This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer
File:                     7e3be480-7f34-440b-9382-84a56fb763cc.cer (raw, json)
Hash identifier:          TeIAQEV/xqJc581VaUw3l/GXgDgSTrRLEWeLlm9kQu4=
Subject key identifier:   FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C6F7F114FCBAC834CC4F29880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 06 Jan 2026 13:45:23 +0000
Certificate not after:    Mon 10 Apr 2028 12:45:23 +0000
Subordinate resources:    AS: 398699
                          IP: 74.117.120.0/21
                          IP: 75.119.188.0/23
                          IP: 104.156.40.0/21
                          IP: 170.76.240.0/24
                          IP: 216.9.168.0/21
                          IP: 2605:f640::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6f:7f:11:4f:cb:ac:83:4c:c4:f2:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  6 13:45:23 2026 GMT
            Not After : Apr 10 12:45:23 2028 GMT
        Subject: CN=7e3be480-7f34-440b-9382-84a56fb763cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:d1:0b:bc:61:98:86:15:86:bb:ae:74:c9:
                    29:45:39:c3:30:93:70:8b:03:a7:5a:9b:90:ef:1b:
                    a9:d2:db:1c:b3:56:40:98:99:9f:b5:9d:5f:e4:af:
                    fe:6c:d5:8d:10:d0:1b:66:6b:2b:45:29:fd:3f:af:
                    21:5c:ad:f3:4a:23:af:bc:1a:fc:8d:ea:c0:7c:18:
                    3e:d8:a0:10:a5:53:78:0f:3c:cc:c4:cf:65:b2:53:
                    6d:8a:47:12:0e:6f:48:d6:6d:6f:69:87:77:5c:24:
                    3a:c3:be:11:73:51:da:72:0b:9f:fd:2d:f5:50:d4:
                    39:3c:e7:ef:91:38:be:da:14:c9:0d:e2:8a:a3:30:
                    f8:5b:41:a9:ca:11:c0:0a:82:88:0e:ca:a1:90:9f:
                    f2:32:a2:12:66:ec:04:ed:7d:48:67:63:79:1c:b4:
                    fe:a8:80:f8:70:d3:92:f9:99:20:c4:a8:d5:d8:c0:
                    ee:3f:59:cf:83:df:78:28:5e:18:6f:17:b2:b4:dc:
                    f5:e1:1d:80:a3:2a:a8:d9:96:42:0f:44:e7:4e:4f:
                    6c:bc:b6:ca:07:6f:c2:96:82:51:dc:a2:61:b5:37:
                    87:8d:24:2f:de:06:e3:c8:a1:7b:36:35:f6:cc:54:
                    a0:85:6e:8b:d7:a2:27:b0:c8:7d:d5:7d:da:3f:3c:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.120.0/21
                  75.119.188.0/23
                  104.156.40.0/21
                  170.76.240.0/24
                  216.9.168.0/21
                IPv6:
                  2605:f640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398699

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:13:8e:5c:a8:ef:b6:75:0e:16:31:b1:5e:ff:5c:d6:67:
         af:a1:6d:e5:84:04:c0:d7:d5:78:0b:bf:58:9f:7f:33:7e:17:
         18:4d:78:2e:8f:45:b4:32:c4:8f:98:76:16:8d:50:4f:37:15:
         ad:62:37:fa:f5:1c:28:8b:7d:c0:9e:1d:1b:52:27:23:3d:25:
         ec:1f:91:f8:15:d8:a2:d3:88:a6:01:21:75:3b:26:f7:ad:5b:
         b5:60:d3:ec:db:ce:05:cc:b2:cc:88:9c:7a:50:90:ae:53:5e:
         c3:b2:0d:85:4b:50:a6:70:64:02:bc:3e:cd:59:33:a2:78:15:
         b8:41:72:8a:fa:85:b8:29:b4:79:df:21:63:d8:aa:6d:07:59:
         78:df:d6:c7:73:55:0b:58:5a:c6:00:5d:25:66:b2:0e:74:34:
         b0:eb:0e:b9:5a:90:09:17:04:59:28:11:98:48:a8:f5:81:8c:
         d4:38:6f:ec:3a:9a:f1:8d:e8:2a:c0:a8:30:1f:e9:3d:5a:bd:
         7f:df:90:2b:66:c5:50:59:9a:08:68:87:80:60:b3:3f:82:bc:
         d1:6e:85:7d:0f:eb:e9:a9:44:f1:94:88:a1:40:5e:0d:a3:58:
         9c:1c:42:6f:08:6c:10:0d:bb:78:c3:4f:71:9b:59:4d:69:3a:
         8e:ae:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:26:03 2026 by rpki-client