This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer
File:                     fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer (raw, json)
Hash identifier:          CSiuxmzNzdpXHSIAo8NC0T/7cyyzmA+KyddUyG2IV6c=
Subject key identifier:   57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C7249C18073BCD681154CC500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Jan 2026 13:45:24 +0000
Certificate not after:    Tue 11 Apr 2028 12:45:24 +0000
Subordinate resources:    AS: 397601
                          IP: 66.205.234.0/24
                          IP: 147.160.152.0/23
                          IP: 2620:6d:a000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:72:49:c1:80:73:bc:d6:81:15:4c:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  7 13:45:24 2026 GMT
            Not After : Apr 11 12:45:24 2028 GMT
        Subject: CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:94:5f:ed:2e:70:76:8e:b7:a1:80:ab:b1:
                    92:07:ce:41:fd:c2:c6:bd:be:78:34:39:4f:61:9e:
                    bc:6c:58:8c:e0:d6:ff:42:7d:47:7b:dd:b5:f7:5f:
                    a8:6d:da:9e:d2:96:f4:2e:f9:fe:d0:9a:50:ce:bb:
                    e2:59:ed:7e:ab:60:71:e5:1b:a9:ff:98:3d:ae:fe:
                    51:c4:e7:89:34:dd:a0:87:5f:72:75:7a:01:61:1e:
                    49:1c:4a:3f:e4:ed:c8:da:6a:3c:3f:01:65:bd:20:
                    6a:69:bb:3d:37:80:ed:c9:3b:82:9f:4e:92:00:3d:
                    96:12:05:5a:53:90:d7:87:9d:b4:f0:77:9e:53:cf:
                    00:5c:d4:35:0b:d7:22:f8:bb:dc:cf:b6:a9:f4:8d:
                    cb:81:ef:be:c0:d5:52:b6:1d:2d:21:ce:4a:92:1f:
                    8f:9a:24:1e:bc:09:84:2d:31:cb:43:aa:20:83:81:
                    6c:6e:a1:ae:81:a8:e7:43:2e:31:7a:c2:2d:95:41:
                    c8:d7:46:92:85:5f:a0:d4:45:cb:cd:0c:80:fd:29:
                    6d:24:70:28:4f:64:28:22:fe:c2:f0:f9:ff:eb:d8:
                    ce:0e:d4:c2:a2:2d:ca:6a:4f:30:20:97:6f:96:63:
                    c2:a1:23:42:16:bf:ce:a9:f1:9f:2a:fc:50:47:60:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.234.0/24
                  147.160.152.0/23
                IPv6:
                  2620:6d:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397601

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:84:67:19:f3:6c:cc:f9:83:2b:ab:eb:bb:61:2b:ce:78:82:
         d8:33:46:72:43:61:ff:5b:8f:8d:94:fd:20:4c:e6:e6:3c:1a:
         6f:90:a9:2c:9f:0b:30:8a:8f:ca:49:7a:9f:df:6c:32:bf:b0:
         36:95:00:66:49:9b:30:31:b3:51:8f:16:2a:b5:71:de:00:06:
         d4:2b:4d:c1:59:65:39:b0:5b:34:53:c7:34:7e:a2:20:8c:eb:
         69:0b:51:ce:6f:2a:4a:d0:32:92:55:36:35:d0:ec:4d:ee:2c:
         60:a0:24:12:84:b6:98:e9:ba:e0:4a:1c:a7:0c:dc:20:17:80:
         cd:29:c4:7c:6e:11:7e:3d:70:b3:c9:ee:f4:9d:5a:27:e4:dc:
         99:24:83:e3:a7:79:a9:47:23:83:c4:cf:ad:72:f6:e0:e6:06:
         88:84:45:1b:aa:15:97:3f:4b:ed:57:8e:f8:3c:92:25:17:34:
         ca:61:37:3b:f9:98:9b:07:23:45:17:a5:db:cc:e1:e3:2f:82:
         0e:e1:01:f7:e7:8d:69:eb:d9:6c:15:d2:32:26:79:0a:56:8b:
         bb:a6:c4:23:4e:99:4b:95:2e:8e:7b:5c:f3:b5:62:38:e7:f8:
         52:6b:4d:b5:8a:ea:b3:fc:71:ed:3b:ff:67:28:ef:a1:b4:68:
         22:c6:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:28:57 2026 by rpki-client