This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.cer
File:                     9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.cer (raw, json)
Hash identifier:          SvlxB1wBSrYvRT9iZUfF/L9GqNt5JcsuibwOVzr+OQA=
Subject key identifier:   2D:43:F6:D8:5A:87:BE:4A:CF:E0:D4:51:56:55:E8:16:31:23:5B:06
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BE2838395CA6F94D7E35AA840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Nov 2025 01:45:22 +0000
Certificate not after:    Sun 20 Feb 2028 01:45:22 +0000
Subordinate resources:    AS: 33381
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e2:83:83:95:ca:6f:94:d7:e3:5a:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 17 01:45:22 2025 GMT
            Not After : Feb 20 01:45:22 2028 GMT
        Subject: CN=9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:f6:27:0f:49:99:fb:10:c0:8c:79:04:3d:
                    9d:dc:8c:25:67:69:0c:60:a5:ca:53:c5:5d:97:4b:
                    0d:a3:bb:a5:c0:d4:b7:d5:47:c6:32:79:89:0a:78:
                    d0:3e:35:35:ed:08:e8:69:19:f2:ae:47:3a:59:f1:
                    de:ff:36:0a:62:d4:28:78:fe:25:73:17:13:b3:6a:
                    5e:3d:e2:84:f1:53:86:ae:bf:f1:18:0d:a8:de:c2:
                    f4:cb:04:12:b2:02:f1:75:d9:0b:ee:ae:44:6f:f9:
                    ad:67:4e:d0:79:25:40:b5:8b:83:44:91:4f:89:fe:
                    e6:27:df:8b:fa:76:e4:da:b9:69:34:a8:45:e4:b1:
                    6e:45:01:e7:21:f1:f1:1f:b5:a6:ea:3d:08:7e:e9:
                    08:f3:2a:1e:20:bb:45:43:a2:dc:e7:91:64:8c:d6:
                    83:2b:c0:07:97:7e:97:b3:61:89:5a:8c:4f:24:9c:
                    ff:05:81:04:1b:06:bd:a3:05:65:5d:43:48:1a:de:
                    bc:12:51:88:25:d2:57:e4:2a:16:24:c2:ea:63:24:
                    a5:8b:c3:ee:6a:4d:3d:af:b9:f3:bb:1f:a9:d6:5b:
                    31:1e:06:b0:45:e9:9d:45:94:df:a5:ab:e2:09:69:
                    68:10:df:a7:bb:f4:64:15:41:a5:50:df:d6:92:e4:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:F6:D8:5A:87:BE:4A:CF:E0:D4:51:56:55:E8:16:31:23:5B:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33381

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:4f:12:d8:33:37:19:a3:18:c7:d8:e1:7e:9f:f2:e6:36:
         7b:41:64:6c:80:1f:13:7a:52:ec:3a:19:5a:48:97:d9:af:5d:
         d0:30:d9:71:88:a8:1f:09:34:04:b8:c2:b8:ee:f4:0d:9e:d1:
         83:e7:fc:7c:47:92:ab:06:25:3d:97:4c:ff:d3:6a:bd:e4:13:
         ff:a5:a2:37:34:57:2e:83:c9:25:e8:43:b6:f0:d5:a7:01:c4:
         74:cf:21:4a:e6:e6:1b:f9:6f:50:d3:2f:63:b5:c3:27:be:c4:
         33:60:30:2a:df:dd:77:ef:ef:d1:73:2f:63:d6:9e:57:38:65:
         43:1a:92:ea:a8:10:2e:a4:ff:c6:b1:2b:72:22:09:4b:77:c5:
         2a:ea:28:8a:96:b1:96:8f:af:7e:2a:69:3b:57:eb:5e:85:94:
         bf:d0:40:ab:b0:ed:e7:fe:a4:46:a6:f2:f5:19:39:15:e4:d0:
         0e:be:98:f3:a7:dc:98:ff:f2:7b:ee:7a:13:25:06:f0:27:81:
         03:55:d3:26:34:d4:ea:03:1f:8b:de:2c:9f:fa:41:e1:14:d1:
         ea:f3:20:ff:07:26:9e:0d:82:32:d5:99:09:c6:c8:e8:e0:35:
         90:75:3e:63:e7:6e:eb:bb:eb:e9:6c:08:31:ab:98:57:d7:7f:
         bf:f0:6f:19
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEvig4OVym+U1+NaqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI1MTExNzAxNDUyMloXDTI4MDIyMDAxNDUyMlowLzEtMCsGA1UEAxMk
OWE3Y2Y1ZTktNmE2MS00YWIzLWFmZmMtYTVlYzE3YWMzNjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFv2Jw9JmfsQwIx5BD2d3IwlZ2kMYKXKU8Vd
l0sNo7ulwNS31UfGMnmJCnjQPjU17QjoaRnyrkc6WfHe/zYKYtQoeP4lcxcTs2pe
PeKE8VOGrr/xGA2o3sL0ywQSsgLxddkL7q5Eb/mtZ07QeSVAtYuDRJFPif7mJ9+L
+nbk2rlpNKhF5LFuRQHnIfHxH7Wm6j0IfukI8yoeILtFQ6Lc55FkjNaDK8AHl36X
s2GJWoxPJJz/BYEEGwa9owVlXUNIGt68ElGIJdJX5CoWJMLqYySli8Puak09r7nz
ux+p1lsxHgawRemdRZTfpaviCWloEN+nu/RkFUGlUN/WkuRtXwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFC1D9thah75Kz+DUUVZV6BYxI1sGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85
YTdjZjVlOS02YTYxLTRhYjMtYWZmYy1hNWVjMTdhYzM2NDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzlhN2NmNWU5LTZhNjEtNGFiMy1h
ZmZjLWE1ZWMxN2FjMzY0Ni85YTdjZjVlOS02YTYxLTRhYjMtYWZmYy1hNWVjMTdh
YzM2NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAIJlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAApTTxLYMzcZoxjH2OF+n/LmNntB
ZGyAHxN6Uuw6GVpIl9mvXdAw2XGIqB8JNAS4wrju9A2e0YPn/HxHkqsGJT2XTP/T
ar3kE/+lojc0Vy6DySXoQ7bw1acBxHTPIUrm5hv5b1DTL2O1wye+xDNgMCrf3Xfv
79FzL2PWnlc4ZUMakuqoEC6k/8axK3IiCUt3xSrqKIqWsZaPr34qaTtX616FlL/Q
QKuw7ef+pEam8vUZORXk0A6+mPOn3Jj/8nvuehMlBvAngQNV0yY01OoDH4veLJ/6
QeEU0erzIP8HJp4NgjLVmQnGyOjgNZB1PmPnbuu76+lsCDGrmFfXf7/wbxk=
-----END CERTIFICATE-----