This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c4ede04-23e8-404e-a499-53fff95c4225.cer
File:                     5c4ede04-23e8-404e-a499-53fff95c4225.cer (raw, json)
Hash identifier:          +5MqQ35B+1kN68a82cvY1IjHzoDH2dIrEvr64qsmNHw=
Subject key identifier:   44:BF:A8:D5:26:00:A6:8C:3A:49:36:9A:3D:58:6B:F6:BD:6C:51:A5
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C1D23E2DE1E76E62325F3E340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c4ede04-23e8-404e-a499-53fff95c4225/5c4ede04-23e8-404e-a499-53fff95c4225.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c4ede04-23e8-404e-a499-53fff95c4225/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Dec 2025 01:45:23 +0000
Certificate not after:    Sun 12 Mar 2028 01:45:23 +0000
Subordinate resources:    AS: 398452
                          IP: 23.187.168.0/24
                          IP: 130.12.32.0/22
                          IP: 2602:f82f::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1d:23:e2:de:1e:76:e6:23:25:f3:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec  8 01:45:23 2025 GMT
            Not After : Mar 12 01:45:23 2028 GMT
        Subject: CN=5c4ede04-23e8-404e-a499-53fff95c4225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:bf:53:0e:84:63:5d:5a:4a:f3:06:08:b5:
                    2e:da:58:d3:35:34:49:45:a3:4f:db:06:65:3b:70:
                    48:b8:98:41:79:25:c3:a5:fb:fc:0a:32:cd:65:7f:
                    b3:9d:4d:57:b4:a2:11:67:34:d0:41:c3:3a:6d:b6:
                    7f:f9:50:51:01:ce:35:a5:7a:7f:61:ec:f0:91:f4:
                    9f:ec:1d:96:7a:dc:95:2e:4b:e7:ff:a4:79:3d:67:
                    b1:cf:d8:df:80:d8:6e:e1:e9:c4:62:64:c0:09:35:
                    76:4b:83:5f:14:76:01:7c:48:92:40:95:04:a7:5f:
                    2d:93:36:87:5f:47:e8:aa:83:e3:5b:60:67:33:54:
                    24:75:48:5e:ed:89:43:4f:29:05:49:14:70:e1:8c:
                    9b:b4:7c:42:0a:4d:09:34:a0:a4:fb:51:2b:f4:f8:
                    ee:93:64:a3:60:ea:54:57:0b:28:61:cd:c0:aa:14:
                    1e:a0:26:7a:8d:1d:7d:ce:bc:a2:97:13:d0:7a:57:
                    6e:87:b8:74:42:3f:fe:22:ad:9e:3b:a1:cc:cd:1b:
                    7b:fd:67:d2:7e:79:8f:95:a0:6b:0b:7c:30:a1:9d:
                    48:25:92:34:6a:80:47:ca:9d:fb:24:cb:df:99:34:
                    95:d7:a9:3d:1c:32:f8:21:b7:45:0e:7a:3b:9e:60:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:A8:D5:26:00:A6:8C:3A:49:36:9A:3D:58:6B:F6:BD:6C:51:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c4ede04-23e8-404e-a499-53fff95c4225/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c4ede04-23e8-404e-a499-53fff95c4225/5c4ede04-23e8-404e-a499-53fff95c4225.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.168.0/24
                  130.12.32.0/22
                IPv6:
                  2602:f82f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398452

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:27:3b:21:02:55:ea:50:be:eb:d2:fd:1a:ce:d5:3b:0d:
         96:cf:0c:59:93:b6:cf:88:bb:35:b4:84:f3:45:76:4d:8d:ec:
         ea:e3:17:03:e7:97:94:39:8b:e3:d4:77:6e:c2:0d:43:df:82:
         80:ea:60:7c:a1:66:e8:a0:c7:9b:10:f9:38:8b:40:06:5a:7d:
         f2:14:bc:79:fa:27:1d:65:39:a7:9f:3d:ab:fd:2e:ac:f1:7b:
         76:0c:f8:35:fa:bb:16:97:8d:3a:2b:0e:4c:58:7f:01:75:24:
         b0:e4:64:3b:24:f2:2f:fc:42:97:ee:1f:fd:5c:3f:d6:ee:84:
         1b:dc:8c:9d:a6:45:04:ad:4c:b6:08:75:d1:3e:cf:ed:68:ec:
         91:f5:d4:c6:e1:90:df:cb:34:2a:2b:12:67:b7:a7:61:57:a0:
         87:61:b0:9d:cd:b3:cb:16:d7:21:f7:92:8d:0a:7f:1c:8f:ee:
         61:0c:77:15:42:3e:40:aa:bf:81:69:34:0e:20:01:b9:a2:af:
         b4:8e:0c:96:be:05:3b:22:b6:99:34:5b:be:f6:35:0f:eb:94:
         28:29:0f:9a:05:cc:d3:fc:df:78:11:41:8e:35:9d:36:f2:81:
         14:06:03:f8:a7:f8:13:d4:3e:bb:45:0b:1e:35:b9:89:eb:14:
         dd:9d:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:21:20 2025 by rpki-client