This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
File:                     c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer (raw, json)
Hash identifier:          Tq0W542xnrFN417QOKNwXMTPWo6yrNMAmeRlk+4HZIM=
Subject key identifier:   7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584BF3439EE8D09456B37D994240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Nov 2025 01:45:22 +0000
Certificate not after:    Sat 26 Feb 2028 01:45:22 +0000
Subordinate resources:    IP: 2607:1c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f3:43:9e:e8:d0:94:56:b3:7d:99:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 23 01:45:22 2025 GMT
            Not After : Feb 26 01:45:22 2028 GMT
        Subject: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:00:7e:d7:71:e2:1c:d3:fe:ae:a7:90:98:
                    08:43:f9:71:8b:8e:72:9b:9f:b4:8e:40:5f:e2:05:
                    69:e1:de:c5:16:d9:ba:3c:ab:26:a9:a0:2a:4b:a1:
                    62:f9:4b:29:8f:60:e0:bb:0b:96:2e:37:d4:85:73:
                    8f:03:0c:d1:8b:21:99:22:53:ce:20:9d:d8:08:39:
                    cd:e2:59:2f:96:57:d5:89:fc:a2:24:fe:64:1a:6b:
                    66:38:19:35:8d:10:00:62:da:ac:5c:ca:4a:48:fe:
                    80:21:f5:23:93:f1:c6:f1:bf:85:59:b2:00:d3:1c:
                    0a:3b:dd:b7:86:e2:31:25:f6:e3:29:ed:af:5d:65:
                    1b:b0:de:bd:59:a7:95:47:6f:1e:cb:73:17:61:63:
                    2b:a0:79:1a:21:b1:e3:8c:15:0a:d9:95:a4:ab:f9:
                    a4:14:47:5c:e5:92:8f:f5:0d:9b:ab:79:b5:d5:84:
                    ab:b5:95:ba:af:cc:d8:2d:39:91:9d:69:60:48:91:
                    50:79:c7:e8:81:92:4d:b0:2d:f1:b6:50:11:59:28:
                    39:56:aa:25:10:9a:12:29:e3:37:d3:72:bb:38:5a:
                    e9:ac:a1:5d:46:f9:f6:f0:eb:25:6e:d1:49:d4:45:
                    9b:2a:5b:cf:0f:0d:8a:85:67:0d:21:d6:19:69:1a:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:0b:29:21:d0:e9:77:10:ba:86:43:d6:a9:a8:48:8f:87:
         aa:4e:70:46:85:1a:27:63:43:ac:58:0b:a7:11:bc:f3:1a:68:
         00:9c:9f:39:05:cb:ee:f1:3b:fa:d7:c0:4d:7e:b8:d7:5d:f5:
         69:49:c7:7a:9d:ff:b4:6a:df:01:fc:b9:8d:ed:c8:16:e3:3c:
         53:19:3e:ff:b7:b4:52:2b:c7:a5:c5:dd:7b:fe:f7:a2:b9:62:
         ab:c9:37:42:cf:09:bd:34:0c:6f:67:98:e6:28:b2:34:ca:5c:
         43:d8:35:f0:fd:62:3b:85:d5:e3:57:d9:5c:f2:87:a8:e0:4d:
         9d:2b:c4:8c:b1:bd:ac:d6:46:8f:d4:35:0b:75:7e:88:1b:eb:
         8d:04:e3:11:66:98:f1:81:0d:94:59:7d:29:97:f0:f6:41:83:
         ed:d1:13:d5:c3:2f:35:f6:4d:c6:94:a2:d8:ec:cc:7d:11:4a:
         f1:6f:fd:57:91:81:31:9b:d8:b7:5c:e3:98:53:9a:b3:db:f6:
         21:23:59:a8:e8:c6:10:38:ec:f2:66:d3:14:5c:29:71:57:e2:
         9e:44:2c:3b:69:9e:91:42:62:0a:cf:64:0a:8e:9e:fd:ea:c6:
         cb:8d:1f:e8:5f:08:da:4d:19:c5:cb:f0:2f:6a:7b:c7:bb:38:
         84:7e:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----