This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
File:                     69fd0156-bb1f-48b6-bf32-c9492286f195.cer (raw, json)
Hash identifier:          waiatDNbIWogurz1UPNlQYvxKmPLPgn6OPTZSbkYUs4=
Subject key identifier:   2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F4328584BD5F370A8D6B2D6054B813400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 13:45:23 +0000
Certificate not after:    Tue 15 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:f3:70:a8:d6:b2:d6:05:4b:81:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Nov 12 13:45:23 2025 GMT
            Not After : Feb 15 13:45:23 2028 GMT
        Subject: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:90:4f:43:9d:e8:7a:81:62:5c:32:c2:63:
                    fe:33:d8:af:8c:0f:08:73:82:b8:b8:72:aa:38:ff:
                    a8:2c:c5:57:da:cf:82:7f:7b:c8:33:a7:40:49:74:
                    8f:ba:7c:4f:6a:ee:f9:8f:af:3a:25:c9:3f:6a:2f:
                    ad:d5:95:d6:3a:2b:79:95:ae:9f:7f:74:79:32:14:
                    5c:73:cb:f9:ee:07:f5:6b:3e:e1:8c:f4:a4:9e:41:
                    65:76:4a:83:55:30:6c:e0:3a:a1:34:61:bd:53:6c:
                    82:c6:62:46:2f:5b:c9:1b:46:f6:0c:fc:84:20:72:
                    ad:9e:69:08:9d:e9:56:76:4e:b5:f2:c1:6b:43:bc:
                    18:34:9c:03:1e:2d:bc:2d:56:f6:e2:ca:4f:f2:00:
                    00:bf:03:c9:b2:19:c3:1e:ac:eb:2b:80:6b:5d:aa:
                    18:19:ef:d1:f2:10:ef:9f:0c:ec:89:b8:ab:1f:15:
                    c0:82:2c:7c:45:24:be:1a:f5:36:34:27:5c:bd:93:
                    77:71:10:8b:e9:18:e7:fc:15:0e:d8:a0:33:21:41:
                    67:8d:e8:27:db:a7:f9:d0:07:35:0e:f9:e7:4d:9a:
                    69:8b:22:40:81:aa:75:6f:89:0e:0f:2c:a1:50:1e:
                    77:e7:9e:20:ce:55:0a:3d:41:4b:c8:68:27:4f:91:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:61:7c:66:0d:08:94:b0:6d:57:75:65:cf:94:99:93:db:e7:
         59:73:86:a6:23:e7:8f:e2:94:01:06:32:08:67:2a:a5:3a:b8:
         6c:94:77:50:a2:98:40:3b:ea:a7:76:85:2d:07:02:a9:5b:58:
         db:a7:b6:8a:e3:d8:9d:dd:28:05:a0:19:0c:56:c9:33:80:3b:
         d3:f2:3e:83:98:34:b1:71:41:f5:10:5f:74:ef:1e:a7:40:d8:
         2a:ba:6c:4f:bc:ad:4c:8f:fb:08:be:25:b1:ca:1e:13:f4:fb:
         71:4f:be:7e:5f:5c:d6:a4:3b:bf:0d:3f:37:cd:36:08:09:c5:
         7e:af:9e:f6:0d:e8:d6:d0:37:0f:e2:c4:99:b8:fd:83:7d:b4:
         ed:fd:16:3d:62:1e:9a:e3:b3:75:1a:62:b1:9f:ea:36:02:51:
         22:b9:99:15:e4:21:14:18:be:8d:f0:8c:de:48:1e:95:83:6a:
         05:f6:49:d4:5f:0a:3d:ac:1e:f9:09:9e:46:14:7e:ae:59:d1:
         5b:17:d1:ff:e6:70:ec:0f:9c:c0:4d:97:fd:50:0e:d9:24:22:
         40:60:37:ea:14:06:78:a2:17:f9:5a:a4:56:85:7f:eb:12:e0:
         68:4a:4d:25:7a:ab:a2:e5:b8:47:ba:e0:f0:60:8a:10:47:58:
         52:c8:73:0f
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEvV83Co1rLWBUuBNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzMB4XDTI1MTExMjEzNDUyM1oXDTI4MDIxNTEzNDUyM1owLzEtMCsGA1UEAxMk
NjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEqQT0Od6HqBYlwywmP+M9ivjA8Ic4K4uHKq
OP+oLMVX2s+Cf3vIM6dASXSPunxPau75j686Jck/ai+t1ZXWOit5la6ff3R5MhRc
c8v57gf1az7hjPSknkFldkqDVTBs4DqhNGG9U2yCxmJGL1vJG0b2DPyEIHKtnmkI
nelWdk618sFrQ7wYNJwDHi28LVb24spP8gAAvwPJshnDHqzrK4BrXaoYGe/R8hDv
nwzsibirHxXAgix8RSS+GvU2NCdcvZN3cRCL6Rjn/BUO2KAzIUFnjegn26f50Ac1
DvnnTZppiyJAgap1b4kODyyhUB53554gzlUKPUFLyGgnT5FdFQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFC57SGTjK7sUzZsE69k13XKLmJ5SMIIBfQYIKwYBBQUHAQsE
ggFvMIIBazCBhAYIKwYBBQUHMAWGeHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzCB
rQYIKwYBBQUHMAqGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUubWZ0MDIGCCsGAQUFBzANhiZodHRw
czovL3JyZHAuYXJpbi5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2kuYXJpbi5uZXQv
cmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMt
MjE3MWRhMjE1N2QzLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My5jcmwwHwYDVR0jBBgwFoAUYkd+H9nlJdDXortj2RThTuRUo2QwDgYDVR0PAQH/
BAQDAgEGMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEt
NDAzZS1iMDhjLTIxNzFkYTIxNTdkMy5jZXIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANlh
fGYNCJSwbVd1Zc+UmZPb51lzhqYj54/ilAEGMghnKqU6uGyUd1CimEA76qd2hS0H
AqlbWNuntorj2J3dKAWgGQxWyTOAO9PyPoOYNLFxQfUQX3TvHqdA2Cq6bE+8rUyP
+wi+JbHKHhP0+3FPvn5fXNakO78NPzfNNggJxX6vnvYN6NbQNw/ixJm4/YN9tO39
Fj1iHprjs3UaYrGf6jYCUSK5mRXkIRQYvo3wjN5IHpWDagX2SdRfCj2sHvkJnkYU
fq5Z0VsX0f/mcOwPnMBNl/1QDtkkIkBgN+oUBniiF/lapFaFf+sS4GhKTSV6q6Ll
uEe64PBgihBHWFLIcw8=
-----END CERTIFICATE-----
Generated at Sun Nov 23 11:30:28 2025 by rpki-client