This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
File:                     c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer (raw, json)
Hash identifier:          mAhNHmpL5sDlOm2mnGqV6WK73R44Tk5Q9ID+WUIJ+9o=
Subject key identifier:   E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C6CB45FE16A5A40DDC9836800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Jan 2026 13:45:22 +0000
Certificate not after:    Sun 09 Apr 2028 12:45:22 +0000
Subordinate resources:    AS: 33125
                          IP: 66.97.96.0/20
                          IP: 204.9.152.0/21
                          IP: 204.11.128.0/21
                          IP: 204.15.24.0/21
                          IP: 204.15.104.0/21
                          IP: 207.200.224.0/19
                          IP: 2604:9540::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6c:b4:5f:e1:6a:5a:40:dd:c9:83:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan  5 13:45:22 2026 GMT
            Not After : Apr  9 12:45:22 2028 GMT
        Subject: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:cc:a2:3d:a8:63:f3:6d:dd:b9:5c:df:3a:
                    00:1d:da:bc:a5:e1:f4:1b:fd:c8:95:06:3b:9b:6b:
                    db:e2:03:85:a9:97:a3:86:96:4d:d5:a0:b0:6c:b5:
                    b2:88:ae:18:ca:35:17:af:0d:1c:fd:d4:cc:29:55:
                    e6:65:61:62:15:f0:ae:d4:26:ec:3c:dd:08:1b:1e:
                    65:14:9d:86:e3:e7:80:c5:16:ea:79:89:b0:44:40:
                    38:7e:83:e2:a8:ec:9f:be:04:b8:b4:5a:c4:91:83:
                    34:b4:5a:41:bc:4e:38:8d:78:34:3c:02:39:b9:66:
                    7b:26:92:58:b0:3a:f9:fe:c6:bf:7e:15:b8:ec:74:
                    82:0a:cd:d1:5f:6b:1d:59:83:4b:b7:3c:64:49:2f:
                    d5:34:85:63:cf:de:69:7c:41:8d:10:9d:dd:43:a5:
                    25:19:07:14:06:cb:40:69:3d:c9:45:9e:0d:c3:ad:
                    07:dd:81:40:d9:84:1c:e6:16:a8:77:24:cd:a1:90:
                    f1:2f:4d:46:b7:69:f3:73:01:71:c0:f0:cf:76:00:
                    2d:5e:2c:43:18:61:42:aa:d9:20:d1:0b:11:53:be:
                    60:eb:64:42:41:44:7b:d4:a0:9a:e9:fd:3c:9e:d9:
                    93:02:63:01:ac:01:21:47:99:33:47:f4:bc:87:88:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.96.0/20
                  204.9.152.0/21
                  204.11.128.0/21
                  204.15.24.0/21
                  204.15.104.0/21
                  207.200.224.0/19
                IPv6:
                  2604:9540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33125

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:b3:c3:53:6f:f1:7b:93:5f:88:77:a3:3f:b3:7c:a9:b7:
         0b:3b:49:a3:8f:67:06:ea:8a:c8:bf:2e:31:df:f2:6a:1d:8e:
         fb:ad:62:01:76:c8:93:1d:63:89:01:fe:01:d6:e5:45:1b:3c:
         dd:ca:69:77:85:a4:82:e8:4b:2f:b9:3b:a8:01:53:f2:1c:ab:
         d0:cd:37:41:d6:fc:c4:b4:6e:77:20:9a:73:84:a1:1e:27:ad:
         7c:6e:c2:f1:5a:59:89:5c:9f:c7:2f:b3:a6:bb:3a:16:b0:fa:
         9f:3f:9c:02:1b:2b:2c:72:fb:f6:ae:a7:85:fd:c0:fa:7a:87:
         5a:e7:7a:49:68:87:1d:75:6e:f1:58:a7:75:41:91:2e:e8:b3:
         ff:ff:f9:bb:24:36:66:a6:61:28:e2:97:01:62:38:dc:9b:ae:
         69:cf:65:67:0c:bd:35:2c:74:c4:7a:1e:e8:82:f5:bb:7f:e7:
         5a:6a:8c:ad:ef:ec:b9:63:03:3f:80:32:87:6c:ef:4a:6a:4d:
         71:0c:ca:fa:1d:c7:4a:2a:7c:4e:81:59:8a:05:8b:31:8b:c8:
         f4:48:ff:97:cd:31:f6:f8:fe:e5:80:a7:d4:d1:1c:c7:cb:ba:
         9e:74:6a:a6:09:65:c9:07:0b:04:99:08:b2:20:52:f2:fc:96:
         94:90:d7:bf
-----BEGIN CERTIFICATE-----
MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWExstF/halpA3cmDaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDEwNTEzNDUyMloXDTI4MDQwOTEyNDUyMlowLzEtMCsGA1UEAxMk
Yzg2YzM1M2QtMmFlNC00YTI4LThkZjctMGE5MDZiN2M2OTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAnMoj2oY/Nt3blc3zoAHdq8peH0G/3IlQY7
m2vb4gOFqZejhpZN1aCwbLWyiK4YyjUXrw0c/dTMKVXmZWFiFfCu1CbsPN0IGx5l
FJ2G4+eAxRbqeYmwREA4foPiqOyfvgS4tFrEkYM0tFpBvE44jXg0PAI5uWZ7JpJY
sDr5/sa/fhW47HSCCs3RX2sdWYNLtzxkSS/VNIVjz95pfEGNEJ3dQ6UlGQcUBstA
aT3JRZ4Nw60H3YFA2YQc5haodyTNoZDxL01Gt2nzcwFxwPDPdgAtXixDGGFCqtkg
0QsRU75g62RCQUR71KCa6f08ntmTAmMBrAEhR5kzR/S8h4gNSQIDAQABo4IESDCC
BEQwHQYDVR0OBBYEFOPZ4YIK85wlbOsbsDJpvn8k/X71MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j
ODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3YzY5NjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M4NmMzNTNkLTJhZTQtNGEyOC04
ZGY3LTBhOTA2YjdjNjk2My9jODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3
YzY5NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH
AQcBAf8EPTA7MCoEAgABMCQDBARCYWADBAPMCZgDBAPMC4ADBAPMDxgDBAPMD2gD
BAXPyOAwDQQCAAIwBwMFACYElUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIFl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI7Ks8NTb/F7k1+Id6M/s3yptws7SaOPZwbqisi/LjHf8modjvut
YgF2yJMdY4kB/gHW5UUbPN3KaXeFpILoSy+5O6gBU/Icq9DNN0HW/MS0bncgmnOE
oR4nrXxuwvFaWYlcn8cvs6a7Ohaw+p8/nAIbKyxy+/aup4X9wPp6h1rneklohx11
bvFYp3VBkS7os///+bskNmamYSjilwFiONybrmnPZWcMvTUsdMR6HuiC9bt/51pq
jK3v7LljAz+AMods70pqTXEMyvodx0oqfE6BWYoFizGLyPRI/5fNMfb4/uWAp9TR
HMfLup50aqYJZckHCwSZCLIgUvL8lpSQ178=
-----END CERTIFICATE-----
Generated at Wed Feb 11 05:12:39 2026 by rpki-client