This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
File:                     311f19cc-344e-48c5-a1f1-47593aa56b0d.cer (raw, json)
Hash identifier:          I+KE9+FNmQr8LZg/ImB2au2UWxepeF6/zhv0t3IR1cs=
Subject key identifier:   4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584C34DEB4C2BED1BB12E5AAA580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Dec 2025 13:45:23 +0000
Certificate not after:    Mon 20 Mar 2028 12:45:23 +0000
Subordinate resources:    AS: 54225
                          AS: 397853
                          IP: 216.21.216.0/21
                          IP: 2604:ebc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:34:de:b4:c2:be:d1:bb:12:e5:aa:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 16 13:45:23 2025 GMT
            Not After : Mar 20 12:45:23 2028 GMT
        Subject: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:df:03:d2:b7:ac:cd:fb:e9:b4:47:3a:34:
                    50:8c:2a:6a:8e:a9:87:4f:63:a3:e9:6b:fd:26:64:
                    0f:f2:df:18:3a:51:a7:1d:70:ca:d5:97:29:3c:87:
                    db:31:2d:3f:cd:65:7c:b0:b0:23:dd:3e:97:9e:96:
                    e1:2f:fa:41:da:4b:3f:76:be:d9:26:91:e2:b2:47:
                    aa:63:cb:1b:ce:ef:4b:a7:02:14:b8:13:70:e4:ec:
                    09:08:6b:fc:ea:a0:71:7e:e0:e3:bd:6f:23:27:6b:
                    12:10:39:06:f1:06:64:32:20:47:23:80:27:95:40:
                    2b:00:28:32:c6:4c:bb:2c:a5:4e:40:69:cf:57:7c:
                    74:54:31:b1:af:a4:6f:8c:0e:be:61:4c:46:14:eb:
                    d9:34:d1:18:83:2c:da:05:56:4b:71:d5:5a:e9:de:
                    87:3e:f2:36:ab:45:5f:13:de:e4:bc:a5:41:63:c1:
                    48:c0:25:47:30:d2:6e:02:1b:d1:ab:85:e1:ec:dc:
                    bf:c9:cc:06:a2:73:10:ef:d4:5a:77:84:a6:ae:a6:
                    21:14:66:2c:76:0a:19:c4:7a:35:41:c0:a2:d5:91:
                    cc:3a:08:07:0d:a3:4c:41:8f:1b:17:a3:63:5b:29:
                    6b:80:cd:19:fe:e8:c5:68:f0:de:ca:c6:18:92:24:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21
                IPv6:
                  2604:ebc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54225
                  397853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fb:ac:0c:38:43:92:a5:b5:fc:f8:d8:1f:5a:f9:3f:2e:f7:
         81:70:5b:87:c5:01:87:f4:19:1d:9e:3a:c3:f3:74:c9:76:3e:
         6d:7b:a0:92:6d:7f:2b:44:a5:61:36:26:bc:56:1f:97:ff:90:
         30:ba:95:79:15:73:be:dd:fc:65:21:76:af:8a:8c:a2:46:f6:
         4b:bb:76:ed:d0:21:37:ea:d3:28:c1:5d:f7:c0:f6:b0:75:0f:
         2a:3b:37:57:6a:ff:52:85:57:9a:9f:27:90:2e:51:d3:6a:c8:
         1f:4e:4d:ec:a0:f6:80:02:f5:67:08:93:79:14:99:3c:dc:b8:
         96:0c:55:6e:3e:e0:40:f3:31:5a:de:80:e4:c3:ee:c2:fd:9c:
         62:da:f2:3d:44:96:75:b2:d4:35:0e:5d:1a:87:07:83:5a:d3:
         97:19:b5:fb:16:a2:e5:a0:e1:d1:56:c3:bd:26:59:06:b9:63:
         03:8b:d1:55:30:d3:36:38:b6:45:1a:3b:39:de:63:ac:04:7d:
         3a:3c:c9:9f:09:51:4b:9e:47:ea:e3:b0:26:6e:af:5d:01:b5:
         1c:2e:35:50:a9:6a:f4:82:96:ed:b2:cb:2f:d2:cd:06:ef:86:
         04:b8:8c:8a:7f:52:58:5f:05:25:3b:d4:1a:97:8f:3f:70:31:
         21:6b:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----