This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
File:                     329c727b-a867-426a-ad3d-167aed3107dd.cer (raw, json)
Hash identifier:          Fk/bCZL6EjOFNQJ/XG8zy7eku0t388Gg2Ajj/gcpu4I=
Subject key identifier:   3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584BD8E64FCE737A6866251ADA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Nov 2025 15:06:21 +0000
Certificate not after:    Sun 18 Jul 2027 18:36:23 +0000
Subordinate resources:    AS: 6327
                          AS: 10482
                          AS: 14562
                          AS: 19075
                          AS: 19561
                          AS: 25983
                          AS: 32247
                          AS: 62487
                          IP: 24.64.0.0/13
                          IP: 24.76.0.0 -- 24.87.255.255
                          IP: 24.108.0.0/15
                          IP: 24.244.0.0/18
                          IP: 50.64.0.0 -- 50.72.255.255
                          IP: 64.59.128.0/18
                          IP: 64.141.0.0/17
                          IP: 64.251.64.0/19
                          IP: 66.163.64.0/20
                          IP: 66.244.192.0/18
                          IP: 68.144.0.0/13
                          IP: 69.196.64.0/19
                          IP: 70.64.0.0/12
                          IP: 72.2.0.0/18
                          IP: 72.29.224.0/19
                          IP: 74.3.128.0/18
                          IP: 96.48.0.0/13
                          IP: 104.219.156.0/22
                          IP: 162.217.232.0/21
                          IP: 173.214.128.0/20
                          IP: 174.0.0.0/13
                          IP: 184.64.0.0/13
                          IP: 204.12.144.0/20
                          IP: 204.209.208.0/21
                          IP: 206.174.192.0/19
                          IP: 208.66.112.0/21
                          IP: 208.98.192.0 -- 208.98.221.255
                          IP: 208.98.224.0/19
                          IP: 208.118.64.0/18
                          IP: 2001:4e8::/32
                          IP: 2604:3d00::/28
                          IP: 2606:b800::/32
                          IP: 2607:ffb0::/32
                          IP: 2620:8::/41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:e6:4f:ce:73:7a:68:66:25:1a:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 13 15:06:21 2025 GMT
            Not After : Jul 18 18:36:23 2027 GMT
        Subject: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:8d:3e:5b:93:3f:78:cf:34:a8:0b:58:77:
                    8f:01:84:e4:e2:f9:d6:a1:a5:07:3b:39:7c:0c:ac:
                    72:d9:2a:2c:b4:e6:41:35:3a:a4:07:a7:5b:06:7e:
                    f9:38:e9:53:a1:1e:a8:bf:a0:49:5f:b4:82:99:38:
                    53:8d:8e:1f:6b:aa:4d:5a:3e:a6:9a:4b:23:97:d6:
                    60:38:bb:02:67:48:9d:11:d9:10:03:b6:3e:3a:a2:
                    54:20:84:19:cb:9c:5b:52:3e:3d:78:4f:4b:b7:78:
                    ab:43:57:2a:61:f1:29:02:2d:ab:ed:85:07:44:e1:
                    d6:5b:a2:a7:07:ae:22:f5:c8:2a:bc:6f:4f:ad:d7:
                    34:8e:60:27:51:3c:fa:0f:79:bf:66:ac:af:c1:5b:
                    e8:de:9c:35:d4:57:d3:3a:b7:6a:cf:b2:ad:a5:59:
                    14:da:5b:88:3c:d2:43:2b:99:1f:1d:18:18:cf:7c:
                    4c:77:94:f7:8c:81:10:bf:2b:12:ff:61:3a:20:01:
                    67:02:6a:cd:b6:b6:49:53:ec:e3:c0:a0:27:d7:72:
                    37:d0:91:9d:a6:9d:b5:b2:09:02:43:fb:49:ae:2c:
                    3f:93:21:aa:27:fc:d4:6b:b5:c6:a9:9b:f9:4c:ef:
                    67:59:ee:e4:4f:f1:41:36:ae:8b:4b:59:b6:0d:85:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.64.0.0/13
                  24.76.0.0-24.87.255.255
                  24.108.0.0/15
                  24.244.0.0/18
                  50.64.0.0-50.72.255.255
                  64.59.128.0/18
                  64.141.0.0/17
                  64.251.64.0/19
                  66.163.64.0/20
                  66.244.192.0/18
                  68.144.0.0/13
                  69.196.64.0/19
                  70.64.0.0/12
                  72.2.0.0/18
                  72.29.224.0/19
                  74.3.128.0/18
                  96.48.0.0/13
                  104.219.156.0/22
                  162.217.232.0/21
                  173.214.128.0/20
                  174.0.0.0/13
                  184.64.0.0/13
                  204.12.144.0/20
                  204.209.208.0/21
                  206.174.192.0/19
                  208.66.112.0/21
                  208.98.192.0-208.98.221.255
                  208.98.224.0/19
                  208.118.64.0/18
                IPv6:
                  2001:4e8::/32
                  2604:3d00::/28
                  2606:b800::/32
                  2607:ffb0::/32
                  2620:8::/41

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6327
                  10482
                  14562
                  19075
                  19561
                  25983
                  32247
                  62487

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:a7:76:11:8b:d4:a0:da:48:ff:71:32:5e:67:10:79:ec:
         ed:cc:14:2f:69:bc:09:6f:ba:80:76:2c:61:e8:22:cf:29:77:
         a0:d3:f8:8e:33:3b:10:a8:38:9e:01:b0:30:29:f0:7e:1b:80:
         f5:e9:aa:42:ac:91:cc:fa:85:3e:f0:0f:9f:4e:45:bf:dd:b1:
         13:52:ee:f1:3a:66:62:f2:c2:9c:9e:cb:3d:69:6b:f2:b2:0b:
         6e:9b:52:dc:d0:b8:26:62:5a:ba:bf:c4:40:5d:e9:49:4c:c8:
         14:49:f7:9a:e9:2f:d3:bb:fc:4d:f0:a3:1f:55:fe:68:2f:90:
         81:c5:83:e7:43:1e:4b:56:22:45:e7:9a:80:9c:b5:5e:22:f2:
         96:5b:1b:e4:93:3d:c8:95:83:24:9d:b3:5f:3f:9a:41:4b:a4:
         c8:15:b7:c7:93:9b:84:69:83:b9:f5:1c:ac:81:03:17:1f:9f:
         30:9f:bb:1c:af:5a:89:8b:b2:5b:c6:00:63:fa:5d:d5:34:ff:
         f2:ec:32:a3:20:7d:a4:43:0c:1d:50:3f:bf:8a:98:e5:26:7a:
         f0:21:d0:57:1f:a9:73:12:2e:d8:ae:42:f8:5b:70:e9:74:b0:
         77:19:bd:63:e7:2e:24:81:64:44:16:4c:23:aa:71:bc:37:42:
         ce:3a:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 20:44:06 2025 by rpki-client