This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
File:                     97cac0b7-abb7-43b2-8435-2db8edb2a015.cer (raw, json)
Hash identifier:          PKtDqpCCt6qIF4GqqKXKhuO1r6ELi/PxYMsRu8ncYVY=
Subject key identifier:   25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C7D747E04DE9ACA6044D2B480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 11 Jan 2026 13:45:24 +0000
Certificate not after:    Sat 15 Apr 2028 12:45:24 +0000
Subordinate resources:    AS: 62802
                          IP: 170.4.168.0/21
                          IP: 170.4.192.0/21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:74:7e:04:de:9a:ca:60:44:d2:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan 11 13:45:24 2026 GMT
            Not After : Apr 15 12:45:24 2028 GMT
        Subject: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:ea:66:50:0b:c4:6c:48:af:86:15:27:dd:
                    30:23:2e:6b:ad:ea:7e:d9:af:c2:8f:a0:d1:f7:9a:
                    34:9b:0c:f0:ed:15:03:f9:33:23:75:5a:8a:56:ba:
                    5d:04:7f:60:54:df:59:e5:ef:f3:d1:58:57:96:50:
                    7f:6e:01:bf:e3:11:03:b0:a4:6f:96:f4:d9:d7:2a:
                    fb:ba:3c:73:cd:48:45:eb:68:1c:80:36:fc:4e:3d:
                    bc:03:18:02:be:ca:3a:fe:ea:a3:f2:7c:64:51:78:
                    a0:58:71:91:d7:9d:d9:30:b0:f6:21:4e:69:8e:62:
                    3f:26:64:ef:fa:85:3b:a0:c0:9b:48:ce:24:16:1a:
                    97:b5:65:33:36:0e:83:48:9e:85:7f:9b:06:f5:0c:
                    76:9e:88:e2:e5:be:65:db:b2:39:43:1a:e5:18:a6:
                    3d:5e:44:20:6c:9d:7b:fd:87:6e:0d:40:38:06:e5:
                    0c:ab:ea:23:34:4b:6c:98:92:35:78:da:99:fa:ab:
                    6b:bb:0f:64:55:cf:a4:f2:d1:72:19:49:cb:c8:cf:
                    de:11:c2:d5:45:ad:1a:89:29:f6:66:e3:1c:71:52:
                    05:97:30:08:fe:7f:04:cf:5a:6a:23:3b:24:55:be:
                    97:d3:cd:21:b3:21:81:d1:f7:8f:c8:8a:9c:5f:d6:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.168.0/21
                  170.4.192.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62802

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:e4:75:e0:44:2b:d9:3f:33:b5:04:47:45:cc:be:e3:44:
         a7:33:82:c3:96:56:bb:59:d1:61:36:ea:5e:e1:13:21:75:ed:
         10:91:d3:e0:70:5a:1c:76:cb:bc:84:71:e9:15:c5:2c:0f:1f:
         dc:9b:cb:08:89:a6:76:0a:e7:f6:31:1a:90:f8:39:83:f4:2a:
         65:42:77:8e:15:90:b4:76:36:c0:7f:5b:cc:d1:29:55:49:7e:
         83:8d:5c:db:02:63:5c:95:0d:e7:b5:2e:a5:01:72:e1:0b:50:
         14:13:3e:24:15:07:7f:be:b3:58:7a:e2:57:41:ee:e3:cd:44:
         d4:d6:e5:4a:6e:fb:0f:4d:40:f9:e4:d1:e6:25:72:f4:2b:56:
         ab:7c:dc:5a:4c:0e:e4:e2:36:1e:bc:89:7a:37:7f:14:2b:e4:
         85:b7:bb:13:39:7e:66:3c:02:a1:4d:81:04:f5:02:e7:65:f4:
         b7:99:82:99:62:85:d7:ed:3d:57:30:9e:11:0e:59:bf:ee:25:
         f5:0b:bb:ef:12:96:14:11:b7:9b:b3:d0:73:95:5a:01:d1:3c:
         3a:5b:43:9e:2a:9a:bd:43:f2:42:d7:de:fb:20:2f:0c:e0:dd:
         eb:78:51:6c:9f:30:ec:ff:94:1f:6a:9e:ff:1d:97:34:a3:38:
         ca:40:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:47:59 2026 by rpki-client