This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
File:                     42a8a836-8100-4561-9bfc-5462d4161596.cer (raw, json)
Hash identifier:          Tud61YgnIKefOBwcz+mDNoz3EeeiLbmQqcV+74lSRXU=
Subject key identifier:   6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584BC3CDFF88CD41D38A4E309080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Nov 2025 01:45:23 +0000
Certificate not after:    Wed 09 Feb 2028 01:45:23 +0000
Subordinate resources:    AS: 4474
                          IP: 24.51.50.0/23
                          IP: 24.72.192.0 -- 24.72.203.255
                          IP: 24.223.100.0/22
                          IP: 67.215.16.0/20
                          IP: 72.21.64.0/20
                          IP: 96.31.96.0/19
                          IP: 104.36.40.0/22
                          IP: 162.248.136.0/22
                          IP: 2604:8c00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c3:cd:ff:88:cd:41:d3:8a:4e:30:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Nov  6 01:45:23 2025 GMT
            Not After : Feb  9 01:45:23 2028 GMT
        Subject: CN=42a8a836-8100-4561-9bfc-5462d4161596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:f7:b8:07:0d:43:b3:cd:2d:4b:45:c7:60:
                    97:c0:6b:1d:5a:04:97:0b:21:af:ba:92:d8:79:87:
                    47:f6:52:e5:b4:5f:ed:e3:d3:3b:cc:ff:76:d0:58:
                    b1:0c:3e:67:7f:7f:eb:32:b5:62:0c:ab:96:92:86:
                    78:90:73:4f:a6:38:58:76:21:2e:dd:33:03:11:d3:
                    92:39:55:b4:18:b1:00:ad:32:e0:ec:ae:a2:a3:78:
                    8d:07:cc:c8:68:cb:c0:a2:85:6e:46:47:5f:45:85:
                    69:df:f3:01:e5:6d:0e:de:ad:4a:8f:3e:d9:e0:06:
                    34:c3:4e:c9:38:91:c0:50:08:43:66:90:bb:a8:0c:
                    1a:17:a9:e5:a7:94:b1:6f:d7:95:a3:d4:67:27:ba:
                    55:e1:bc:c4:1b:63:6b:7d:94:f8:79:fd:0a:73:a7:
                    32:59:e6:f6:5b:f5:cb:8b:2f:02:35:ab:ee:07:4e:
                    6c:15:37:0e:e0:00:b0:2a:b1:5c:36:0e:c5:41:38:
                    fe:3f:a6:ea:57:53:69:ee:6f:c6:e5:01:3e:41:22:
                    a8:6d:0c:c4:db:a2:44:ab:db:13:5a:87:35:3a:84:
                    d0:07:22:38:38:36:1b:3f:f2:93:d2:d8:e8:66:f5:
                    be:b3:3a:ec:89:e7:d5:0c:3b:92:86:69:c3:8d:3e:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.50.0/23
                  24.72.192.0-24.72.203.255
                  24.223.100.0/22
                  67.215.16.0/20
                  72.21.64.0/20
                  96.31.96.0/19
                  104.36.40.0/22
                  162.248.136.0/22
                IPv6:
                  2604:8c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4474

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:9e:c7:18:69:dd:51:c6:14:9d:78:57:24:8d:e7:06:f7:
         36:73:98:19:e0:a3:53:dd:f0:0d:43:65:7c:ed:e9:6b:24:f4:
         30:6c:10:f0:eb:25:96:90:80:8c:55:5c:cc:0b:d8:52:e8:52:
         87:ea:68:93:06:7b:06:1a:08:c5:26:b1:60:dc:5d:d5:4d:df:
         2a:ed:9f:24:0e:b0:82:af:77:11:a9:06:af:63:0e:35:17:bf:
         cd:20:c4:a5:0b:dd:ad:07:46:20:c3:49:e1:af:6f:31:06:d3:
         6c:dd:d4:c9:b0:46:f7:7c:0d:c5:da:4d:d1:62:b3:33:e4:2a:
         09:47:26:31:b4:af:a4:d2:73:be:0c:3a:3d:fb:d8:7a:e8:43:
         b3:93:9a:1d:a6:5e:73:ac:dd:f8:67:f2:a4:e3:b1:ae:e0:11:
         7d:8f:e2:f5:5a:42:57:64:cd:04:5a:2b:69:61:76:67:01:7b:
         f0:30:58:9b:12:d2:3d:05:b4:aa:f9:00:d1:b3:0c:2b:15:7b:
         59:7c:5c:18:b9:f4:62:91:ea:19:df:e3:bd:81:71:39:63:c5:
         bc:36:57:10:55:5e:40:60:f3:14:08:02:a4:58:6d:f2:43:69:
         55:ef:17:4a:12:86:76:b8:95:98:f1:59:95:ce:7a:27:9c:6d:
         0a:25:a4:70
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWEvDzf+IzUHTik4wkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI1MTEwNjAxNDUyM1oXDTI4MDIwOTAxNDUyM1owLzEtMCsGA1UEAxMk
NDJhOGE4MzYtODEwMC00NTYxLTliZmMtNTQ2MmQ0MTYxNTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CP3uAcNQ7PNLUtFx2CXwGsdWgSXCyGvupLY
eYdH9lLltF/t49M7zP920FixDD5nf3/rMrViDKuWkoZ4kHNPpjhYdiEu3TMDEdOS
OVW0GLEArTLg7K6io3iNB8zIaMvAooVuRkdfRYVp3/MB5W0O3q1Kjz7Z4AY0w07J
OJHAUAhDZpC7qAwaF6nlp5Sxb9eVo9RnJ7pV4bzEG2NrfZT4ef0Kc6cyWeb2W/XL
iy8CNavuB05sFTcO4ACwKrFcNg7FQTj+P6bqV1Np7m/G5QE+QSKobQzE26JEq9sT
Woc1OoTQByI4ODYbP/KT0tjoZvW+szrsiefVDDuShmnDjT4c1wIDAQABo4IEWzCC
BFcwHQYDVR0OBBYEFG30yHpmHMrkrwz4SsVKaA3hgz9dMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80
MmE4YTgzNi04MTAwLTQ1NjEtOWJmYy01NDYyZDQxNjE1OTYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQyYThhODM2LTgxMDAtNDU2MS05
YmZjLTU0NjJkNDE2MTU5Ni80MmE4YTgzNi04MTAwLTQ1NjEtOWJmYy01NDYyZDQx
NjE1OTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwYAYIKwYBBQUH
AQcBAf8EUTBPMD4EAgABMDgDBAEYMzIwDAMEBhhIwAMEAhhIyAMEAhjfZAMEBEPX
EAMEBEgVQAMEBWAfYAMEAmgkKAMEAqL4iDANBAIAAjAHAwUAJgSMADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgIRejBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKTZ7HGGndUcYUnXhXJI3nBvc2
c5gZ4KNT3fANQ2V87elrJPQwbBDw6yWWkICMVVzMC9hS6FKH6miTBnsGGgjFJrFg
3F3VTd8q7Z8kDrCCr3cRqQavYw41F7/NIMSlC92tB0Ygw0nhr28xBtNs3dTJsEb3
fA3F2k3RYrMz5CoJRyYxtK+k0nO+DDo9+9h66EOzk5odpl5zrN34Z/Kk47Gu4BF9
j+L1WkJXZM0EWitpYXZnAXvwMFibEtI9BbSq+QDRswwrFXtZfFwYufRikeoZ3+O9
gXE5Y8W8NlcQVV5AYPMUCAKkWG3yQ2lV7xdKEoZ2uJWY8VmVznonnG0KJaRw
-----END CERTIFICATE-----
Generated at Tue Nov 25 05:05:10 2025 by rpki-client