This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
File:                     c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer (raw, json)
Hash identifier:          G5xt4k7dmMvjC3JJSbvUf+x3jYfA0dfOmlK0XoGELyo=
Subject key identifier:   1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority key identifier: 45:9A:B2:6F:09:F2:67:EA:36:DF:CB:26:C0:BA:62:26:67:1C:4B:B1
Certificate issuer:       /CN=0a3db4ff-9cd8-4d02-a027-6fa90494a3a1
Certificate serial:       010D0C9F4328584C54F991FBC3EA8EE099B06E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/notification.xml
Certificate not before:   Sun 28 Dec 2025 01:45:23 +0000
Certificate not after:    Sat 01 Apr 2028 00:45:23 +0000
Subordinate resources:    IP: 2606:f40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:54:f9:91:fb:c3:ea:8e:e0:99:b0:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a3db4ff-9cd8-4d02-a027-6fa90494a3a1
        Validity
            Not Before: Dec 28 01:45:23 2025 GMT
            Not After : Apr  1 00:45:23 2028 GMT
        Subject: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:c0:f5:87:50:c5:b3:6d:e2:35:af:cf:98:
                    2e:36:1b:34:0e:6d:1e:15:52:bd:75:dd:db:d3:64:
                    14:f5:81:38:d8:d4:bb:8b:8e:98:7f:bf:ea:a3:cb:
                    ee:f5:5f:7f:c2:ab:c0:63:0d:ff:8b:85:dd:b1:6d:
                    2e:4f:5f:07:90:56:2d:0c:f8:39:a1:e1:fa:8c:59:
                    6a:4d:da:c1:67:2f:25:3b:33:af:fc:9c:05:41:82:
                    10:02:d6:c1:21:b2:b1:23:f5:df:50:c6:ab:1b:54:
                    5c:1c:df:52:8f:60:13:21:c4:a1:8a:21:5d:9e:12:
                    29:d7:dc:9a:7c:eb:24:a7:96:d0:86:70:7c:ec:37:
                    eb:f6:e5:9e:e8:06:ce:55:98:7c:5f:71:88:3f:a9:
                    0b:53:57:f0:71:ef:7b:29:b0:90:1b:82:11:5a:8e:
                    04:ca:de:66:90:b5:b1:a0:32:27:2d:03:7c:78:46:
                    3d:82:de:15:f7:ab:01:3d:1b:5c:8c:a7:c7:1f:62:
                    d2:3a:d5:4f:c1:08:1b:6e:38:16:9d:d0:c8:b2:48:
                    74:89:02:91:3f:e2:c0:8f:22:69:7f:ed:27:04:3f:
                    71:51:78:a5:7c:4d:bf:fc:6d:5f:5b:cf:36:42:9f:
                    0e:93:31:28:8a:ff:35:af:56:b1:74:dc:5a:5c:b3:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl

            X509v3 Authority Key Identifier:
                keyid:45:9A:B2:6F:09:F2:67:EA:36:DF:CB:26:C0:BA:62:26:67:1C:4B:B1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:11:b8:35:23:d9:b7:ee:47:b4:f3:3c:6f:dd:b8:4e:27:
         8d:0d:91:98:28:92:ad:99:83:66:db:6e:cf:63:18:f5:70:ef:
         60:7e:02:a6:8b:59:74:9c:c1:ac:70:27:52:49:a3:75:a9:8c:
         21:55:2f:32:23:47:ca:e5:1c:91:8c:b0:e7:84:0a:a4:0d:ec:
         1b:ad:d8:67:7e:a0:69:d7:78:8c:3b:26:b7:56:9d:02:5d:da:
         6b:9f:44:e1:df:3e:14:e4:e9:8a:aa:15:21:87:92:73:f3:57:
         b1:ec:ad:19:4e:b6:7a:47:dd:7e:9a:e0:da:1b:55:f5:90:18:
         1a:2c:8d:55:e1:0f:a6:bf:c0:31:14:d7:59:36:41:85:fa:1f:
         17:b6:7f:a6:d4:68:a5:4c:de:96:2b:17:6c:b4:48:93:df:6a:
         27:99:16:6a:6d:0b:49:4a:83:ef:0e:0f:3f:ed:41:b7:10:4d:
         7d:61:35:ba:58:88:c2:5b:28:d3:e7:65:ec:99:4d:ab:c7:df:
         41:99:28:58:46:93:5d:de:6e:13:d5:29:62:63:b6:c2:a3:10:
         e0:e3:db:92:59:34:39:24:16:6c:45:39:45:e2:29:f2:7f:6b:
         2e:84:52:99:54:5a:eb:07:05:91:50:db:21:71:e2:12:9a:41:
         c3:e8:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----