This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer
File:                     de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer (raw, json)
Hash identifier:          aqA3Z9Pb/scfB/q0RbFfYnSpyMIJixYeYjqMIVl7VFU=
Subject key identifier:   F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584CC8D4F27D424E901549409400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 07 Feb 2026 13:45:22 +0000
Certificate not after:    Fri 12 May 2028 12:45:22 +0000
Subordinate resources:    AS: 400564
                          IP: 23.134.136.0/24
                          IP: 207.174.20.0/24
                          IP: 2602:fb9f::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:d4:f2:7d:42:4e:90:15:49:40:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb  7 13:45:22 2026 GMT
            Not After : May 12 12:45:22 2028 GMT
        Subject: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:95:a0:af:58:b6:d4:5e:23:8d:5f:e7:82:
                    88:97:c6:83:e9:ef:9c:e0:f1:dd:0b:79:64:43:5f:
                    c1:a4:c3:f8:96:13:ff:71:aa:ea:6f:9b:08:ff:1a:
                    a7:96:c2:f7:1e:a1:cc:8f:73:ca:28:6b:c5:a5:bc:
                    bc:fc:d7:49:4e:1c:f3:2f:29:97:32:65:d9:82:e3:
                    e0:97:c5:5b:09:91:d2:b2:20:f9:60:b0:ac:8e:10:
                    a3:95:19:31:d7:61:42:99:8c:13:82:2c:82:c8:30:
                    56:01:55:7b:53:c6:e7:00:00:60:07:38:ed:f6:b2:
                    71:1d:6f:cd:0a:e4:4c:40:4c:77:dc:e7:52:8b:8e:
                    ee:9f:64:d8:01:6a:ab:26:70:02:06:4d:7a:d4:c8:
                    d6:cd:2d:0d:e4:4c:14:53:81:94:3b:8e:21:5a:ee:
                    a6:2c:0c:63:fb:1e:6a:15:5f:81:fc:8e:e1:ac:63:
                    ff:70:bc:15:f0:01:58:06:4c:fa:f6:43:26:c0:d8:
                    44:d9:78:e0:35:6d:57:a5:6f:61:ed:1b:3a:ee:ea:
                    51:ad:97:6f:d6:18:c4:c0:86:2f:61:32:6b:d4:ca:
                    31:5d:69:9f:11:d6:8b:6b:58:89:75:90:5b:f0:af:
                    e2:c2:a1:04:1d:cc:90:6c:a9:53:27:46:5f:0e:ca:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.136.0/24
                  207.174.20.0/24
                IPv6:
                  2602:fb9f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400564

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:26:b9:69:76:8d:14:e2:32:fa:ef:b0:e7:55:30:24:84:
         1b:f0:c3:5c:1f:15:58:6b:c4:b8:88:18:27:94:d0:cf:85:d4:
         2a:dd:01:24:5c:9b:fb:f9:42:12:83:db:a9:ce:77:df:cf:01:
         58:1c:a9:c1:60:68:22:27:73:3c:96:e2:d6:ba:80:af:ce:87:
         9d:df:c8:9c:4a:c7:ba:9d:ef:97:5b:5a:66:92:6d:01:1e:93:
         2b:cb:69:fe:b2:b8:ec:0c:f9:bc:8d:ea:53:57:39:89:f0:ef:
         10:09:29:82:7d:71:43:6b:8a:60:95:f3:5a:3d:28:09:ec:9b:
         2c:41:e6:74:48:76:f6:e7:6e:99:ab:fb:de:52:0e:cb:86:e8:
         72:90:ea:db:43:e0:13:c4:b6:7f:dc:65:3c:9c:53:4e:0c:9c:
         dd:6d:aa:5a:58:fc:32:6d:8d:5e:ce:97:4d:b7:7a:34:fa:6f:
         d0:25:20:fd:c0:c5:97:a2:9c:b7:e8:14:0a:3e:ba:b9:6d:ec:
         1f:11:c8:76:33:69:39:c9:c4:27:bc:92:c6:97:a3:46:07:87:
         89:3f:25:12:92:56:ef:ab:a5:a0:98:c1:1c:73:85:84:89:87:
         dc:6b:94:31:36:dc:45:39:4f:7a:db:61:57:8c:9d:3b:74:dc:
         26:00:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 05:49:25 2026 by rpki-client