This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
File:                     22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer (raw, json)
Hash identifier:          K7AQJT+h55m/Gq00GqTNG4hhEFKYlvco9AGdihE5vVc=
Subject key identifier:   31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C2DE3FDD0A5A448BB73365840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Dec 2025 01:45:23 +0000
Certificate not after:    Sat 18 Mar 2028 00:45:23 +0000
Subordinate resources:    IP: 23.187.40.0/24
                          IP: 130.12.80.0/22
                          IP: 2602:f838::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2d:e3:fd:d0:a5:a4:48:bb:73:36:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 14 01:45:23 2025 GMT
            Not After : Mar 18 00:45:23 2028 GMT
        Subject: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:d1:5d:52:c4:08:0e:01:b4:8c:99:91:cf:
                    d8:fb:08:56:e6:99:52:50:d4:4f:e0:e9:c1:87:2d:
                    bb:70:6f:6f:64:d4:1a:c6:0d:4b:46:78:18:c4:06:
                    be:31:31:64:01:a1:80:c1:b7:62:bc:0e:79:37:3c:
                    c1:16:71:ab:d9:dd:6d:e4:8d:9c:7c:c8:ef:5e:c3:
                    91:84:96:6f:e5:30:99:c7:6b:b1:32:fc:7f:15:6b:
                    52:e3:43:48:db:df:4e:0c:9b:3c:04:43:17:4a:73:
                    89:8c:d9:69:6b:2e:26:62:eb:10:7e:55:de:28:1a:
                    2e:be:a5:da:6d:87:53:bb:22:8e:e5:a4:85:e0:32:
                    85:a8:af:b7:21:0d:a2:9b:e8:f7:19:1c:14:21:f4:
                    e7:8c:b9:4d:a3:67:ff:cf:ba:5c:55:82:17:14:97:
                    b6:15:02:95:cc:c7:23:b9:62:9b:51:d5:17:aa:16:
                    cd:02:42:f9:2e:98:ab:04:e5:a5:e3:e5:53:42:44:
                    05:cd:f5:3a:4c:07:40:ef:34:f4:60:12:6c:e5:7e:
                    09:3b:a7:2b:1a:b7:ba:37:e5:62:3d:33:db:89:2e:
                    08:f9:30:75:e2:63:12:f7:f4:6f:fa:0f:68:6a:82:
                    4e:0c:bb:ac:63:50:32:4f:34:c6:18:50:00:13:da:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.40.0/24
                  130.12.80.0/22
                IPv6:
                  2602:f838::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c6:22:24:1c:28:10:f4:28:f0:87:ba:57:30:fd:80:b1:39:
         4f:23:68:2d:8b:8f:b6:f7:27:f0:6b:3e:7f:71:2b:3e:02:f6:
         55:ed:99:99:5b:23:96:a9:b0:5f:8a:57:5f:bb:72:70:52:a0:
         57:4f:11:8b:3d:f9:91:73:76:d5:54:2f:d1:ef:83:1e:0d:2f:
         a2:18:60:44:57:90:f6:70:86:b1:9d:d1:b5:c2:b0:c5:a0:3e:
         2a:07:c7:39:92:76:cd:10:6e:b5:9f:0b:e6:86:2d:ce:fb:90:
         ba:34:4b:1e:fd:33:b2:bc:41:5c:dd:f7:4f:82:bd:b2:a9:2a:
         af:f4:14:1b:0b:b1:64:86:9a:9d:ee:24:ae:f5:38:bc:36:c1:
         c5:0b:59:76:c0:6d:46:a2:67:cf:e4:47:20:6c:2c:ea:d2:47:
         02:f6:c2:5d:58:6e:f7:10:b1:1b:be:96:aa:e9:6c:d9:aa:b8:
         5f:f1:5a:c2:47:86:2a:6c:dc:d4:26:ac:59:80:75:2d:13:2f:
         d2:4f:cc:c6:af:fe:74:e3:f8:b9:68:c5:a5:90:64:18:06:67:
         bc:f9:69:a9:bd:d4:dd:cf:7d:d7:07:36:cb:ab:77:76:65:45:
         0c:11:19:fc:3b:bd:67:92:dd:ef:9d:b4:78:44:0c:39:41:8c:
         08:68:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:13:34 2025 by rpki-client