This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer
File:                     2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer (raw, json)
Hash identifier:          h2sYcoJIazu1trLQC3OTPCLWUJZG6Bpr6jDq7bdCKy8=
Subject key identifier:   D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584C29B3F698077A904B26B28900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Dec 2025 13:45:23 +0000
Certificate not after:    Thu 16 Mar 2028 12:45:23 +0000
Subordinate resources:    AS: 400245
                          IP: 165.140.124.0/22
                          IP: 2602:fb7d::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:29:b3:f6:98:07:7a:90:4b:26:b2:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 12 13:45:23 2025 GMT
            Not After : Mar 16 12:45:23 2028 GMT
        Subject: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:c6:98:9f:02:dc:11:67:1f:89:83:52:5f:
                    c9:78:68:61:13:58:81:cb:0e:54:b7:b3:06:c1:e6:
                    3d:fd:ce:bd:7e:b7:69:c9:59:01:0e:b0:0e:a1:94:
                    82:23:52:a1:ce:fb:d9:34:76:88:88:24:6e:54:cf:
                    6e:54:41:b6:1c:6c:25:fa:06:03:97:61:a3:eb:81:
                    f9:92:b8:bb:a1:82:69:3d:ab:58:ca:fe:82:ac:21:
                    7e:bb:44:c4:f8:b2:5a:a8:b0:84:ae:98:f6:32:aa:
                    06:17:69:b9:a6:43:7e:6d:41:cb:d9:0e:fb:eb:01:
                    d7:70:79:57:99:44:6b:bd:aa:6a:17:96:59:16:aa:
                    5e:42:84:60:7a:9b:9d:45:50:77:d0:e6:62:af:a6:
                    df:d7:7b:1d:b5:ba:f2:4b:45:7e:9c:4c:ce:39:4f:
                    48:6a:e8:82:05:c4:f3:8c:6d:ec:0f:08:30:5d:34:
                    dd:58:0a:09:02:53:84:9a:75:1a:c8:cd:df:ea:4f:
                    42:59:80:a4:73:07:4f:90:3f:3b:98:51:3d:84:fc:
                    7a:82:ac:6e:cd:37:2a:a8:c5:c0:b9:cb:9a:7d:90:
                    c9:ee:e0:72:8b:05:e1:21:f9:bb:c9:c1:a4:26:87:
                    cf:31:bd:ed:88:cc:a0:db:33:ca:69:27:92:a4:d3:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.124.0/22
                IPv6:
                  2602:fb7d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400245

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b3:33:d0:89:45:e1:0b:7a:03:ea:fb:be:06:ea:04:2f:4b:
         78:65:7a:4d:a9:5d:44:98:20:5a:95:5e:f5:c3:86:6d:88:19:
         6f:7e:8d:bb:c3:ca:fc:6d:a4:71:e3:3a:ff:96:31:46:e8:43:
         dc:02:30:9c:c3:80:91:b0:0e:98:23:e5:81:57:e3:d6:da:49:
         99:a9:a5:68:de:8e:2a:27:92:84:bc:ba:98:e6:9b:d7:2b:dc:
         60:6b:8d:e5:f3:f5:04:18:30:75:58:cd:60:45:34:40:b0:06:
         c2:ad:f3:2d:26:b8:d1:62:e0:6b:bc:2e:7f:2d:c0:5f:59:b7:
         9f:f3:72:dc:f9:8d:8d:da:86:df:15:bf:4a:a7:2b:3c:4f:0b:
         57:f9:fe:b9:f5:bb:40:6b:89:57:61:48:f3:ce:3b:1f:6d:60:
         56:e9:97:45:c2:74:1b:7f:3c:f0:42:94:7f:d6:fe:2e:14:6d:
         63:94:e4:77:4e:19:ae:94:c3:86:b9:25:c6:1e:83:59:33:69:
         f6:18:75:9e:84:7d:05:c1:09:f1:ae:ce:69:e4:b2:21:6b:ad:
         fe:41:e8:17:ad:db:1c:8d:62:96:a2:4f:39:e0:6d:fc:52:ac:
         3f:bb:e4:08:f5:c9:09:ef:8c:15:4b:a7:07:ff:51:c6:3c:55:
         a7:7e:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----