This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
File:                     b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer (raw, json)
Hash identifier:          K/Izj7hc7lK2vfw5iZ37VQt7T1hk1Cy4W81cgMNOrEE=
Subject key identifier:   1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C54F9924F3E18591FC9906980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 Dec 2025 01:45:23 +0000
Certificate not after:    Sat 01 Apr 2028 00:45:23 +0000
Subordinate resources:    AS: 11248
                          IP: 204.8.24.0/21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:54:f9:92:4f:3e:18:59:1f:c9:90:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 28 01:45:23 2025 GMT
            Not After : Apr  1 00:45:23 2028 GMT
        Subject: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:54:4f:8d:30:aa:fc:2d:58:36:11:16:dc:
                    46:3f:8a:b5:83:8b:14:26:79:9e:af:72:23:1c:e8:
                    22:27:82:eb:b0:55:8d:72:4e:a4:f8:18:06:84:4a:
                    b2:a7:07:93:62:d1:c0:43:f5:8d:31:18:ff:69:a1:
                    d9:a2:c3:ca:cc:6a:4b:a9:84:4e:7f:c4:b3:91:5f:
                    e2:e1:14:81:f3:72:ab:3a:5c:30:d2:19:28:03:1b:
                    d2:d3:78:d2:ca:62:42:2a:e7:b0:91:d9:5e:88:cb:
                    bb:76:a2:f2:fb:1a:8b:91:40:10:3c:94:ba:90:49:
                    65:07:df:94:c8:f2:02:4d:32:97:04:f8:19:b3:f5:
                    f8:00:1a:7a:ff:88:58:03:d3:5f:c0:d8:34:d3:7b:
                    98:16:1b:db:b3:2c:2e:24:5d:7d:16:10:7e:f7:bd:
                    45:2c:40:2e:2b:1f:05:da:82:58:a2:1e:fd:8c:a0:
                    b9:bc:37:b1:35:4d:4d:a0:70:28:c6:1f:38:a3:60:
                    84:bc:8f:c1:68:5a:b0:fc:c3:64:0c:6e:c3:5a:c2:
                    75:a7:76:28:b9:e7:7e:cb:d3:39:ee:37:65:3b:39:
                    b8:8f:98:02:a7:51:d6:67:72:bb:35:30:54:c9:de:
                    f3:07:44:78:7e:03:2a:df:eb:e9:f3:0a:94:b8:e0:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.24.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11248

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:02:bf:c4:dc:21:e7:da:1f:13:1b:2c:85:2f:92:80:79:4b:
         86:5f:47:5d:75:11:3e:1e:c6:33:e8:bd:50:ee:1e:d7:76:eb:
         be:af:68:36:36:24:9b:fa:38:1f:52:eb:8b:6f:e9:14:6e:cd:
         32:cf:25:e7:f7:19:b6:7b:3e:ae:bf:99:8f:4f:9e:35:cc:93:
         88:6d:6b:72:f7:6c:bd:5d:c5:19:61:a2:d9:77:92:84:22:da:
         22:a0:ac:a2:42:b1:67:61:38:b3:04:15:fd:62:09:72:03:a8:
         c3:8f:13:3d:59:9d:74:b3:90:5a:9a:37:19:04:cb:a8:27:69:
         0a:26:08:02:fe:0d:b7:35:96:fc:f1:07:1e:66:66:0f:28:8e:
         d5:a4:5f:4c:f8:c2:85:85:f6:16:ca:33:d3:6a:da:34:fc:5c:
         f9:ca:22:11:de:e4:29:99:db:4a:62:cd:bd:d2:c1:08:36:08:
         a5:a2:c4:7d:8c:b0:72:1a:ab:43:8e:6a:0b:7b:5f:78:c0:86:
         94:08:a5:eb:fc:b1:8c:39:89:ca:c6:08:a0:ee:9d:98:8c:e9:
         07:2a:ed:ff:19:c2:88:e9:19:55:ab:a0:e6:8f:78:e8:00:ee:
         f3:35:15:bb:3e:2c:1c:2d:bd:24:64:d7:2a:e8:d2:84:31:d3:
         27:15:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----