This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
File:                     f0dba087-0567-4455-9983-ac2ca8102281.cer (raw, json)
Hash identifier:          3+6I6Mh4+dGAUiCedm0yFpjgNv9xP+1z/SRWuTq1x08=
Subject key identifier:   72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584C9733E9D59383141222E173C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Jan 2026 19:06:18 +0000
Certificate not after:    Fri 25 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 397032
                          AS: 397283
                          AS: 399820
                          IP: 23.146.184.0/24
                          IP: 64.49.8.0/22
                          IP: 204.137.14.0/24
                          IP: 206.168.173.0/24
                          IP: 2602:fa87::/40
                          IP: 2602:fc2f::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:97:33:e9:d5:93:83:14:12:22:e1:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 20 19:06:18 2026 GMT
            Not After : Feb 25 13:45:23 2028 GMT
        Subject: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:5a:58:3a:74:6c:a4:55:3b:e9:7e:58:d9:
                    93:13:22:51:1b:3f:fe:3d:ba:99:0e:8b:45:59:fb:
                    ce:ad:76:f6:0e:07:c1:a0:ff:24:8f:cb:86:d3:cd:
                    4b:e0:c5:a5:c5:ae:d9:52:c0:fd:89:1e:98:3c:f8:
                    c5:76:be:0f:84:b8:a1:67:56:4e:45:da:62:0c:48:
                    b6:34:2e:56:3c:06:f7:37:35:54:5a:53:a4:f9:0e:
                    a1:10:2f:fa:aa:77:13:b5:db:7b:b2:40:e6:bd:9a:
                    16:53:f4:9a:2c:30:da:cb:bf:81:f6:d5:06:cc:ae:
                    84:62:04:43:e0:6c:96:04:61:15:ba:13:1d:1d:22:
                    6b:93:0f:59:48:fe:de:31:24:25:e7:b9:06:ea:72:
                    8f:7d:87:c3:c0:cd:95:8f:9f:17:99:fd:3d:e4:a9:
                    a4:1a:97:67:24:e9:9c:a7:fa:1c:b4:74:f9:4f:3a:
                    95:a8:7a:f8:3d:a6:4e:ea:b8:24:d4:1f:10:6b:22:
                    f5:89:66:ab:0c:b1:db:db:2f:79:ae:7d:ed:4e:80:
                    6d:84:91:de:01:7f:fc:30:05:40:bf:59:a6:02:4b:
                    94:49:76:78:f5:5d:e5:93:ec:37:84:09:c3:42:f3:
                    ed:b3:9b:49:94:ef:35:69:a6:f6:c7:da:6c:bf:4d:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.184.0/24
                  64.49.8.0/22
                  204.137.14.0/24
                  206.168.173.0/24
                IPv6:
                  2602:fa87::/40
                  2602:fc2f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397032
                  397283
                  399820

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:9f:cc:6c:2a:f9:53:93:45:de:a1:4e:dd:53:29:d2:9d:
         a7:d7:ef:a8:ff:d7:ec:f8:93:38:a9:eb:7c:db:49:d9:3d:f7:
         b5:76:d9:f3:bf:41:38:85:84:83:0d:13:4f:20:7e:64:ab:62:
         14:0d:0e:54:ea:6c:bb:b6:03:aa:e4:62:9c:7d:bf:5f:91:fd:
         55:00:9c:49:92:04:3d:b3:16:76:eb:2a:97:91:dd:d1:71:21:
         ed:d9:7d:07:fa:50:10:b7:7f:6a:76:5b:be:21:7e:e7:87:c2:
         3d:69:1e:82:d8:48:81:81:ed:61:fd:24:df:88:2e:44:87:52:
         c0:f0:b2:ba:3d:06:da:6f:7a:fc:87:39:09:41:cc:c5:fe:23:
         b6:63:c6:3c:20:10:aa:7b:3f:03:00:6e:9a:d3:f9:a2:96:c7:
         ca:86:a6:d3:dc:54:bc:c1:3a:50:5a:c5:96:6e:ad:e3:27:26:
         1c:78:8c:0e:fb:2f:f6:ca:eb:b1:8a:a1:db:7d:b8:d2:af:8d:
         b3:3f:6d:de:bd:06:62:9b:a1:ae:7b:8a:e5:43:10:77:4e:d3:
         da:c7:de:76:0f:76:ca:ed:76:6f:fd:7b:8c:ca:43:63:9f:3a:
         6c:1e:1b:50:fc:1b:52:3d:91:d5:dd:9e:66:88:59:ab:49:e4:
         1e:6c:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:46 2026 by rpki-client