This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
File:                     8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer (raw, json)
Hash identifier:          WdIUpJNS1j8A0AmATdf0cmbo49eKxVUU4Ro5gxL6IAI=
Subject key identifier:   D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C443975B891D96EB62CA8A700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Dec 2025 01:45:23 +0000
Certificate not after:    Sun 26 Mar 2028 00:45:23 +0000
Subordinate resources:    AS: 397469
                          IP: 136.175.243.0/24
                          IP: 2620:91:2000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:39:75:b8:91:d9:6e:b6:2c:a8:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 22 01:45:23 2025 GMT
            Not After : Mar 26 00:45:23 2028 GMT
        Subject: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:6d:61:05:9e:c1:d2:66:3e:37:9f:c1:9d:
                    32:f5:fa:6b:c6:9e:e1:12:a4:42:a1:fc:26:d8:53:
                    66:76:a7:d9:03:01:ad:f2:78:40:d2:da:bd:f5:66:
                    12:91:11:81:b7:9d:05:33:e8:1d:c2:91:ba:2b:1e:
                    cc:a5:a1:64:aa:66:11:40:89:08:96:a8:4b:c3:f9:
                    05:63:49:f4:24:06:a4:72:66:c9:e2:f1:31:cc:67:
                    b2:bf:63:6c:65:a0:cd:bb:71:e8:d4:62:88:e9:b1:
                    03:e6:c4:5b:be:d7:07:b9:29:9c:2b:70:54:87:10:
                    b8:0a:39:6e:f7:dd:4a:e1:bc:6f:38:30:66:23:cb:
                    d9:5d:83:56:bb:a3:a5:a7:fc:a9:44:c1:1a:3f:28:
                    44:54:81:bc:25:34:b6:cd:a3:e6:7a:c0:41:29:19:
                    35:14:37:54:c9:01:2d:4d:a2:37:d7:af:c9:ac:28:
                    90:d8:7e:cf:6a:f4:cf:9a:a0:c3:5e:0a:2f:75:29:
                    d5:56:09:d2:4f:9e:ac:12:09:61:90:e5:88:bd:9e:
                    6a:df:8e:5c:5e:5a:b0:36:0f:4e:5b:2b:4b:38:8f:
                    35:28:f5:19:2d:a2:19:c0:97:22:99:3f:81:c2:42:
                    9c:f2:af:5d:6b:e3:cb:27:9e:5c:2a:de:60:cc:f6:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.243.0/24
                IPv6:
                  2620:91:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397469

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:ee:82:f3:25:4a:94:a8:86:ff:88:d0:8b:a3:a2:83:16:
         80:58:93:de:38:f7:63:61:b0:f1:48:dd:27:5e:36:b5:b5:b1:
         02:13:c6:e0:e8:d7:85:5c:65:02:98:4c:2d:c3:66:db:f7:ec:
         e9:3e:d6:c5:24:e8:8e:11:77:dd:a2:0b:7d:80:60:81:3b:9c:
         6a:f9:47:4b:0c:41:d8:21:ef:13:f2:c1:cc:70:7f:ee:ae:63:
         b2:4e:7c:96:81:22:10:a4:96:ac:a1:40:5f:f4:a2:ad:0b:92:
         63:2d:86:04:59:fc:3c:10:08:4c:9c:7b:0d:fc:06:08:0d:98:
         1c:41:7b:dd:62:6a:f9:e7:f9:d1:7f:14:94:9c:a9:85:4d:0d:
         51:87:2e:16:b5:e2:8f:36:54:00:7b:8a:8c:a7:c0:93:40:4e:
         8c:86:85:91:3b:4a:1f:ea:0b:b1:f4:39:9e:b4:d9:28:a0:51:
         36:04:32:48:89:16:da:1c:7f:a1:e6:cf:8c:b6:36:b3:93:18:
         33:0d:1c:09:80:01:0f:27:cf:b8:3b:72:92:7c:3f:46:00:9d:
         af:26:f7:dc:23:8a:99:b1:22:d7:d8:bf:15:af:6a:a9:df:b7:
         12:3d:82:98:56:91:28:eb:a1:ea:0e:4c:fb:2f:89:e1:48:3a:
         02:60:c0:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----