This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer
File:                     3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer (raw, json)
Hash identifier:          cucF7s+jgvFAyj6unAyA/M3kBoq/xtRCq9fiHPypGVQ=
Subject key identifier:   40:85:E8:20:C6:8E:B7:7B:40:0C:C0:C5:D1:58:38:C8:EF:5F:80:17
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BD92C459E0813C33414AD4E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Nov 2025 17:27:19 +0000
Certificate not after:    Tue 26 Jan 2027 07:44:26 +0000
Subordinate resources:    AS: 399945
                          IP: 2604:2860::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d9:2c:45:9e:08:13:c3:34:14:ad:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 13 17:27:19 2025 GMT
            Not After : Jan 26 07:44:26 2027 GMT
        Subject: CN=3a402fb7-2c3d-4c65-a693-41ffae7b91c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:09:b3:2d:39:1b:a2:a6:a8:3d:12:81:3b:
                    ae:49:8e:0e:55:a5:0d:a6:bd:dc:35:29:c3:e2:55:
                    42:0d:72:32:62:03:5f:f0:5b:fc:0e:47:cf:9f:af:
                    af:49:8f:06:e1:1b:38:db:62:74:d2:d2:1c:76:c9:
                    47:a6:d9:73:a5:bc:60:17:3e:87:d9:e3:e4:46:3d:
                    cd:b0:55:71:31:ed:fa:b5:40:8e:ef:fc:69:9d:ad:
                    2c:ee:e9:13:6a:de:78:fb:3a:75:bb:d8:c1:ce:ce:
                    7b:d9:70:8a:9f:b9:76:ca:fd:9b:89:f0:7d:5d:ea:
                    08:e8:e4:23:0a:2d:75:e7:41:b5:1e:4b:27:f0:6d:
                    91:e6:4e:b3:5d:26:63:8d:99:7f:6c:2d:d5:97:84:
                    54:ea:09:04:fb:52:8f:e0:7c:9f:02:44:95:10:ea:
                    43:59:f3:3d:71:0a:59:1e:b9:c1:d2:01:bc:d1:6e:
                    47:58:51:a9:0c:17:56:68:c2:07:33:da:e4:b9:2d:
                    1d:ff:f4:33:97:df:f5:7a:40:34:36:64:c2:08:be:
                    fd:dc:6e:42:23:cb:ed:d6:82:da:7d:79:34:b7:12:
                    17:8e:86:2f:e1:38:69:a1:a7:3a:c7:77:db:7a:df:
                    df:c9:d9:1e:91:45:3a:49:77:58:ae:5e:f5:42:a5:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:85:E8:20:C6:8E:B7:7B:40:0C:C0:C5:D1:58:38:C8:EF:5F:80:17
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399945

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:5e:b0:fc:63:85:65:6f:1d:27:c6:d1:9e:9e:c6:4f:e0:
         da:3e:78:51:8c:4f:37:42:dc:43:78:a7:01:b0:77:f5:6e:bd:
         fa:f5:05:43:88:86:83:21:5f:37:bb:54:ee:f8:5b:87:cb:f0:
         bd:c7:91:4a:6a:12:74:37:ff:d5:44:3d:b8:10:71:a6:ba:42:
         27:a0:a7:47:4a:34:ce:00:6e:37:d8:f7:ee:df:9a:46:1d:a6:
         76:ac:7e:00:39:23:bf:ad:57:0a:39:73:0e:d1:91:e0:79:aa:
         6a:b9:9b:a4:b3:4a:85:ff:cf:d4:4d:54:c8:fd:26:6f:b7:ed:
         4f:73:e4:12:3c:bc:1d:12:99:8a:c1:7d:f8:68:76:ef:26:41:
         a1:24:99:fc:19:96:43:62:7a:24:98:23:17:c2:0d:da:02:84:
         b5:b8:78:4e:fd:6e:b6:3d:09:cf:a8:8e:ba:58:ea:4b:0f:07:
         6a:a4:df:65:6a:65:ed:19:d5:b9:91:67:76:56:ed:d6:2a:00:
         87:2d:db:68:63:92:fe:57:a8:29:cd:b9:46:b4:c9:4b:b9:68:
         b7:20:38:29:90:6f:e8:dc:84:18:b2:64:e3:f7:e8:b2:16:7a:
         cd:11:e1:a6:93:9e:e2:ca:08:e7:91:a8:42:f2:52:0d:42:65:
         fa:a7:f3:cd
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEvZLEWeCBPDNBStToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI1MTExMzE3MjcxOVoXDTI3MDEyNjA3NDQyNlowLzEtMCsGA1UEAxMk
M2E0MDJmYjctMmMzZC00YzY1LWE2OTMtNDFmZmFlN2I5MWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N0Jsy05G6KmqD0SgTuuSY4OVaUNpr3cNSnD
4lVCDXIyYgNf8Fv8DkfPn6+vSY8G4Rs422J00tIcdslHptlzpbxgFz6H2ePkRj3N
sFVxMe36tUCO7/xpna0s7ukTat54+zp1u9jBzs572XCKn7l2yv2bifB9XeoI6OQj
Ci1150G1Hksn8G2R5k6zXSZjjZl/bC3Vl4RU6gkE+1KP4HyfAkSVEOpDWfM9cQpZ
HrnB0gG80W5HWFGpDBdWaMIHM9rkuS0d//Qzl9/1ekA0NmTCCL793G5CI8vt1oLa
fXk0txIXjoYv4Thpoac6x3fbet/fydkekUU6SXdYrl71QqXvPQIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFECF6CDGjrd7QAzAxdFYOMjvX4AXMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z
YTQwMmZiNy0yYzNkLTRjNjUtYTY5My00MWZmYWU3YjkxYzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNhNDAyZmI3LTJjM2QtNGM2NS1h
NjkzLTQxZmZhZTdiOTFjNS8zYTQwMmZiNy0yYzNkLTRjNjUtYTY5My00MWZmYWU3
YjkxYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmBChgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwYaSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQAtrF6w/GOFZW8dJ8bRnp7GT+DaPnhRjE83QtxDeKcBsHf1
br369QVDiIaDIV83u1Tu+FuHy/C9x5FKahJ0N//VRD24EHGmukInoKdHSjTOAG43
2Pfu35pGHaZ2rH4AOSO/rVcKOXMO0ZHgeapquZuks0qF/8/UTVTI/SZvt+1Pc+QS
PLwdEpmKwX34aHbvJkGhJJn8GZZDYnokmCMXwg3aAoS1uHhO/W62PQnPqI66WOpL
DwdqpN9lamXtGdW5kWd2Vu3WKgCHLdtoY5L+V6gpzblGtMlLuWi3IDgpkG/o3IQY
smTj9+iyFnrNEeGmk57iygjnkahC8lINQmX6p/PN
-----END CERTIFICATE-----