This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
File:                     0cb0d156-0906-405d-9cea-d599952bae65.cer (raw, json)
Hash identifier:          CZexloaQs8pkkGt2GI0zmoxXYuAlg6XPAZ829gXF3e8=
Subject key identifier:   61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C42D41E688806E2D99FA55500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Dec 2025 13:45:23 +0000
Certificate not after:    Sat 25 Mar 2028 12:45:23 +0000
Subordinate resources:    AS: 20303
                          IP: 23.149.160.0/24
                          IP: 66.252.192.0/21
                          IP: 104.238.252.0/22
                          IP: 144.208.110.0/23
                          IP: 192.86.122.0/24
                          IP: 204.9.16.0/21
                          IP: 204.57.16.0/20
                          IP: 2605:ed80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:d4:1e:68:88:06:e2:d9:9f:a5:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 21 13:45:23 2025 GMT
            Not After : Mar 25 12:45:23 2028 GMT
        Subject: CN=0cb0d156-0906-405d-9cea-d599952bae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:81:51:9d:5a:d0:de:d6:0c:87:f4:91:c5:
                    bf:18:d3:7a:d9:94:3a:50:2d:ed:a2:09:27:60:d2:
                    11:28:81:81:19:13:82:86:59:9c:37:40:40:6f:83:
                    ab:05:4d:d9:1e:d2:c2:37:7d:d2:2f:b5:4f:5a:82:
                    17:0b:52:4a:f1:e6:c8:76:6a:cb:2d:06:7b:7e:fc:
                    c6:c5:fe:f5:d2:af:38:a3:d9:cd:75:57:a6:47:d2:
                    da:c9:55:60:42:61:94:9f:e1:19:84:58:7a:68:eb:
                    bf:12:da:46:51:9c:31:b1:3f:67:d2:2d:2d:dc:af:
                    bb:63:06:ad:4f:d4:9e:93:bc:2b:16:03:32:cd:10:
                    0d:23:54:fa:d9:5e:86:d0:b3:34:a0:89:27:ea:21:
                    9e:80:fd:cc:75:7b:8c:af:30:35:9a:de:0a:b5:39:
                    ff:57:a9:f8:9d:3a:6d:9e:3e:17:3c:a7:b2:cb:5d:
                    0b:4f:53:c3:c6:eb:11:40:96:33:b4:89:b1:bf:05:
                    b1:f0:3e:cd:7f:62:d7:ee:94:1d:4e:b3:75:d4:76:
                    58:22:a0:dc:30:33:86:7e:3b:fe:01:f3:ee:22:07:
                    02:5c:0f:8f:51:9a:bf:47:4a:d3:1c:ae:2e:40:0a:
                    db:e8:0a:59:34:4b:1f:2d:91:b2:32:dc:e8:fe:c1:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.160.0/24
                  66.252.192.0/21
                  104.238.252.0/22
                  144.208.110.0/23
                  192.86.122.0/24
                  204.9.16.0/21
                  204.57.16.0/20
                IPv6:
                  2605:ed80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20303

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:14:17:04:05:fa:fa:c5:b1:96:1c:b9:13:82:53:61:db:22:
         b6:12:38:68:18:9d:db:8c:a7:5d:5e:a5:d1:41:7f:11:61:1b:
         41:59:83:c4:0d:6d:0b:25:ca:4d:9a:60:b7:6b:18:33:7b:80:
         8b:99:4a:37:49:a4:71:a0:43:30:65:4e:19:da:a9:e1:6d:cb:
         74:1e:86:6c:56:3a:55:9d:cb:4a:75:8a:99:11:5b:8a:ec:4c:
         57:05:09:a5:87:55:7f:0c:96:b6:4b:3e:86:9e:19:c9:c2:90:
         3f:3c:c1:60:7a:52:2d:9b:ec:2d:7d:24:ff:69:3b:05:0d:05:
         3d:17:95:c0:ba:e3:d6:7b:b3:74:29:fa:82:5f:cc:d7:9b:e8:
         8e:92:58:a3:84:43:18:01:31:48:9c:18:1e:e3:e0:7f:7f:77:
         25:c6:03:85:0e:36:07:e8:b0:9b:f0:3b:28:51:aa:6d:d6:49:
         27:6e:1a:0c:f7:08:98:e4:71:32:fb:61:bd:da:4f:5a:e3:1d:
         aa:2a:0d:5b:24:a6:fb:3d:4e:95:f7:f9:f9:35:45:73:c6:45:
         21:17:74:5a:ea:f1:69:2f:06:5c:56:47:80:88:4d:dd:67:85:
         13:6b:e8:95:be:3f:e0:45:f4:d3:2b:67:13:c4:f8:63:79:b5:
         47:5a:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 12:18:12 2026 by rpki-client