This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.cer
File:                     71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.cer (raw, json)
Hash identifier:          R9LhZjlraoC7iAtLS7qMPxtrsWYF15Zaz/2LDs/y0IM=
Subject key identifier:   FC:72:45:E6:31:BF:30:E5:AF:54:94:5A:DA:17:2A:0C:E7:D2:96:A5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C57C43F5EB4C9BED01B07F380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Dec 2025 01:45:23 +0000
Certificate not after:    Sun 02 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 399894
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:57:c4:3f:5e:b4:c9:be:d0:1b:07:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 29 01:45:23 2025 GMT
            Not After : Apr  2 00:45:23 2028 GMT
        Subject: CN=71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:70:03:1a:a6:3e:2a:f4:b2:6c:cf:1d:0d:
                    a9:e4:f8:d8:1f:92:58:a8:0c:d2:2b:f7:db:68:91:
                    4c:73:0d:56:72:26:a0:53:3a:6e:36:03:15:bf:7b:
                    42:73:f9:7b:82:2c:f8:08:f0:45:e8:77:0e:27:43:
                    36:28:7f:a6:45:33:1e:c3:e6:0b:32:d2:09:1f:61:
                    12:fb:c4:3f:97:4f:3b:c2:96:b5:62:c4:b1:a1:83:
                    89:34:a9:29:9b:ff:c0:97:51:ef:9e:a8:c2:69:e9:
                    1b:8e:d2:06:01:5f:ef:63:60:06:2f:0c:3f:68:1b:
                    53:f6:bc:d6:fb:b2:43:80:c8:83:b7:1d:4b:91:0c:
                    57:82:2f:9e:10:9f:ac:6c:d9:f5:dd:38:65:5b:df:
                    77:22:39:03:17:75:bd:b0:a2:c5:4f:11:37:df:85:
                    38:ac:0c:03:2c:bc:d1:f0:40:aa:9a:44:ce:a7:d8:
                    62:0b:39:83:2b:30:07:7f:ae:72:d8:74:b1:74:4c:
                    a3:08:03:52:d9:bf:22:d0:37:01:75:a6:63:20:65:
                    b9:5d:94:d9:0a:4e:9a:66:83:59:3f:1e:f3:cd:51:
                    07:46:e6:f0:12:a7:4e:93:eb:9d:4f:52:83:3f:be:
                    76:93:66:0a:aa:c5:18:e8:00:cc:50:71:57:3a:45:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:45:E6:31:BF:30:E5:AF:54:94:5A:DA:17:2A:0C:E7:D2:96:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e/71a845b9-2d0c-4c44-a4bf-42dc4d7fe53e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399894

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:5d:89:c8:69:5e:7e:ad:91:09:26:2d:a2:a3:f0:ac:23:
         02:82:fb:15:7d:76:48:d3:f7:fe:ae:0a:f1:b1:d2:65:a1:2c:
         21:af:e3:78:32:48:d7:99:b1:b8:1f:28:35:57:9e:dd:6b:f3:
         d4:14:e4:90:c2:a1:ea:87:cf:b7:82:0e:42:80:35:a9:a8:9e:
         a6:fc:22:3b:07:a2:9f:ee:e2:26:e0:39:ea:7d:50:6a:7e:ce:
         fc:42:3b:8a:1d:69:28:ce:28:74:2a:61:b4:b9:2a:94:93:c2:
         e0:f2:41:3d:af:a0:01:1f:14:4c:c2:01:ac:c7:ab:20:c2:5d:
         5b:d5:83:83:78:47:de:63:dc:b7:ec:d6:24:01:fc:3a:a8:71:
         0d:62:63:25:a9:0b:b4:45:23:c1:31:1c:02:b2:92:97:02:c6:
         85:69:be:80:41:e8:32:b3:42:6e:b5:53:bb:15:a3:74:dd:2e:
         25:12:67:8e:61:c3:90:51:34:51:5b:e8:68:06:64:15:69:f2:
         97:89:e5:cd:78:a8:a8:f7:b2:06:ae:67:08:b2:bd:ed:a1:47:
         85:1f:ed:e1:a1:9a:d4:a2:f6:8d:bc:79:de:71:79:79:0d:aa:
         e0:20:ec:2c:5f:c0:48:5d:91:ae:93:79:9b:0d:6f:f2:bb:9f:
         fe:46:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----