This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
File:                     b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer (raw, json)
Hash identifier:          wzPOpKJVqDvW0z5S5+vf7t3VGIaDVJIuxA3iGM9BDSw=
Subject key identifier:   66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584BCC2E0DC09F0DC6D885ABA2C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 09 Nov 2025 01:45:24 +0000
Certificate not after:    Sat 12 Feb 2028 01:45:24 +0000
Subordinate resources:    AS: 22439
                          IP: 64.56.64.0/20
                          IP: 70.36.96.0/19
                          IP: 74.81.32.0/19
                          IP: 74.222.0.0/19
                          IP: 2607:fa98::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cc:2e:0d:c0:9f:0d:c6:d8:85:ab:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Nov  9 01:45:24 2025 GMT
            Not After : Feb 12 01:45:24 2028 GMT
        Subject: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:30:d1:83:88:89:87:41:5f:f1:98:cc:6b:
                    da:d4:48:52:36:33:88:1c:d2:da:42:5a:c0:ee:4b:
                    c8:bd:90:42:f7:bd:b6:cd:3e:4b:3d:21:f6:3e:72:
                    1e:0d:08:e8:5d:3b:61:4f:5c:ff:8d:01:4d:91:c6:
                    22:8e:6c:37:33:3c:f7:f1:38:df:25:23:2c:d0:7a:
                    3a:d1:93:54:f2:dd:55:6c:a6:7d:dc:4a:ac:36:1e:
                    c5:59:54:c1:b2:43:4b:3c:de:1f:8a:1c:29:40:01:
                    fb:f3:31:9d:81:1d:7b:d6:49:40:2f:9a:b6:f8:ca:
                    a2:8b:c2:ad:82:77:cf:86:e5:63:ea:e2:bc:d9:36:
                    7e:f0:eb:fd:d9:70:67:79:ed:b8:e1:d7:c3:25:74:
                    3f:74:76:d4:6b:e3:48:5b:08:99:5d:22:64:e3:12:
                    55:20:3d:66:b8:78:8f:41:bc:68:46:6d:a2:42:bf:
                    1c:5c:01:a8:74:8c:e3:80:22:fa:62:2b:4c:ae:1b:
                    ed:83:b5:f5:11:8e:a9:04:72:12:fd:4b:57:85:f8:
                    5f:c4:ae:19:3d:b8:64:b5:ac:2d:16:4e:b2:9a:42:
                    94:f9:fa:14:d5:62:01:67:1f:cd:63:eb:d4:5c:cf:
                    c4:1c:96:24:a9:87:a0:12:42:7c:53:d3:64:cf:83:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.64.0/20
                  70.36.96.0/19
                  74.81.32.0/19
                  74.222.0.0/19
                IPv6:
                  2607:fa98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22439

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:87:61:00:25:cc:ce:37:21:9e:bb:d9:7a:c8:60:25:a1:62:
         7d:80:40:22:bc:39:d3:59:80:0e:b7:bd:76:57:93:fd:59:a5:
         4c:e4:54:39:bc:d3:13:fd:81:ce:73:37:28:02:ab:7d:b7:3e:
         e2:f7:86:b2:a7:32:c1:be:60:0e:95:1c:3a:5d:91:da:d3:4e:
         fd:ea:de:e2:3c:0e:6c:8a:d7:45:26:73:54:cd:cb:d4:7e:2a:
         d3:d0:3f:d3:91:f1:3c:48:7a:ee:1e:c6:a1:f1:36:0e:af:fe:
         dc:75:63:21:73:ae:5b:2c:83:bc:59:a6:78:f1:08:13:9b:b8:
         b5:38:6d:16:ff:d4:2b:24:f1:4d:73:96:bc:f4:5c:e3:8f:e8:
         e5:4f:ff:1c:e9:86:71:ec:af:50:19:02:a7:4f:e3:d8:ec:71:
         3c:5f:b5:c0:01:14:9b:80:a9:a5:b9:9d:9b:6c:9c:f3:43:04:
         e5:e1:64:3c:5f:b9:65:b1:8b:e4:38:57:2b:4f:dd:a0:17:55:
         a0:e5:e8:b6:2e:e7:4b:2e:8e:21:00:47:48:19:03:94:6b:f3:
         a9:10:44:c4:a5:b4:a3:3c:a8:64:a3:bf:b3:4e:83:7c:68:db:
         8d:f6:5a:49:03:2c:c3:cf:5a:0b:e3:78:70:c6:e1:0c:bf:b3:
         98:24:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 04:58:49 2025 by rpki-client