This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer
File:                     6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer (raw, json)
Hash identifier:          7CMJ4K3MfYtyIPNRZpFv5rpq1mZbFutN0Z8O9V+cKM8=
Subject key identifier:   7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584CBADF87CA094D6EA9E2E64A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 13:45:22 +0000
Certificate not after:    Sun 07 May 2028 12:45:22 +0000
Subordinate resources:    AS: 15081
                          AS: 400515
                          AS: 400521
                          AS: 400796
                          IP: 64.52.192.0/18
                          IP: 96.43.192.0/19
                          IP: 167.224.16.0/20
                          IP: 168.75.176.0/20
                          IP: 198.101.48.0/20
                          IP: 207.174.115.0/24
                          IP: 2602:fb9a::/32
                          IP: 2605:1480::/32
                          IP: 2606:c040::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:df:87:ca:09:4d:6e:a9:e2:e6:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb  2 13:45:22 2026 GMT
            Not After : May  7 12:45:22 2028 GMT
        Subject: CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:b3:8a:a6:7d:76:29:df:e1:ac:53:dc:08:
                    05:c7:a0:be:4e:01:90:c0:b4:f8:39:19:26:3c:26:
                    d3:e5:36:55:ca:fe:c4:dd:e4:47:9e:ec:ff:80:94:
                    26:ad:b7:0d:79:bc:31:89:0a:dd:1f:b2:a9:b9:c2:
                    d6:a5:1f:a2:d1:8e:c6:76:53:ef:02:9f:e6:7e:62:
                    a4:39:d5:89:33:7b:94:1d:88:55:67:45:2b:bb:ad:
                    8f:45:2e:88:65:e8:9d:1b:85:de:c4:1c:b8:3b:c8:
                    6b:08:7a:7a:39:e8:17:ee:59:fa:bc:01:4f:1d:b0:
                    ee:10:16:8d:27:1f:86:45:c9:a3:1f:b7:db:07:27:
                    62:3c:48:f7:19:35:a5:82:15:3b:71:e7:b1:10:cc:
                    50:69:d9:27:46:54:62:a0:00:0e:92:7d:3b:e7:a2:
                    b1:5f:95:44:91:6f:ae:64:ca:c4:1d:95:5a:18:77:
                    aa:90:53:20:42:5c:71:dd:b9:34:73:2f:a3:49:17:
                    34:e6:c5:3d:f0:c8:97:e3:63:4b:0d:56:c6:27:c7:
                    ec:89:5d:97:3b:bd:85:cf:a0:95:09:95:5f:ef:54:
                    80:bf:94:31:66:4b:4b:9b:35:65:72:7b:6d:65:3b:
                    2d:8a:62:e1:08:dd:23:b5:f6:f6:02:fc:64:d4:d4:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.192.0/18
                  96.43.192.0/19
                  167.224.16.0/20
                  168.75.176.0/20
                  198.101.48.0/20
                  207.174.115.0/24
                IPv6:
                  2602:fb9a::/32
                  2605:1480::/32
                  2606:c040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15081
                  400515
                  400521
                  400796

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:fa:3f:5c:86:18:f3:46:41:c7:08:b4:76:54:43:a8:d9:
         d0:bd:b0:1e:ce:49:d0:c7:41:96:31:fe:41:fa:f7:74:32:f7:
         b5:50:07:9c:84:e2:a3:64:90:58:e8:d7:5e:f2:8a:2a:d7:99:
         d3:b2:c9:60:22:b0:4d:b6:90:ad:31:c8:b9:e4:6d:84:0d:eb:
         be:78:08:39:d9:00:08:4d:07:53:e3:f6:96:79:db:cc:1b:5b:
         7f:e9:8c:cd:24:2e:5f:92:6c:df:c6:09:37:4a:d0:f7:5c:62:
         be:b0:19:18:cc:a9:b2:51:46:d9:33:80:d1:c0:04:1a:9f:96:
         81:6f:7f:f9:0c:44:df:fa:9a:a7:38:a0:8d:e9:27:b2:97:0b:
         df:e1:09:27:3d:1c:d2:5a:24:28:68:0f:82:50:11:50:ec:66:
         79:d4:25:02:64:59:56:a4:f5:7a:cb:5b:64:59:2b:df:79:33:
         c7:b1:b8:09:d6:9a:39:fb:94:18:65:16:ad:65:ed:ab:3b:b2:
         eb:f1:7b:62:83:e4:24:75:e9:d7:41:eb:20:ba:3d:b8:4d:78:
         aa:9c:76:6c:fd:1b:3c:1e:9d:39:d8:ce:c0:8d:cc:53:91:22:
         bb:ee:d3:71:2c:67:8a:1f:bf:4b:1f:ac:b6:f8:6b:ee:57:c4:
         18:35:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 05:47:46 2026 by rpki-client