This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
File:                     ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer (raw, json)
Hash identifier:          7RDxIOV2p3bhhe3t6SeN+WSjnvuMfxJhpRPmGbAld+A=
Subject key identifier:   C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
Authority key identifier: B6:B7:A9:D1:81:B4:F0:1F:F1:5E:02:8F:C8:58:1F:D7:B2:21:D2:B5
Certificate issuer:       /CN=26d1481e-4825-43d7-9d68-440e85e92eed
Certificate serial:       010D0C9F4328584BF21C61E265C0CF10C11F9580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sat 22 Nov 2025 15:50:30 +0000
Certificate not after:    Fri 25 Feb 2028 15:50:30 +0000
Subordinate resources:    AS: 13317
                          IP: 23.148.156.0/24
                          IP: 2602:f50d::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:1c:61:e2:65:c0:cf:10:c1:1f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d1481e-4825-43d7-9d68-440e85e92eed
        Validity
            Not Before: Nov 22 15:50:30 2025 GMT
            Not After : Feb 25 15:50:30 2028 GMT
        Subject: CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:81:7d:b9:7f:db:d3:c1:18:72:7e:91:07:
                    09:57:bf:e6:2f:b7:e7:d7:5e:4d:43:8a:da:5e:d8:
                    34:5b:a1:2f:10:78:4b:83:ae:d1:14:71:46:44:03:
                    77:78:00:8e:78:a8:6a:65:89:bd:78:ea:99:16:a7:
                    16:61:66:6e:5a:14:1a:8d:85:c5:c5:84:ea:6f:79:
                    24:cf:e8:0a:88:a3:69:32:93:47:f4:e8:49:cb:d6:
                    40:b4:d5:22:e1:fc:6a:32:3d:e8:f6:41:8c:95:aa:
                    8f:ed:2e:dc:16:5f:37:8a:6b:f4:7d:56:75:81:88:
                    af:1b:c4:be:d0:5c:98:ba:fd:0e:aa:e9:6d:f1:46:
                    f7:2a:c9:b1:7f:29:31:0b:bd:bc:05:10:28:16:24:
                    bf:eb:9e:8d:c6:85:c2:d4:33:1f:cd:33:89:17:92:
                    79:d2:6a:8a:d0:ab:9d:8c:78:b2:2a:06:0a:9c:de:
                    03:ef:b9:56:55:ee:f0:cb:ba:c9:d0:6c:51:d0:eb:
                    80:20:36:65:7d:44:25:d3:b8:3b:ab:54:b3:3e:d7:
                    aa:c1:9c:03:b9:0c:fe:d4:74:a2:a4:e6:67:0f:03:
                    3a:9f:aa:cd:84:f8:b3:a5:54:db:cd:81:f7:a2:dd:
                    eb:61:a2:08:6a:92:d7:c1:99:d2:b1:a8:fa:cc:a0:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl

            X509v3 Authority Key Identifier:
                keyid:B6:B7:A9:D1:81:B4:F0:1F:F1:5E:02:8F:C8:58:1F:D7:B2:21:D2:B5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.156.0/24
                IPv6:
                  2602:f50d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13317

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:af:ef:87:a0:82:55:6a:20:b2:8d:1f:88:6b:9d:03:84:
         49:af:2a:ab:f2:79:94:40:f2:f3:e6:26:4a:28:fc:61:8b:d6:
         98:e7:bc:6f:99:b7:84:77:ae:ff:1b:df:bc:09:96:0b:5e:0c:
         37:e3:a9:2e:3f:31:cb:f8:25:9f:3a:16:44:e4:15:87:44:71:
         97:ca:76:ca:c1:b1:59:08:ca:b6:d8:51:be:de:1b:52:2c:a3:
         c3:c1:da:a2:03:9e:b8:f4:94:f8:b3:9a:cb:83:2b:b5:fd:24:
         fd:8a:24:8e:e9:6a:a2:83:59:a3:5a:b4:2e:36:f0:dc:1d:d5:
         02:ae:52:a0:b6:4b:94:38:b3:05:91:8a:d4:c8:10:27:f2:b1:
         88:23:44:1b:de:20:5f:dd:44:63:a7:62:3d:b8:75:2c:2a:86:
         dd:68:84:27:1f:1e:10:63:96:4f:2d:69:04:aa:08:4b:e0:62:
         c0:bc:6f:89:ac:de:21:71:1a:06:ae:7b:77:5d:1a:e8:f1:de:
         10:fc:e9:28:53:b4:78:6e:4e:86:0b:ef:5b:6e:d4:0c:50:2f:
         48:22:cf:64:ae:0d:c3:01:5e:2d:4d:08:92:88:2d:6a:27:f3:
         59:3d:ab:2c:1b:da:6e:74:26:de:04:54:c2:a0:f7:da:c6:22:
         66:a1:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 07:39:48 2025 by rpki-client