8PU0dw4Sj9rGBFya8=
Subject key identifier:   20:CB:1A:25:77:55:9B:9C:8A:AE:F4:F7:C6:AF:11:05:DB:5E:B1:B9
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584C49AA1D4E69FF4EC4E6454F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Dec 2025 00:31:24 +0000
Certificate not after:    Mon 27 Mar 2028 23:31:24 +0000
Subordinate resources:    AS: 400359
                          IP: 23.129.168.0/24
                          IP: 2620:a0:a000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:49:aa:1d:4e:69:ff:4e:c4:e6:45:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Dec 24 00:31:24 2025 GMT
            Not After : Mar 27 23:31:24 2028 GMT
        Subject: CN=650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:ea:17:e9:1a:a7:cc:23:73:a9:a2:e4:2c:
                    81:84:06:c7:93:c8:1f:48:12:1e:b3:82:32:9b:d9:
                    67:7e:2e:3d:33:f9:6b:d8:28:b3:6c:ab:15:d3:f1:
                    80:5f:94:79:90:40:48:d9:de:08:4b:8b:7f:0e:e2:
                    a0:4e:50:db:fe:4c:6a:b9:7b:14:4c:b0:48:11:bb:
                    b8:b9:d0:c2:39:d0:f9:de:e6:ea:55:04:42:86:98:
                    59:e3:89:d2:5f:45:df:c4:a9:06:1e:d4:d1:68:07:
                    40:0c:2a:30:8f:e9:52:d0:1a:ed:d7:46:72:2d:8b:
                    c6:7b:87:ef:55:58:fc:b7:8e:f0:7a:ac:55:de:87:
                    7c:fa:ab:d0:f5:78:e9:5f:c1:c9:20:81:4c:97:22:
                    fe:81:0e:4e:b7:fe:67:a5:f3:f3:c6:c0:e7:dc:8b:
                    9f:34:92:a5:70:10:68:a6:74:01:d8:ba:87:1a:89:
                    6e:21:69:4d:fb:80:af:52:9c:ef:b9:9a:bd:48:73:
                    87:d6:23:62:5a:d1:bd:07:c9:bf:c1:d5:5e:24:5a:
                    fd:09:21:40:7e:00:7a:6a:a9:a4:90:ff:d1:dc:d9:
                    a0:ce:90:09:7c:43:1c:f2:67:75:42:eb:b5:0a:2a:
                    e3:51:fc:10:7b:a6:f3:70:ee:2b:7b:09:33:81:50:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CB:1A:25:77:55:9B:9C:8A:AE:F4:F7:C6:AF:11:05:DB:5E:B1:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.168.0/24
                IPv6:
                  2620:a0:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400359

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:33:86:85:01:79:b6:52:73:a1:aa:42:5f:bf:cd:b1:5b:
         19:d3:ff:d9:85:64:83:68:a4:5e:d8:cc:b5:df:fc:e9:a6:c7:
         23:5d:d0:96:83:9a:d2:77:83:18:ca:b0:78:b5:09:80:b5:06:
         51:34:d6:b1:80:05:37:e8:52:63:bb:0f:3a:46:4c:cb:e7:f4:
         e3:c0:cb:d5:8e:c1:65:40:de:73:1d:84:04:11:54:43:29:d8:
         28:1f:37:b4:f6:e8:4e:3f:a0:63:af:14:c9:b8:e9:45:44:b6:
         25:be:26:8a:c4:5a:61:38:26:d9:46:a9:ce:fc:62:42:f1:49:
         0e:3a:37:87:82:42:ab:1d:82:48:75:d4:4c:16:c2:6c:e3:6d:
         35:22:00:77:e8:d5:01:98:f3:25:7d:56:a7:27:03:c1:30:89:
         02:f7:1c:d7:72:d4:5a:bf:2d:bd:67:ba:e9:f4:46:e7:4c:bf:
         36:87:eb:e0:d9:ec:8b:e5:c6:20:d1:21:34:95:39:ec:7c:53:
         e1:db:8f:e3:0f:7e:c8:22:aa:7a:e4:22:08:bf:e7:b3:b3:38:
         87:a5:7a:3a:da:5c:21:0d:7e:15:71:d1:96:2f:92:06:64:27:
         a7:ba:91:df:f5:da:5f:ab:15:ef:1f:96:6f:03:3a:08:06:aa:
         66:33:4f:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----