This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer
File:                     80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer (raw, json)
Hash identifier:          q6nkMIIscHJ/UutZ9gsT4nONuzl/ECNONdkQm2PBCeM=
Subject key identifier:   3A:A8:AF:11:24:B3:DA:34:6C:5D:87:E3:CB:FD:87:CC:E6:82:C5:78
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C6B4F09092625FBE136C507E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Jan 2026 01:45:22 +0000
Certificate not after:    Sun 09 Apr 2028 00:45:22 +0000
Subordinate resources:    AS: 1312
                          AS: 7066
                          AS: 26499
                          AS: 40220
                          IP: 45.3.64.0/18
                          IP: 128.173.0.0/16
                          IP: 192.70.138.0/24
                          IP: 192.70.187.0/24
                          IP: 192.122.175.0/24
                          IP: 198.82.0.0/16
                          IP: 2607:b400::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:4f:09:09:26:25:fb:e1:36:c5:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jan  5 01:45:22 2026 GMT
            Not After : Apr  9 00:45:22 2028 GMT
        Subject: CN=80e5f0b2-a210-4b36-9e99-d0ee4e3583f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:1c:80:57:77:d5:e5:e8:95:a7:36:e4:b9:
                    47:14:06:74:b9:9c:3b:33:e7:a8:81:ed:0c:e0:3e:
                    ef:79:c8:19:62:ad:0b:97:15:c5:ac:44:25:d9:be:
                    4d:e4:35:81:58:a8:af:a1:1e:a1:8e:f1:38:af:9c:
                    1f:56:be:af:92:e0:44:98:8b:6e:81:61:b9:32:fc:
                    1c:4a:b2:99:ff:70:a5:f2:d8:40:59:cf:b1:2e:65:
                    1d:bc:8e:c5:d2:d5:8a:69:d6:d8:db:59:a6:c8:cc:
                    9a:6f:f8:63:ad:f6:04:93:9e:02:9a:29:01:62:cf:
                    ed:2c:c4:b3:68:8b:86:3c:a9:5f:0a:2e:cb:c0:25:
                    ef:d8:87:17:74:e7:9c:01:b0:ef:e4:cc:6a:d4:93:
                    d2:11:2b:10:78:7c:8c:3d:35:41:e7:32:e5:25:b3:
                    71:73:94:11:21:73:ef:f9:ec:95:76:f2:22:93:35:
                    16:5c:f6:45:cc:92:99:60:5d:ed:c5:a7:48:c0:c9:
                    9b:19:75:db:6d:2e:64:96:3d:8f:b1:d7:5e:a3:1a:
                    3e:c2:44:c0:a1:c1:bb:55:40:cf:37:94:a6:7e:11:
                    c5:a2:b4:24:08:e0:54:f5:3b:73:1b:f3:80:be:cf:
                    7e:e5:f1:70:df:7d:96:f1:87:73:cc:8a:f5:1b:4a:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:AF:11:24:B3:DA:34:6C:5D:87:E3:CB:FD:87:CC:E6:82:C5:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.3.64.0/18
                  128.173.0.0/16
                  192.70.138.0/24
                  192.70.187.0/24
                  192.122.175.0/24
                  198.82.0.0/16
                IPv6:
                  2607:b400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1312
                  7066
                  26499
                  40220

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:5a:f0:5f:ef:b5:2a:e1:fd:18:19:3e:8b:6c:6b:4c:93:
         cf:3d:22:26:21:7c:d8:26:34:b8:ec:a9:ef:13:dc:a6:80:2d:
         a2:22:25:95:29:22:e8:7e:bf:43:81:7b:78:33:7a:2e:4c:e8:
         3a:14:5e:fd:af:20:0c:27:67:f7:0e:3a:0a:ef:e4:85:c3:41:
         88:0d:82:a8:2d:16:e2:ab:5a:0b:b8:20:48:22:c8:d5:0f:17:
         f2:bf:3f:e5:f4:97:d1:52:52:2a:33:e2:25:b3:14:36:2a:42:
         a7:2e:74:2f:cb:20:a1:5b:92:93:52:85:ee:98:99:ec:a0:8d:
         06:e4:06:ef:00:27:9c:54:a8:e7:e1:7f:ff:e5:23:e3:e1:9d:
         d1:ce:c8:5c:ed:89:1d:62:df:99:f1:c0:67:3a:37:c8:bf:44:
         55:53:36:6e:5b:91:c8:69:19:1b:6d:8d:29:34:5d:a8:3a:3b:
         52:54:2b:d6:d8:e9:55:83:35:5c:13:7d:db:22:bf:0b:9c:c6:
         35:f1:0b:fc:27:a7:6c:47:db:33:7c:7d:f5:f3:4c:2c:b3:ef:
         60:14:ad:0d:b8:c5:3a:21:7d:30:e6:e9:98:2d:46:95:9a:07:
         b1:05:1e:cd:d6:6e:ab:9e:c6:bc:87:b3:79:f9:92:8a:23:18:
         40:d7:f0:be
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWExrTwkJJiX74TbFB+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI2MDEwNTAxNDUyMloXDTI4MDQwOTAwNDUyMlowLzEtMCsGA1UEAxMk
ODBlNWYwYjItYTIxMC00YjM2LTllOTktZDBlZTRlMzU4M2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDAcgFd31eXolac25LlHFAZ0uZw7M+eoge0M
4D7vecgZYq0LlxXFrEQl2b5N5DWBWKivoR6hjvE4r5wfVr6vkuBEmItugWG5Mvwc
SrKZ/3Cl8thAWc+xLmUdvI7F0tWKadbY21mmyMyab/hjrfYEk54CmikBYs/tLMSz
aIuGPKlfCi7LwCXv2IcXdOecAbDv5Mxq1JPSESsQeHyMPTVB5zLlJbNxc5QRIXPv
+eyVdvIikzUWXPZFzJKZYF3txadIwMmbGXXbbS5klj2Psddeoxo+wkTAocG7VUDP
N5SmfhHForQkCOBU9TtzG/OAvs9+5fFw332W8YdzzIr1G0pe6QIDAQABo4IEUjCC
BE4wHQYDVR0OBBYEFDqorxEks9o0bF2H48v9h8zmgsV4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84
MGU1ZjBiMi1hMjEwLTRiMzYtOWU5OS1kMGVlNGUzNTgzZjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzgwZTVmMGIyLWEyMTAtNGIzNi05
ZTk5LWQwZWU0ZTM1ODNmOC84MGU1ZjBiMi1hMjEwLTRiMzYtOWU5OS1kMGVlNGUz
NTgzZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwSgYIKwYBBQUH
AQcBAf8EOzA5MCgEAgABMCIDBAYtA0ADAwCArQMEAMBGigMEAMBGuwMEAMB6rwMD
AMZSMA0EAgACMAcDBQAmB7QAMCYGCCsGAQUFBwEIAQH/BBcwFaATMBECAgUgAgIb
mgICZ4MCAwCdHDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCMXVrwX++1KuH9GBk+i2xrTJPPPSImIXzYJjS4
7KnvE9ymgC2iIiWVKSLofr9DgXt4M3ouTOg6FF79ryAMJ2f3DjoK7+SFw0GIDYKo
LRbiq1oLuCBIIsjVDxfyvz/l9JfRUlIqM+IlsxQ2KkKnLnQvyyChW5KTUoXumJns
oI0G5AbvACecVKjn4X//5SPj4Z3Rzshc7YkdYt+Z8cBnOjfIv0RVUzZuW5HIaRkb
bY0pNF2oOjtSVCvW2OlVgzVcE33bIr8LnMY18Qv8J6dsR9szfH3180wss+9gFK0N
uMU6IX0w5umYLUaVmgexBR7N1m6rnsa8h7N5+ZKKIxhA1/C+
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:24:35 2026 by rpki-client