This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer
File:                     1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer (raw, json)
Hash identifier:          H61grOD1E/2fcRktonfCnsDgeTW0PqSc3efvim6WqLw=
Subject key identifier:   B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C5BF447E541F627B8DFBBC7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Dec 2025 13:45:23 +0000
Certificate not after:    Mon 03 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 567
                          AS: 11162
                          AS: 16408
                          AS: 16499
                          IP: 192.124.99.0 -- 192.124.100.255
                          IP: 2001:1878::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5b:f4:47:e5:41:f6:27:b8:df:bb:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 30 13:45:23 2025 GMT
            Not After : Apr  3 12:45:23 2028 GMT
        Subject: CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:31:c5:21:58:d6:ac:66:ef:86:eb:fe:c1:
                    36:b5:e7:be:de:51:fa:43:6e:a6:7a:09:91:7a:ae:
                    9c:77:a1:e4:38:c0:c3:3e:91:65:7f:12:88:29:f7:
                    c1:8b:f9:28:71:5a:5b:f4:83:aa:09:28:5e:05:40:
                    6d:8b:f3:5f:0a:70:93:a4:c0:9f:de:74:b6:d2:f1:
                    a2:7a:87:d8:a5:98:e6:58:8e:c5:77:3d:64:2f:e3:
                    ea:80:06:3e:6d:48:7c:e1:9a:88:da:6d:38:a8:37:
                    0c:f9:fe:9c:93:55:54:79:c9:05:fc:b3:65:b9:89:
                    1c:c9:7d:49:91:ea:02:e3:a3:27:37:f7:a9:a0:4f:
                    b5:33:a3:45:24:f0:71:8b:cc:55:d3:40:80:2a:6c:
                    24:46:b0:78:af:91:4d:45:d8:f3:57:d2:32:41:37:
                    5b:45:be:6b:b6:63:05:69:65:6e:2d:ed:c4:c7:45:
                    6f:4e:02:c9:54:27:f3:e9:03:d0:ca:cc:d6:3d:e5:
                    da:6d:03:66:1b:ad:db:d4:d3:10:64:d1:9e:24:1d:
                    f5:62:cd:f4:5f:ef:7a:0b:9d:9b:57:2e:80:41:94:
                    52:d3:68:30:ed:5a:10:73:17:4e:20:cb:9b:e2:b4:
                    a7:d0:2d:17:e9:af:f1:85:d6:95:d6:5f:49:de:3d:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.99.0-192.124.100.255
                IPv6:
                  2001:1878::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  567
                  11162
                  16408
                  16499

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:d5:3f:1b:23:7d:96:b2:ef:de:a9:f8:57:92:a6:c4:07:
         55:64:d4:5b:07:85:47:60:0b:05:b8:3c:1e:07:a8:c4:d5:f6:
         ed:ff:5f:99:fd:91:62:66:2e:7e:50:54:14:9b:31:5a:89:e2:
         4b:9a:24:34:e7:a9:c2:53:f2:c9:61:e3:8a:e2:a3:4b:6b:4a:
         e6:1e:1e:d8:be:75:df:69:da:1a:e8:2b:6c:fe:93:5f:b5:10:
         87:1a:99:39:02:b8:38:50:5e:61:36:bb:ed:a9:21:85:b7:9f:
         a8:c9:8e:8b:d7:34:6e:f7:a4:30:3a:e7:f4:d5:f9:13:68:68:
         e6:53:bd:94:62:ad:8c:b3:c9:d2:6c:b6:b7:22:0e:28:dd:cb:
         53:e4:54:7d:25:03:a7:b5:1c:1b:e9:4b:97:9b:20:05:6f:8c:
         50:7f:05:38:78:fe:aa:3b:b3:d9:cc:f8:9f:36:f7:10:0f:17:
         2f:1e:f6:da:56:4a:88:6e:24:cc:fd:9e:7f:2f:46:ef:4d:74:
         63:b5:cd:03:30:fb:db:35:17:91:29:19:6b:45:b4:95:67:cc:
         c7:79:29:1f:40:02:28:18:61:40:db:bc:9a:5f:66:9f:e6:5b:
         d0:27:be:07:9e:1e:7a:ea:bf:f4:80:05:86:2f:d3:95:d6:91:
         2c:6a:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 01:25:10 2026 by rpki-client