This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer
File:                     b8726973-ff15-4a26-89ff-62843d7ac580.cer (raw, json)
Hash identifier:          v3qHOeoJ6E0WrYZnizlKA2bSc5sc/iQi63DrA8rb3KM=
Subject key identifier:   01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C48697EDF12FFF5B832564A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Dec 2025 13:45:24 +0000
Certificate not after:    Mon 27 Mar 2028 12:45:24 +0000
Subordinate resources:    AS: 36048
                          IP: 104.219.0.0/21
                          IP: 207.189.181.0/24
                          IP: 216.71.102.0/24
                          IP: 2605:bfc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:48:69:7e:df:12:ff:f5:b8:32:56:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 23 13:45:24 2025 GMT
            Not After : Mar 27 12:45:24 2028 GMT
        Subject: CN=b8726973-ff15-4a26-89ff-62843d7ac580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:c4:8d:0a:28:14:a9:91:9a:c2:64:d5:8b:
                    6b:e6:37:05:2d:f3:47:f7:ed:33:5d:9f:68:32:99:
                    0a:25:20:8d:01:99:74:a2:c6:c9:0c:54:3d:90:79:
                    7c:01:73:06:42:33:79:3c:c9:3b:5c:0f:c8:65:d9:
                    78:f2:ec:45:c2:cf:8d:85:ea:ee:a2:2a:c8:2c:7c:
                    c3:8a:be:5d:80:34:23:63:e5:56:be:21:4e:25:ee:
                    42:1e:45:1b:73:e2:7b:4c:b7:59:7c:74:0f:52:57:
                    4a:b0:d3:01:66:20:8b:69:0f:21:8b:70:fd:3d:f1:
                    0c:02:25:2e:40:e2:57:9e:e9:bc:73:2c:7d:33:36:
                    8c:73:74:6f:40:38:1c:4b:95:ac:12:21:d0:d8:eb:
                    22:34:21:72:52:9d:6c:16:b8:07:da:0a:52:ba:9e:
                    1f:03:33:1c:03:42:8a:e6:26:5d:ca:90:ff:51:4c:
                    67:15:96:69:a2:73:5d:7a:64:fc:ec:9d:6e:af:71:
                    1b:46:79:b0:69:71:5c:88:ce:14:43:09:00:96:3a:
                    2d:97:88:0e:9c:0d:cd:e8:e5:01:44:19:71:ae:b4:
                    44:0b:b2:51:ad:a3:c2:3e:f2:fd:82:04:61:9c:51:
                    56:b3:d7:c4:43:61:13:55:45:ac:11:5a:eb:9a:9e:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.0.0/21
                  207.189.181.0/24
                  216.71.102.0/24
                IPv6:
                  2605:bfc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36048

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:26:58:03:f0:cc:85:e5:00:35:3d:8c:9c:76:02:97:e7:
         cf:3e:41:41:83:42:05:2c:6a:50:f7:73:2d:d9:ef:73:f3:8d:
         0f:0f:ea:9c:7e:3a:67:d1:f6:8d:49:24:5b:c6:63:29:3e:a7:
         e3:2d:6f:62:f0:f0:d8:bc:f8:53:bb:b8:a6:1e:41:25:6f:16:
         fa:63:07:ec:f6:a8:53:d8:40:82:01:b4:8e:be:4d:05:28:4b:
         67:d1:40:74:0a:a7:b2:0c:6a:b1:f3:73:1d:36:94:0d:aa:81:
         50:b0:b0:33:82:9a:32:41:de:51:b7:b0:f1:da:a3:d5:ee:a3:
         11:b2:01:79:13:72:d9:28:65:43:d5:f6:8a:4d:00:a8:7c:0b:
         6a:4b:15:50:b6:d4:b9:19:d8:bd:11:40:ad:99:95:95:aa:89:
         c9:c2:8a:f6:55:ad:4b:34:80:27:73:1d:49:65:4f:8d:93:85:
         32:4e:5c:f8:6d:8d:5c:92:e3:98:28:d9:48:13:c2:0e:8d:b0:
         c4:c3:e6:44:b4:ff:e5:6d:81:33:17:0b:04:59:bc:a1:44:dd:
         e8:d1:f0:13:c8:9f:61:ce:f3:81:25:13:39:fd:ce:b3:ab:d2:
         86:f7:36:76:58:03:4e:1d:2e:9a:10:94:f3:c9:02:b8:ee:14:
         3d:6f:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----