This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer
File:                     35c42a25-42c3-46fe-9914-5b8394eae9b1.cer (raw, json)
Hash identifier:          /u7cgwu5hEHSN1q6RioC6Hu0to7zSYFFlzp5eSY8G0k=
Subject key identifier:   03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BE6B38D2718D7774B999E1D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 13:45:23 +0000
Certificate not after:    Mon 21 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 21684
                          IP: 45.42.80.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e6:b3:8d:27:18:d7:77:4b:99:9e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 18 13:45:23 2025 GMT
            Not After : Feb 21 13:45:23 2028 GMT
        Subject: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:72:e8:11:95:b8:3f:86:84:09:6c:89:a0:
                    3c:92:15:b8:7b:5d:a7:6d:2e:43:0c:70:e2:cd:44:
                    f1:86:0f:c9:b4:39:9d:19:c4:6a:51:74:4f:d1:e8:
                    da:42:dc:04:96:d5:7e:b9:88:9c:2f:29:54:79:7d:
                    a3:e3:75:aa:8a:25:4c:ca:ec:b4:22:da:fd:29:ff:
                    70:4d:4a:8f:d4:cc:4f:bd:b3:ec:25:65:bc:4a:2f:
                    57:1e:f0:99:27:55:9d:e4:78:4f:37:8a:38:8f:6f:
                    48:ef:50:83:2c:9b:43:00:84:a3:8d:07:10:6f:ac:
                    2b:e3:45:b7:46:03:5b:da:36:fb:d7:12:61:b6:fe:
                    6b:c0:85:bd:90:80:6d:3c:b7:31:8c:e4:94:35:3d:
                    9d:8a:0e:bd:63:e9:92:ef:0d:e1:f7:00:4b:2e:b6:
                    a2:9a:56:62:69:c9:94:f2:6a:59:db:01:32:83:ed:
                    55:2b:22:79:20:3a:99:4e:3f:28:a3:8e:60:2b:6e:
                    c2:59:c6:dc:16:c1:f8:f9:66:fb:2e:75:26:63:25:
                    38:ac:a6:5f:9b:2e:bd:87:0d:89:d7:94:1b:47:c2:
                    fd:13:2f:83:33:03:58:2c:69:0b:ae:98:a8:4a:1e:
                    c5:56:49:da:0b:d1:57:54:d8:bd:9c:4c:4e:db:97:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21684

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:33:21:74:1c:8d:2d:27:e2:33:11:16:ae:f1:99:2c:22:
         6d:b2:0f:23:0d:2f:46:54:bc:9a:0b:47:ce:14:46:32:46:a8:
         3d:db:fe:7a:18:d8:10:6f:70:df:7a:30:b7:7e:16:e7:9f:7c:
         f9:ce:35:74:32:11:09:11:2a:4d:fa:7d:96:f4:69:8c:5d:95:
         cc:a7:35:f8:7d:1b:ed:37:3c:51:dc:dd:9d:bd:59:53:32:f6:
         d1:58:26:31:dd:06:71:78:ec:15:29:c4:c1:ca:af:d7:c5:42:
         3d:cf:a5:33:83:6f:d1:6a:07:78:45:53:c3:11:59:10:d3:89:
         c4:da:8f:55:af:51:44:a3:4e:bc:6a:9b:4c:3b:2d:9a:4f:20:
         4b:8e:03:c1:8a:ce:61:bc:0e:fa:49:4d:b3:4d:2c:b7:b4:be:
         67:55:b6:8a:4a:46:f2:a6:68:89:84:e8:d3:a0:9f:aa:b3:8f:
         b8:0f:b3:52:b0:7c:d9:7c:1a:e1:7e:47:4c:b3:d7:81:26:4c:
         89:bb:fb:a7:db:e3:52:cd:13:b1:fe:32:b8:a8:b7:39:de:5f:
         bd:14:35:43:29:4d:5e:fc:29:98:7e:eb:c7:67:72:1d:50:65:
         94:08:a9:09:ae:7d:d9:6e:6a:45:ab:84:8e:5b:77:da:32:37:
         b1:f6:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----