This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b519ea60-4d8d-4415-b6fe-d2aac7499732.cer
File:                     b519ea60-4d8d-4415-b6fe-d2aac7499732.cer (raw, json)
Hash identifier:          XbAm6TidWsFB1f8qUgx58ZwH/NC7V8R7/MHztDnJ8c0=
Subject key identifier:   90:BB:44:48:E0:B4:DC:50:36:E3:59:9D:11:10:25:71:8C:BD:2C:0A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C5ED9B93692BBC75F9FF830E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b519ea60-4d8d-4415-b6fe-d2aac7499732/b519ea60-4d8d-4415-b6fe-d2aac7499732.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b519ea60-4d8d-4415-b6fe-d2aac7499732/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Dec 2025 14:39:18 +0000
Certificate not after:    Tue 12 Jan 2027 17:20:44 +0000
Subordinate resources:    AS: 21899
                          AS: 46453
                          IP: 150.202.0.0/16
                          IP: 2620:7a:4000::/48
                          IP: 2620:85:8000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:d9:b9:36:92:bb:c7:5f:9f:f8:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 31 14:39:18 2025 GMT
            Not After : Jan 12 17:20:44 2027 GMT
        Subject: CN=b519ea60-4d8d-4415-b6fe-d2aac7499732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:61:58:61:d3:f9:40:f9:c0:3c:10:a3:2b:
                    fa:b7:cb:48:dc:54:bd:b2:3e:43:e1:60:9b:60:8b:
                    09:80:da:67:07:ad:26:bd:5c:2c:dd:74:ae:5f:7f:
                    b2:31:2c:a3:45:de:c1:68:8a:02:db:18:b8:27:67:
                    63:ac:82:50:f9:a0:e4:4b:6c:6e:0b:bb:96:ee:49:
                    06:88:7f:68:49:2c:06:a0:e8:32:2c:bb:3d:89:12:
                    a6:1c:b2:51:c9:6c:0f:51:d6:a4:86:a5:d4:f4:ea:
                    f3:37:aa:68:a6:8a:76:a6:66:54:50:4d:bb:58:fb:
                    78:55:db:7a:6e:b4:90:f2:c1:10:28:98:a3:e1:f3:
                    63:96:84:0b:6d:c5:df:6e:98:a0:3d:15:ba:e5:bb:
                    64:6e:13:dc:eb:ca:ba:9e:6d:78:bc:7c:7b:30:73:
                    16:04:b9:15:7b:d3:7e:88:08:be:0b:b3:f7:5b:44:
                    58:c0:fe:46:12:37:d1:71:60:7a:1f:3a:30:6c:11:
                    b3:42:0b:ea:28:3c:d6:1c:9f:03:9c:1d:43:c2:11:
                    b0:48:3c:0e:0b:d6:78:ea:39:99:20:95:54:e9:9f:
                    24:a8:9b:9d:c6:c2:7f:74:82:a7:c2:28:51:c3:07:
                    87:ed:c8:d7:52:aa:52:8f:76:0b:2a:4b:15:bd:8f:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BB:44:48:E0:B4:DC:50:36:E3:59:9D:11:10:25:71:8C:BD:2C:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b519ea60-4d8d-4415-b6fe-d2aac7499732/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b519ea60-4d8d-4415-b6fe-d2aac7499732/b519ea60-4d8d-4415-b6fe-d2aac7499732.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.202.0.0/16
                IPv6:
                  2620:7a:4000::/48
                  2620:85:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21899
                  46453

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:79:cd:b0:56:b3:2c:da:26:2b:80:4a:6f:04:3b:65:e6:
         d8:74:19:e7:d8:a5:51:30:b9:21:13:d1:ee:5a:b6:75:1a:33:
         e5:4b:e7:53:35:ff:68:f4:2d:39:72:37:2b:93:a7:04:e8:42:
         0d:32:85:8d:44:c5:54:51:d8:4d:17:21:86:b2:68:10:ab:79:
         7f:c0:d4:38:48:36:3c:6e:57:fc:3a:31:79:24:d0:00:ba:f7:
         d5:8a:b9:d0:93:ef:c6:fc:e6:1f:1e:87:51:5d:92:63:2c:ee:
         6f:62:49:b5:66:3d:9c:61:eb:3c:2e:5c:6f:e2:e7:13:44:31:
         ad:6a:fc:c4:9d:32:2e:31:ec:d6:94:ab:9b:79:bf:61:d3:b7:
         ab:34:74:e2:79:82:e1:b6:cb:5b:ac:91:94:0e:d2:7f:fb:01:
         c3:a7:17:ec:a9:a2:cb:9b:4c:d1:b2:08:70:0c:88:16:24:2a:
         5a:17:62:2d:06:e1:41:ba:2c:f3:59:17:7a:f9:69:4c:34:34:
         c9:20:3d:00:ac:c2:60:a2:06:2d:e1:b2:c4:c9:dd:74:14:64:
         7d:97:02:9b:6b:21:2e:f3:c7:b6:43:82:04:e1:31:69:df:a9:
         11:2a:4a:e1:08:ce:2c:52:3a:90:68:89:07:30:af:66:a0:f4:
         08:0e:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----