This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
File:                     9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer (raw, json)
Hash identifier:          0OOf+bjB7CyPXKpE4IGacDEQK9FmT04fyXqP30/ACa0=
Subject key identifier:   D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584BF1DE48286F35AE9A6CC26A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 22 Nov 2025 13:45:23 +0000
Certificate not after:    Fri 25 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 20205
                          IP: 64.246.96.0/19
                          IP: 104.37.52.0/22
                          IP: 137.83.84.0/23
                          IP: 158.247.72.0/22
                          IP: 168.245.180.0/22
                          IP: 192.211.11.0/24
                          IP: 2001:4950::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:de:48:28:6f:35:ae:9a:6c:c2:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 22 13:45:23 2025 GMT
            Not After : Feb 25 13:45:23 2028 GMT
        Subject: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:11:8b:de:75:7a:d0:fe:7a:d2:d2:9c:ab:
                    d0:77:a2:bf:04:a9:57:f3:ae:5f:6d:6f:e6:7f:37:
                    44:3c:16:43:4c:b5:50:ec:c1:54:93:be:e8:74:db:
                    dc:b9:a1:63:17:4d:1c:bf:20:55:59:54:31:09:d4:
                    fb:a6:4c:a0:9a:8a:3e:7a:e7:b4:ac:c0:94:ea:7d:
                    2e:ff:87:fe:fd:ab:f0:ff:15:ac:4e:2c:10:ce:ec:
                    24:29:18:fd:c2:78:73:d7:32:9c:68:a7:54:09:0c:
                    b7:70:5c:1d:5b:bc:fe:57:39:f9:35:37:76:0d:41:
                    fa:48:de:03:d9:a4:c6:ad:d0:ae:10:3b:a3:00:ef:
                    57:01:d9:cf:22:59:50:7f:49:24:30:5b:7d:d3:86:
                    49:ed:cd:44:c6:3d:c6:a8:e5:ff:38:7f:47:a7:b0:
                    60:24:6f:d9:1a:0f:33:57:81:c4:26:b0:0c:d4:bf:
                    01:8e:04:dd:8e:8d:c3:c1:a2:76:0a:23:95:d8:7b:
                    bc:e1:c7:d7:9d:09:89:df:4f:5a:93:c0:d0:82:b9:
                    c3:e9:ac:08:be:82:5c:a4:d1:f5:02:dd:c8:16:fc:
                    4d:f2:42:71:36:5d:83:f3:c7:e0:7c:bf:6d:4e:1f:
                    9a:66:f2:12:60:80:91:50:bb:e2:eb:f4:b4:fa:e0:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19
                  104.37.52.0/22
                  137.83.84.0/23
                  158.247.72.0/22
                  168.245.180.0/22
                  192.211.11.0/24
                IPv6:
                  2001:4950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:c0:2c:50:27:e5:a3:fc:4e:c1:67:1a:2b:b5:e0:37:73:
         d1:29:f5:9c:1a:4c:e6:1e:c3:9f:0d:65:d9:ee:cf:5d:53:96:
         ee:9b:e0:96:54:d7:78:a9:8f:1f:47:98:12:ce:17:5b:03:99:
         a2:7f:01:0f:1f:69:2d:03:37:9e:0a:30:4e:c3:65:6a:ef:67:
         bf:d3:d4:22:cb:ce:bb:94:f6:8b:4c:f2:5e:e2:0a:77:a5:48:
         d2:6b:e9:0a:ad:87:5e:78:46:01:17:3b:0f:2e:2f:4f:ab:4b:
         67:b9:e1:11:97:f4:99:d0:94:23:2a:d8:1c:67:cb:66:45:11:
         26:ef:58:ec:7c:88:29:ea:ad:56:87:a7:a8:ef:1e:04:12:16:
         aa:30:fc:d7:97:80:aa:53:8a:c7:2f:f9:05:99:dd:f3:74:19:
         8d:b9:65:3f:cd:a5:75:db:e5:5e:72:74:93:03:1c:06:b4:3f:
         5a:8c:26:79:b1:4b:de:ae:5a:84:6e:5c:d4:09:0e:0f:02:aa:
         63:55:cc:7c:34:04:fe:b5:a7:f5:4e:f8:c1:c8:4c:f3:fe:80:
         ad:eb:9f:de:c5:16:40:4b:33:6c:d3:06:cf:25:02:62:21:f9:
         8f:7a:52:78:9d:87:09:29:d9:11:20:81:d9:b0:7d:0a:06:62:
         32:8c:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 19:16:06 2025 by rpki-client