This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
File:                     6205d76d-4f52-4364-a347-5456e5513fc3.cer (raw, json)
Hash identifier:          uHooxl/t3BOzxJdVGbaVz78nEmIUANwBJ/UAchzkvIU=
Subject key identifier:   51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C37A963E354FC94046EB2C780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 13:45:23 +0000
Certificate not after:    Tue 21 Mar 2028 12:45:23 +0000
Subordinate resources:    IP: 23.189.72.0/24
                          IP: 2602:f80c::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:37:a9:63:e3:54:fc:94:04:6e:b2:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 17 13:45:23 2025 GMT
            Not After : Mar 21 12:45:23 2028 GMT
        Subject: CN=6205d76d-4f52-4364-a347-5456e5513fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:ae:48:95:a8:97:e1:29:e5:b7:76:1c:64:
                    f7:65:9f:2e:60:1e:aa:60:42:2e:ac:ab:04:70:53:
                    d2:99:97:73:fa:9a:39:b8:02:d9:ea:17:59:2d:30:
                    8a:e5:7e:31:37:69:27:1d:c0:6b:35:04:81:6e:1a:
                    1e:6c:f4:d5:4d:77:cf:57:34:8e:a6:d3:cd:31:bb:
                    2e:f5:fd:25:10:ff:03:1c:99:a5:f1:fc:b0:ec:1f:
                    ef:41:47:55:4d:ca:bd:4b:60:20:e2:f3:7a:eb:c8:
                    d3:8e:6b:39:f3:17:60:12:81:a1:13:eb:eb:79:e1:
                    d6:34:f0:a8:18:a0:19:4d:13:83:9a:d0:42:a7:85:
                    56:ba:e6:ea:b0:d6:d0:d7:58:dc:30:db:af:d2:6b:
                    3d:7c:bc:50:3e:40:c5:29:46:d3:f8:e9:48:38:ea:
                    bd:1a:94:2c:6a:20:7b:ba:87:b0:a5:3f:b2:5e:6c:
                    da:37:bd:1c:a2:e0:71:fd:f6:6c:37:43:ca:52:01:
                    d6:fe:fb:fc:28:d4:3d:ad:99:68:c5:29:0f:69:ff:
                    8c:3d:d2:6b:96:f1:30:96:cb:2e:6e:1b:00:96:b4:
                    f8:2b:6d:5d:cd:73:a4:33:b1:88:5f:06:f1:b3:11:
                    75:6d:d8:d7:5a:a8:57:49:fd:01:ed:1d:c8:ad:70:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.72.0/24
                IPv6:
                  2602:f80c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:47:07:5e:bc:c1:dd:d1:3b:63:b3:4c:dd:d1:de:c3:b1:
         b5:6f:73:73:d0:87:a8:93:c3:2c:34:4f:5f:2d:60:26:fa:65:
         04:82:4f:2b:f3:d0:c9:83:d7:2b:f3:e5:7d:10:e6:f7:73:83:
         af:64:3d:16:cf:31:72:fe:b6:30:67:8f:d9:6d:e8:df:59:d8:
         70:f6:44:0d:f6:52:c7:5e:ed:a4:7b:69:df:e6:67:73:bb:c0:
         0c:be:44:0f:99:57:c2:20:17:8a:d0:2f:cc:4c:80:0a:33:c3:
         18:6d:87:28:c8:36:9a:fa:75:1b:d3:b2:db:e9:a2:2c:81:fb:
         21:31:26:4e:76:67:78:52:39:fb:14:22:e4:c5:2b:25:81:ee:
         4a:ec:f0:fc:a4:ed:ed:8a:85:ac:4b:5c:db:6b:06:1b:a9:51:
         c6:d4:f8:f7:c4:84:2c:2b:26:55:01:f2:50:3d:63:fb:d6:97:
         75:91:83:3f:64:ef:a5:be:89:c6:b4:db:7a:0f:a1:98:ab:85:
         fd:7a:2d:68:ae:1d:77:30:dc:96:74:93:1e:a6:f0:39:c6:1a:
         b2:40:0e:3d:7f:0c:d7:8a:f2:ba:b3:e4:42:95:14:d6:cf:95:
         bc:c5:5f:3e:75:2a:e0:80:f4:9b:9e:2e:32:1d:5b:05:b8:0a:
         63:e6:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:46:34 2025 by rpki-client