This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
File:                     718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer (raw, json)
Hash identifier:          OeWcAyXLPT3DhbxnqICcda3G1dZLgvYv4bDCC3vp9f8=
Subject key identifier:   1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority key identifier: E9:11:5C:67:EB:95:40:AB:6A:22:8C:90:19:92:79:4A:22:C2:9A:EF
Certificate issuer:       /CN=f0b1b436-193c-4209-a695-f168f9f2b3b0
Certificate serial:       010D0C9F4328584C54F9916D25A5416FAF5461B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 28 Dec 2025 01:45:23 +0000
Certificate not after:    Sat 01 Apr 2028 00:45:23 +0000
Subordinate resources:    IP: 45.135.160.0/22
                          IP: 216.122.112.0/20
                          IP: 216.247.96.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:54:f9:91:6d:25:a5:41:6f:af:54:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b1b436-193c-4209-a695-f168f9f2b3b0
        Validity
            Not Before: Dec 28 01:45:23 2025 GMT
            Not After : Apr  1 00:45:23 2028 GMT
        Subject: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:98:3f:9f:fc:82:76:1a:40:7b:62:92:1f:
                    0e:80:99:8b:1d:60:b4:a5:a8:d9:45:2a:59:da:ea:
                    cc:d5:b6:f7:66:c6:22:87:ad:8d:4f:9a:c2:1a:17:
                    d4:5f:57:78:bd:a0:a0:e5:96:99:c2:95:ab:e2:33:
                    a5:41:63:11:84:c1:f3:74:6a:0e:f8:8e:8b:d7:d3:
                    0a:20:47:56:2e:41:c9:30:1f:65:c1:3a:c6:10:c1:
                    d7:14:b0:31:71:56:bd:06:b4:af:59:1e:5c:5c:2c:
                    8e:6e:60:c7:f9:ed:d3:60:5b:19:c0:bb:06:95:a0:
                    0d:85:7f:f4:3e:be:11:04:a7:16:c8:ea:c5:9f:d2:
                    2b:a9:df:82:af:ae:24:06:48:8b:61:ab:4b:e3:b8:
                    78:6a:51:34:3b:25:6b:67:cf:03:cd:02:c2:23:24:
                    05:cc:5c:d4:56:57:50:fc:63:d2:f0:d2:43:49:2b:
                    5c:70:e6:5b:cc:67:64:d9:7e:ea:1e:67:54:b5:cd:
                    cc:87:a9:57:4c:21:19:84:7e:13:99:cb:59:31:6a:
                    35:ec:f2:bf:27:b7:1c:73:d9:3a:c0:b6:a7:05:6c:
                    4f:99:16:a7:88:2e:a1:17:e3:8e:47:98:50:ee:2d:
                    2e:8f:70:c4:ea:28:c5:9f:a0:b2:b2:ee:49:5b:06:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl

            X509v3 Authority Key Identifier:
                keyid:E9:11:5C:67:EB:95:40:AB:6A:22:8C:90:19:92:79:4A:22:C2:9A:EF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/22
                  216.122.112.0/20
                  216.247.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:0c:ca:15:35:dd:f1:c3:d8:e5:db:3b:9f:88:e4:70:66:
         97:05:0f:3a:c5:20:f9:98:94:8f:a3:1d:32:ec:df:77:ea:88:
         ba:6e:7c:67:4f:a4:57:f5:4e:c3:01:53:37:69:c8:c8:60:cb:
         ab:39:38:9a:ba:c8:f4:c7:a8:35:e9:eb:40:3b:0d:b7:69:86:
         51:6f:86:5e:be:b9:9a:3e:bf:62:59:b9:69:25:0b:2d:04:e0:
         ce:74:47:9a:66:6a:41:f9:4f:a9:b0:cc:e0:1d:f9:17:db:3f:
         c8:0e:47:ef:e8:0b:3e:4f:ee:fb:44:04:d0:a6:45:c1:05:31:
         2d:a4:33:73:9c:b7:22:a0:4c:bb:6c:e8:6b:08:9d:32:df:cb:
         6e:c7:44:73:64:ef:fe:8c:40:96:0f:9c:a6:e9:e2:07:a5:a5:
         48:8d:08:4e:2e:35:78:16:94:43:86:fc:31:b3:32:6b:8e:67:
         66:05:74:c7:55:ce:48:b6:49:9c:58:36:08:65:6e:a8:8f:3f:
         34:5a:e6:03:15:58:5e:76:d0:4d:6d:8b:8c:83:8b:f2:30:29:
         46:4e:5c:47:cc:74:58:77:60:c2:e9:5f:a1:f2:ed:34:87:f8:
         e4:a7:bb:86:b5:a5:8d:26:c0:42:71:aa:47:e5:ba:b2:d0:3d:
         53:05:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:23:09 2026 by rpki-client