This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
File:                     a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer (raw, json)
Hash identifier:          9nLIec1R1XinMplj5CDCH0pIY72MglpHRo0TwlBrO0w=
Subject key identifier:   33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C284E9FB950A52C31E2748180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Dec 2025 01:45:23 +0000
Certificate not after:    Thu 16 Mar 2028 00:45:23 +0000
Subordinate resources:    AS: 64289
                          IP: 23.155.72.0/24
                          IP: 206.71.158.0/24
                          IP: 2602:2ea::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:28:4e:9f:b9:50:a5:2c:31:e2:74:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 12 01:45:23 2025 GMT
            Not After : Mar 16 00:45:23 2028 GMT
        Subject: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:b3:9a:30:af:6b:d6:cc:46:3a:f4:c3:33:
                    be:2e:59:eb:5b:33:eb:18:21:da:50:49:72:9c:6b:
                    fd:2f:db:3d:fa:3b:90:eb:c7:9e:ec:0f:67:29:c1:
                    b8:fb:54:19:4a:a8:c8:07:91:11:fe:fe:e2:d2:b4:
                    19:bf:69:cc:44:98:15:9c:a8:54:29:cf:ef:e4:ce:
                    cc:b6:ad:cd:45:7e:a6:df:26:89:ad:60:6e:fe:f3:
                    91:54:24:73:be:e5:71:f0:16:53:94:f1:55:5c:93:
                    9a:a1:91:f1:0f:40:73:be:0d:b1:0a:59:6e:2e:fd:
                    3c:16:f4:4c:7f:4e:dc:cf:71:7b:9e:cb:54:e9:14:
                    eb:e0:60:8c:41:02:19:01:0f:34:69:e1:1c:f8:09:
                    c3:fe:8e:34:f9:2d:ea:e8:20:17:e1:c0:16:ac:5f:
                    dd:b9:d4:07:14:0b:63:ab:90:e2:b6:0d:de:91:4e:
                    87:e1:9d:b4:10:e0:84:09:d5:c5:bb:66:c7:d3:2f:
                    03:02:9d:b2:d5:fe:63:92:5b:39:9a:08:83:b5:53:
                    59:e9:c5:37:55:79:32:53:b8:bb:bb:62:fd:c9:de:
                    9d:c3:b6:19:87:dd:6c:5f:3c:27:17:18:0e:da:9d:
                    17:9c:5e:43:b2:e5:b0:91:09:d1:4d:77:5b:f4:64:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.72.0/24
                  206.71.158.0/24
                IPv6:
                  2602:2ea::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64289

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:58:ac:41:95:7d:49:99:83:e4:1b:db:d2:09:6b:72:ee:
         44:23:14:30:e6:84:04:ba:a7:6c:71:fc:f4:3c:b9:a5:bf:cf:
         35:c3:b9:b7:4b:89:2e:cf:b9:a8:ff:00:f5:83:0b:86:a8:f9:
         02:e6:95:39:d8:6c:85:8b:0a:02:46:fc:50:b3:4e:61:30:4a:
         af:33:ad:c0:06:17:22:43:bf:2d:9e:f9:8b:f5:b6:d1:82:a9:
         d3:64:b1:18:f9:78:a6:6c:b7:69:38:f9:2c:10:e2:d6:b3:0d:
         21:a3:cd:75:f4:bc:30:93:4a:9d:a8:3e:a5:98:a7:d8:4c:04:
         3b:56:a1:bd:3e:a3:62:9a:62:a7:cf:f5:95:9c:6e:9a:57:16:
         aa:90:73:c3:b1:de:b4:ef:23:4b:96:9b:a7:b9:b6:6a:4b:4f:
         2f:24:e8:4c:77:05:39:a1:06:8a:b5:dd:bb:0c:4e:4b:5c:15:
         36:c6:98:dd:f7:98:72:53:76:9b:db:ec:68:a6:4e:ce:06:c7:
         7a:62:da:22:2d:2d:53:b2:9f:2d:fc:85:98:00:05:e4:51:e7:
         52:58:62:43:35:88:7d:40:1c:ba:ab:72:64:bf:b4:75:36:d2:
         99:d1:04:0e:0b:16:34:9a:98:1d:3b:ff:3b:f9:0a:b5:4e:03:
         4f:8f:3e:52
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEwoTp+5UKUsMeJ0gYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI1MTIxMjAxNDUyM1oXDTI4MDMxNjAwNDUyM1owLzEtMCsGA1UEAxMk
YTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJkMDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynyzmjCva9bMRjr0wzO+LlnrWzPrGCHaUEly
nGv9L9s9+juQ68ee7A9nKcG4+1QZSqjIB5ER/v7i0rQZv2nMRJgVnKhUKc/v5M7M
tq3NRX6m3yaJrWBu/vORVCRzvuVx8BZTlPFVXJOaoZHxD0Bzvg2xClluLv08FvRM
f07cz3F7nstU6RTr4GCMQQIZAQ80aeEc+AnD/o40+S3q6CAX4cAWrF/dudQHFAtj
q5Ditg3ekU6H4Z20EOCECdXFu2bH0y8DAp2y1f5jkls5mgiDtVNZ6cU3VXkyU7i7
u2L9yd6dw7YZh91sXzwnFxgO2p0XnF5DsuWwkQnRTXdb9GR5DwIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFDMN0VP+NRIH3VeKKRtr5hfbHFj0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h
MjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EyM2JjMDdkLTU0YzYtNDE1Zi05
ZGMxLWMxYTIwOWYyZDA4MC9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlm
MmQwODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXm0gDBADOR54wDgQCAAIwCAMGBCYCAuoAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD7ITBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAwVisQZV9SZmD5Bvb
0glrcu5EIxQw5oQEuqdscfz0PLmlv881w7m3S4kuz7mo/wD1gwuGqPkC5pU52GyF
iwoCRvxQs05hMEqvM63ABhciQ78tnvmL9bbRgqnTZLEY+XimbLdpOPksEOLWsw0h
o8119Lwwk0qdqD6lmKfYTAQ7VqG9PqNimmKnz/WVnG6aVxaqkHPDsd607yNLlpun
ubZqS08vJOhMdwU5oQaKtd27DE5LXBU2xpjd95hyU3ab2+xopk7OBsd6YtoiLS1T
sp8t/IWYAAXkUedSWGJDNYh9QBy6q3Jkv7R1NtKZ0QQOCxY0mpgdO/87+Qq1TgNP
jz5S
-----END CERTIFICATE-----
Generated at Sun Dec 14 07:47:46 2025 by rpki-client