This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7aaf1447-a05a-48ee-bb6a-041acc3e5051.cer
File:                     7aaf1447-a05a-48ee-bb6a-041acc3e5051.cer (raw, json)
Hash identifier:          yGaPgbq6ovHMUjF6tWVZaFkgF8Y8ksCmOr2diCm3GwE=
Subject key identifier:   5C:2B:45:B8:86:DE:44:91:F1:6C:77:B3:6F:6B:D8:FE:4A:1B:B0:C2
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584C89E9449022731A5CA6401280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7aaf1447-a05a-48ee-bb6a-041acc3e5051/7aaf1447-a05a-48ee-bb6a-041acc3e5051.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7aaf1447-a05a-48ee-bb6a-041acc3e5051/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 00:50:23 +0000
Certificate not after:    Wed 19 Apr 2028 23:50:23 +0000
Subordinate resources:    IP: 155.103.120.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:89:e9:44:90:22:73:1a:5c:a6:40:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Jan 16 00:50:23 2026 GMT
            Not After : Apr 19 23:50:23 2028 GMT
        Subject: CN=7aaf1447-a05a-48ee-bb6a-041acc3e5051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:18:81:e8:5d:d4:09:5b:50:25:25:0d:3c:
                    2d:42:3c:dd:6a:24:e1:17:c6:1a:97:a8:11:98:2f:
                    59:ff:2b:26:26:20:bb:07:1c:11:a1:82:ba:c9:00:
                    67:25:23:e7:c6:c0:3e:10:d9:19:36:0f:aa:66:13:
                    b6:ef:f6:45:cc:9a:cc:46:12:fa:cb:09:47:be:4b:
                    37:7d:09:35:ca:2b:eb:c7:ad:c5:94:f9:91:0a:4f:
                    bc:21:cb:de:8b:12:a5:59:18:b4:08:d5:48:17:1e:
                    4c:34:fa:ce:8a:90:c5:86:8d:55:8b:a6:a7:2c:c1:
                    49:40:cf:b4:14:3a:3c:e5:27:f0:9a:1d:ea:9c:0d:
                    13:76:74:10:ad:0b:99:ce:87:3b:f2:ae:6d:05:fc:
                    04:e4:1c:84:8a:cc:2a:54:c6:78:94:d8:c9:87:38:
                    fe:8e:74:bb:e2:43:0b:c6:d3:92:c9:69:8d:d4:cb:
                    7c:9a:40:be:25:b3:22:82:e6:ab:d1:ab:e9:ec:67:
                    3e:ae:15:f2:df:df:ab:bb:10:e7:1a:ac:e6:56:76:
                    38:da:9f:a8:90:da:c9:4a:2e:f9:27:7e:e9:1f:4a:
                    3a:4f:07:11:69:db:ba:44:04:52:78:a9:71:f1:1c:
                    1a:04:36:a5:c4:ff:94:af:35:68:bf:5a:23:8d:69:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2B:45:B8:86:DE:44:91:F1:6C:77:B3:6F:6B:D8:FE:4A:1B:B0:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7aaf1447-a05a-48ee-bb6a-041acc3e5051/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7aaf1447-a05a-48ee-bb6a-041acc3e5051/7aaf1447-a05a-48ee-bb6a-041acc3e5051.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:82:35:ed:bd:10:9d:e9:0d:78:14:8d:72:c7:7f:d7:d1:
         66:cb:b7:00:d2:f2:29:e1:7d:ad:80:cd:8d:63:6a:43:5e:be:
         37:44:8f:c6:ea:2f:04:f7:ff:4f:6e:7d:cb:a2:4d:6d:d1:50:
         4c:21:c4:88:35:93:74:4b:e5:f7:2c:10:50:00:e2:b6:c3:88:
         ed:16:92:0a:e7:62:39:b6:35:d4:ad:cc:88:8c:05:12:14:a0:
         5c:fb:be:1f:9b:4e:99:25:c1:ba:a0:6c:73:2a:e4:69:9f:16:
         c6:c0:91:7b:75:50:c6:99:20:b2:e8:24:55:18:19:e3:b4:2e:
         98:df:79:56:1e:c0:c1:6d:9c:57:1a:f3:97:bb:42:be:05:7e:
         38:92:36:6e:2f:07:5c:de:6d:61:c9:bf:7e:a0:7d:b7:b7:6e:
         a5:75:31:16:ca:ac:6f:88:1a:48:67:4f:d9:9e:73:da:5e:7e:
         d5:97:0f:14:8f:a8:0c:a7:f9:21:15:3f:90:f0:10:9e:3e:da:
         6f:e7:a7:b7:ed:b5:ca:a0:a5:d7:d6:ba:2f:08:ad:f9:e8:bc:
         49:e6:76:d2:6f:c5:89:6a:7a:b3:a8:9b:97:c7:5c:7a:bd:d3:
         e9:12:de:5d:fd:ca:24:ee:96:82:d1:9f:a5:c9:06:14:44:bb:
         16:66:39:29
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEyJ6USQInMaXKZAEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDExNjAwNTAyM1oXDTI4MDQxOTIzNTAyM1owLzEtMCsGA1UEAxMk
N2FhZjE0NDctYTA1YS00OGVlLWJiNmEtMDQxYWNjM2U1MDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CgYgehd1AlbUCUlDTwtQjzdaiThF8Yal6gR
mC9Z/ysmJiC7BxwRoYK6yQBnJSPnxsA+ENkZNg+qZhO27/ZFzJrMRhL6ywlHvks3
fQk1yivrx63FlPmRCk+8IcveixKlWRi0CNVIFx5MNPrOipDFho1Vi6anLMFJQM+0
FDo85Sfwmh3qnA0TdnQQrQuZzoc78q5tBfwE5ByEiswqVMZ4lNjJhzj+jnS74kML
xtOSyWmN1Mt8mkC+JbMiguar0avp7Gc+rhXy39+ruxDnGqzmVnY42p+okNrJSi75
J37pH0o6TwcRadu6RARSeKlx8RwaBDalxP+UrzVov1ojjWmhmQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFFwrRbiG3kSR8Wx3s29r2P5KG7DCMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83
YWFmMTQ0Ny1hMDVhLTQ4ZWUtYmI2YS0wNDFhY2MzZTUwNTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzdhYWYxNDQ3LWEwNWEtNDhlZS1i
YjZhLTA0MWFjYzNlNTA1MS83YWFmMTQ0Ny1hMDVhLTQ4ZWUtYmI2YS0wNDFhY2Mz
ZTUwNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKbZ3gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAn4yCNe29EJ3pDXgUjXLH
f9fRZsu3ANLyKeF9rYDNjWNqQ16+N0SPxuovBPf/T259y6JNbdFQTCHEiDWTdEvl
9ywQUADitsOI7RaSCudiObY11K3MiIwFEhSgXPu+H5tOmSXBuqBscyrkaZ8WxsCR
e3VQxpkgsugkVRgZ47QumN95Vh7AwW2cVxrzl7tCvgV+OJI2bi8HXN5tYcm/fqB9
t7dupXUxFsqsb4gaSGdP2Z5z2l5+1ZcPFI+oDKf5IRU/kPAQnj7ab+ent+21yqCl
19a6Lwit+ei8SeZ20m/FiWp6s6ibl8dcer3T6RLeXf3KJO6WgtGfpckGFES7FmY5
KQ==
-----END CERTIFICATE-----