This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
File:                     6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer (raw, json)
Hash identifier:          5seAQrhzVBqgcPyTnQzsQxStGSVqqPLfTpzZukHF+qQ=
Subject key identifier:   13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C4B6CB8B96B58B4B267686280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Dec 2025 15:39:19 +0000
Certificate not after:    Tue 12 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 393796
                          IP: 63.245.180.0/23
                          IP: 104.128.32.0/20
                          IP: 107.181.64.0/20
                          IP: 130.51.32.0/23
                          IP: 2604:7640::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4b:6c:b8:b9:6b:58:b4:b2:67:68:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 24 15:39:19 2025 GMT
            Not After : Jan 12 01:45:26 2027 GMT
        Subject: CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0a:39:b0:3c:a3:50:ba:5e:cf:a5:40:40:c0:
                    e6:16:38:0d:55:41:83:d0:69:10:e4:7b:25:b2:43:
                    e1:aa:04:3a:dd:f8:32:78:1c:0e:06:68:f2:74:46:
                    7a:8b:02:cc:7b:2e:53:f9:5e:86:66:d9:4d:e8:98:
                    4e:82:4e:b4:b5:b6:06:68:10:5d:15:9e:50:ee:69:
                    55:94:88:62:2f:07:d6:c8:b9:50:b2:36:fa:fc:40:
                    e8:5d:a4:bd:a7:04:01:2b:06:b7:fe:20:99:a8:5f:
                    5f:6d:66:6e:a7:87:73:45:6e:ab:63:66:3d:5a:6d:
                    59:fb:cd:1a:dd:cd:08:c4:5b:8d:8c:32:0c:19:10:
                    01:b3:d8:05:6e:cb:8d:88:a1:0a:c7:17:aa:d7:27:
                    84:f1:af:21:8c:21:94:ff:b6:22:75:fb:18:f9:3e:
                    8e:e4:4c:af:fa:e2:6b:66:9e:bd:ae:61:52:47:f5:
                    e6:6f:ad:6f:2d:c6:2e:b9:09:bc:d3:7b:6a:47:83:
                    4c:86:88:70:c1:7b:97:05:44:42:bc:8e:4f:f9:33:
                    76:4d:50:6c:16:cc:27:06:23:06:96:8b:bf:96:fb:
                    87:3f:38:2d:79:00:20:9c:34:07:e3:9e:18:7f:86:
                    ad:fb:97:3e:50:f6:8f:d9:e5:cd:52:ed:6c:af:00:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.180.0/23
                  104.128.32.0/20
                  107.181.64.0/20
                  130.51.32.0/23
                IPv6:
                  2604:7640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393796

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:a6:b6:93:96:0a:27:11:05:fd:25:ba:01:f9:9d:0b:69:
         e7:8b:b9:9d:3c:d2:4e:84:03:d3:af:e9:c4:e7:84:f6:a9:86:
         08:c1:48:6c:d6:de:36:8b:c8:81:f9:5b:20:fe:68:75:3e:ee:
         07:9b:05:e6:c6:36:6c:d0:da:2b:13:10:23:50:03:68:a9:9d:
         a6:9e:07:ee:ad:f1:3d:ea:16:ee:13:3f:43:d2:23:76:45:63:
         04:df:64:a7:d1:16:85:b1:8a:a7:bf:ea:0d:d7:c7:89:72:1e:
         94:5f:43:35:1a:65:7d:35:c8:9b:50:b6:df:5c:f8:8d:d3:6c:
         5f:46:48:dd:51:9d:ac:fd:00:3d:17:b0:aa:c6:d6:48:3e:48:
         6e:99:09:3a:7a:24:b8:bc:31:e0:76:f6:0d:8b:d8:7b:05:36:
         82:de:8d:60:bc:9f:af:59:0b:4f:22:0b:2b:31:d2:b9:1c:a3:
         98:cf:d2:34:bf:ef:e8:f3:c8:d4:00:eb:aa:41:db:55:ba:e1:
         0f:3b:c3:04:40:f6:7b:42:1f:a8:f2:fa:82:6a:49:49:b5:05:
         5c:f0:0f:6d:76:a6:00:a3:3e:28:c1:fa:08:5e:ae:e9:80:5c:
         67:49:fe:cc:a1:50:90:17:a0:7a:4d:79:8b:dc:23:5b:52:26:
         11:62:64:63
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWExLbLi5a1i0smdoYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI1MTIyNDE1MzkxOVoXDTI3MDExMjAxNDUyNlowLzEtMCsGA1UEAxMk
NmQ0Y2ViMzgtYzI3YS00ZWJkLTlhZDctYTZjZWNlODcwZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwo5sDyjULpez6VAQMDmFjgNVUGD0GkQ5Hsl
skPhqgQ63fgyeBwOBmjydEZ6iwLMey5T+V6GZtlN6JhOgk60tbYGaBBdFZ5Q7mlV
lIhiLwfWyLlQsjb6/EDoXaS9pwQBKwa3/iCZqF9fbWZup4dzRW6rY2Y9Wm1Z+80a
3c0IxFuNjDIMGRABs9gFbsuNiKEKxxeq1yeE8a8hjCGU/7YidfsY+T6O5Eyv+uJr
Zp69rmFSR/Xmb61vLcYuuQm803tqR4NMhohwwXuXBURCvI5P+TN2TVBsFswnBiMG
lou/lvuHPzgteQAgnDQH454Yf4at+5c+UPaP2eXNUu1srwA7jQIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFBOCfZSn/q3rYK2NFmuEYaSD3AKoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82
ZDRjZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNlY2U4NzBkM2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzZkNGNlYjM4LWMyN2EtNGViZC05
YWQ3LWE2Y2VjZTg3MGQzYy82ZDRjZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNlY2U4
NzBkM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAE/9bQDBARogCADBARrtUADBAGCMyAwDQQCAAIw
BwMFACYEdkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgJEMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFsh
praTlgonEQX9JboB+Z0LaeeLuZ080k6EA9Ov6cTnhPaphgjBSGzW3jaLyIH5WyD+
aHU+7gebBebGNmzQ2isTECNQA2ipnaaeB+6t8T3qFu4TP0PSI3ZFYwTfZKfRFoWx
iqe/6g3Xx4lyHpRfQzUaZX01yJtQtt9c+I3TbF9GSN1Rnaz9AD0XsKrG1kg+SG6Z
CTp6JLi8MeB29g2L2HsFNoLejWC8n69ZC08iCysx0rkco5jP0jS/7+jzyNQA66pB
21W64Q87wwRA9ntCH6jy+oJqSUm1BVzwD212pgCjPijB+gherumAXGdJ/syhUJAX
oHpNeYvcI1tSJhFiZGM=
-----END CERTIFICATE-----
Generated at Thu Jan 8 01:24:41 2026 by rpki-client