This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
File:                     07b1b458-5261-4e4a-a0fc-1757fe461f75.cer (raw, json)
Hash identifier:          KicEF3A29hkMX5WADamC28qFgfTsMmEvCUoysbeD0gw=
Subject key identifier:   93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584BD48E1B317AF747FAFAD69380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 01:45:24 +0000
Certificate not after:    Tue 15 Feb 2028 01:45:24 +0000
Subordinate resources:    AS: 20371
                          IP: 66.111.32.0/20
                          IP: 199.202.216.0/21
                          IP: 2604:a740::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d4:8e:1b:31:7a:f7:47:fa:fa:d6:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Nov 12 01:45:24 2025 GMT
            Not After : Feb 15 01:45:24 2028 GMT
        Subject: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:4f:ac:94:76:56:c5:6b:24:fd:07:c2:ec:
                    85:1e:2f:e5:78:eb:4e:d5:67:2f:c8:0e:d9:fa:0b:
                    aa:11:24:94:56:b1:12:ba:8b:eb:a4:4a:6f:c9:56:
                    d0:0e:eb:ae:bd:c4:47:a0:4a:fb:96:71:1c:68:32:
                    52:e8:48:7b:03:7d:e2:a3:cd:69:b3:44:17:13:e9:
                    d9:b6:61:0c:82:e0:07:73:68:58:e0:73:4b:83:8b:
                    a3:b8:2b:96:d8:cf:57:fc:81:21:95:ee:39:9b:c0:
                    e7:33:4d:a4:70:bb:25:b3:17:7f:7d:aa:4f:8b:bd:
                    c4:0f:2e:59:86:2b:05:2c:83:27:75:2f:6b:3b:df:
                    df:a7:e8:81:af:29:41:a9:96:dd:46:81:70:84:f6:
                    59:cb:91:b8:62:a1:cb:9a:dd:7b:8c:c9:8c:00:eb:
                    9c:19:27:47:7e:d5:1a:1a:f4:5f:6d:15:3c:11:01:
                    50:17:00:6f:cd:59:6f:56:33:f2:71:6a:42:ab:2a:
                    03:fe:92:1d:bd:39:12:ca:72:2a:97:fb:5c:2b:46:
                    9f:ce:e0:f8:97:2f:bd:6f:b8:9c:22:3a:84:23:80:
                    f9:ac:84:9b:b2:cb:7f:e5:5f:c4:54:79:b6:55:3e:
                    29:c8:5d:17:b6:90:10:d6:77:04:7a:3c:a5:b6:b2:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.32.0/20
                  199.202.216.0/21
                IPv6:
                  2604:a740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20371

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d1:aa:7c:e1:3e:1f:cf:6d:62:9f:37:65:e8:b2:c0:d7:82:
         52:8d:3b:c7:5b:89:97:59:0a:12:87:61:f5:59:04:18:98:7d:
         d0:d1:3b:5c:32:b7:64:97:7c:ba:82:5e:a9:19:7f:a0:92:5c:
         09:93:d0:96:24:24:f0:46:c3:6e:66:74:29:70:b4:c0:89:dc:
         e2:6e:f8:9c:58:60:93:e7:ba:16:9b:a1:6d:48:60:57:8e:5d:
         a7:0b:64:4d:01:82:81:8d:dd:3d:85:db:c1:f5:ef:a2:99:fb:
         34:fb:90:74:53:d4:d3:98:82:f8:5f:13:a9:2b:fa:cd:2f:92:
         d1:78:ec:62:be:15:b9:84:a8:bd:66:bc:ec:7f:6c:5b:f0:9b:
         8e:67:05:3c:02:8c:cc:43:48:6a:eb:4d:6f:a1:3c:2c:d8:6e:
         2f:39:9b:b4:d9:fb:e4:e0:ea:e9:e2:af:6e:db:6c:e9:6c:85:
         ed:8a:a8:43:a4:64:7d:cb:66:c4:da:07:fd:56:dd:4c:58:02:
         2e:bb:78:22:0d:76:a2:73:54:1f:c0:26:f4:5b:12:2d:37:0b:
         af:5a:49:f2:7f:7f:d0:62:bd:60:f5:e0:39:de:54:61:a8:ce:
         8a:36:cc:d4:1a:44:78:6e:55:e8:ca:48:e6:de:a1:00:6e:b9:
         21:ee:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 05:03:13 2025 by rpki-client