This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer
File:                     560f9b0f-2d95-4838-9074-cd56b1c21753.cer (raw, json)
Hash identifier:          1epuD/uEI7C3+XmJFcEfZ5F/DN5GOPyUN20/rH+gcJs=
Subject key identifier:   AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584C218BAAB3C241B6D9D4A5C700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Dec 2025 15:37:43 +0000
Certificate not after:    Mon 13 Mar 2028 14:37:43 +0000
Subordinate resources:    IP: 142.249.159.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:21:8b:aa:b3:c2:41:b6:d9:d4:a5:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec  9 15:37:43 2025 GMT
            Not After : Mar 13 14:37:43 2028 GMT
        Subject: CN=560f9b0f-2d95-4838-9074-cd56b1c21753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:9a:d6:0e:01:ad:fc:bd:b3:93:15:c8:fa:
                    9a:7d:8c:d2:90:63:11:e1:e5:15:e7:a1:38:bc:5f:
                    59:a6:65:18:4a:2e:bb:5e:cf:88:bc:51:b0:bf:85:
                    8c:7e:50:dc:69:78:af:a3:06:01:b7:4b:ba:fb:d9:
                    d5:8d:5d:90:d1:76:d3:73:12:eb:28:1b:83:5a:f2:
                    57:62:2b:1b:d9:5d:8c:7d:35:a5:4d:5a:4d:e3:5a:
                    15:68:c9:23:eb:6d:41:1f:47:2a:34:05:a8:44:f5:
                    82:d7:7d:89:ca:f1:75:81:91:3a:d2:d6:cc:2f:ca:
                    61:02:a5:9f:51:d5:67:9a:bf:36:09:f9:fd:ea:01:
                    59:1f:f8:47:8b:e5:51:fa:be:0c:b0:db:58:c2:8b:
                    6e:5d:aa:78:12:d8:17:51:0c:71:1f:41:d7:ad:22:
                    d6:c6:e5:20:a9:82:56:f8:cb:f8:17:9b:c3:54:48:
                    a9:47:82:d0:d4:f2:c4:87:aa:33:65:81:9b:68:e8:
                    44:1e:85:c7:79:fc:be:3e:ee:94:48:5a:41:9e:ca:
                    1a:3c:35:a3:d5:98:a4:82:30:12:0e:19:65:e9:a4:
                    92:f7:95:a5:be:db:34:30:5d:a3:d5:c6:35:c3:1b:
                    31:5c:f7:cf:e0:4b:3c:d6:91:aa:03:af:cb:79:54:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:51:7e:e9:a1:ef:11:96:4b:41:45:a3:89:f7:f1:e1:9c:90:
         3a:c3:55:d6:45:14:79:ad:fb:68:e6:e0:15:e5:97:0c:e8:57:
         7f:90:5d:76:19:06:f8:91:f5:76:e8:28:4d:e9:d0:a3:a3:28:
         3b:7e:d0:fc:19:9d:50:71:02:70:ed:61:7f:f9:f0:8a:43:a2:
         69:a3:87:3d:ae:6e:d4:97:5b:54:29:d7:0a:f7:71:63:bc:d2:
         eb:8d:56:d3:f1:1f:0f:ef:ea:76:c4:a9:11:ea:aa:8c:89:87:
         9b:0f:75:75:64:52:76:16:a2:30:56:75:ad:a8:ab:61:95:00:
         ea:d1:99:2b:b9:0d:5b:17:7c:25:9a:04:8e:6d:68:c7:5e:35:
         b7:70:a7:c0:e0:c3:91:c1:14:cc:b0:17:38:49:9c:bd:1e:4f:
         62:b6:14:85:9f:a2:35:56:96:73:c5:4f:6d:a0:01:d7:86:6b:
         be:3a:38:25:54:a9:db:50:ad:f5:61:4b:5c:af:12:80:ac:b6:
         99:98:da:5c:fb:46:1f:b4:b3:27:a1:af:38:47:9e:63:47:fc:
         54:f7:b3:4c:b2:9a:5a:b0:93:1f:b7:5c:2e:8f:6f:b6:88:9d:
         23:19:6e:72:cd:7d:80:c0:19:7c:e8:ea:a0:f5:d8:82:d0:2f:
         ca:45:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----