This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer
File:                     e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer (raw, json)
Hash identifier:          2t34Nz3/TbzMLaLNHOzIcvcrT7fF0sLPJO4vNci6yrQ=
Subject key identifier:   A3:F4:CF:BF:A7:3E:08:D7:49:C8:83:90:C9:1B:A1:43:6D:7D:EB:0A
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584C89DEF9FE7F38903DEE4E6100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 00:29:39 +0000
Certificate not after:    Wed 19 Apr 2028 23:29:39 +0000
Subordinate resources:    IP: 68.68.240.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:89:de:f9:fe:7f:38:90:3d:ee:4e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Jan 16 00:29:39 2026 GMT
            Not After : Apr 19 23:29:39 2028 GMT
        Subject: CN=e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:e3:9f:ea:35:7e:69:f9:14:f9:ec:c4:15:
                    2e:c5:3a:ed:c4:7b:27:99:ba:cc:17:16:a2:1d:99:
                    fa:13:2f:8d:0c:88:d5:ee:37:4f:04:00:0c:91:94:
                    6b:d7:37:d7:1f:43:96:3b:af:15:f6:10:11:2e:42:
                    83:fa:e7:d5:ce:75:77:c4:c7:57:1c:7d:81:7b:74:
                    5f:dc:4b:82:06:1b:7e:9f:b6:88:04:3b:3a:e6:19:
                    88:5f:a3:c0:31:5a:f0:c7:83:79:7d:9e:91:a4:db:
                    04:32:02:1d:fd:67:fb:97:4a:40:f1:04:ce:71:4d:
                    bc:64:91:85:6a:8f:9b:dc:36:7e:af:c3:80:45:f2:
                    fc:9c:9d:6f:e5:66:5d:95:cd:4b:3f:af:00:db:b7:
                    77:fd:ea:88:d0:2a:9b:eb:76:59:50:98:b8:8d:e6:
                    a4:1d:39:93:94:c6:34:4e:a1:f8:55:0c:84:70:ea:
                    04:b4:b4:59:4f:8c:1c:b2:6b:92:3e:8f:69:87:42:
                    c0:9c:23:f4:21:cc:f8:3e:8f:ee:62:1b:68:cf:8d:
                    97:19:79:38:52:05:d9:42:ad:5f:81:9b:c3:c7:ea:
                    f3:71:a9:2c:a8:80:5e:5c:82:77:7f:6f:52:33:66:
                    e4:f9:39:fd:c1:0b:89:cd:07:05:74:de:1e:4a:b0:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F4:CF:BF:A7:3E:08:D7:49:C8:83:90:C9:1B:A1:43:6D:7D:EB:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1c:a7:da:bd:0b:cb:7a:a8:e7:84:ed:d2:0f:9e:83:f0:76:
         80:bc:34:67:46:bf:2f:59:cc:a3:d7:75:3a:1a:3a:ae:22:aa:
         cf:78:a3:0f:74:79:6d:15:6f:15:ab:fd:a9:ab:75:89:8e:09:
         bd:67:fa:9f:a1:68:1d:31:08:c8:e6:33:e0:4e:8c:1b:0e:42:
         1e:63:ce:de:a4:77:dd:f3:5d:88:de:ba:5a:44:dd:6b:fa:8e:
         3c:d9:2e:32:f6:cc:b9:31:83:51:52:c9:ef:13:ca:d5:ce:99:
         46:1b:ec:08:0f:b0:d9:69:1a:3c:bf:7e:e8:84:1a:bd:2a:8c:
         35:e3:ba:07:de:98:18:a9:4d:6c:bf:f1:4b:fb:fa:c9:12:b2:
         2c:ec:ce:9b:55:3c:0b:90:90:33:34:0d:72:d8:3e:d4:c1:ab:
         39:1c:4d:71:eb:11:ae:55:f5:e3:5a:b0:32:5b:74:b1:e4:06:
         e1:bf:0f:57:44:2e:3c:88:49:11:51:cb:ec:c3:68:a3:f0:63:
         ea:09:cb:49:65:bb:e3:fc:e8:e7:c5:ae:99:2d:7a:b4:12:35:
         49:f3:09:8d:54:ca:81:f0:53:62:57:7b:d3:f9:2f:6e:33:fb:
         cf:58:ac:fd:c6:ad:85:7a:bf:61:e8:a2:1a:5f:23:fb:54:58:
         5c:bd:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----