This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/146866df-349a-49cb-92d4-dcd854a87c94.cer
File:                     146866df-349a-49cb-92d4-dcd854a87c94.cer (raw, json)
Hash identifier:          1OaIlbyL+GkJWELTjR6vdxPUXXFW2OfmdrmM9Cm4TBc=
Subject key identifier:   1C:4D:C6:25:17:CB:01:AB:63:F7:6E:34:38:B2:74:0C:84:0E:CF:EB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584BDBAE2BD967444320B741BA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/146866df-349a-49cb-92d4-dcd854a87c94/146866df-349a-49cb-92d4-dcd854a87c94.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/146866df-349a-49cb-92d4-dcd854a87c94/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Nov 2025 15:00:40 +0000
Certificate not after:    Thu 17 Feb 2028 15:00:40 +0000
Subordinate resources:    IP: 206.221.112.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:db:ae:2b:d9:67:44:43:20:b7:41:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 14 15:00:40 2025 GMT
            Not After : Feb 17 15:00:40 2028 GMT
        Subject: CN=146866df-349a-49cb-92d4-dcd854a87c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:83:69:2c:5a:b9:f1:f0:9f:3f:09:c3:7d:
                    95:34:43:03:b3:2d:c0:a9:bf:2b:e8:08:af:9f:18:
                    87:d9:ee:3d:a4:2f:2f:c1:8e:55:64:63:95:08:14:
                    1a:e0:cb:ff:3d:05:5e:67:32:4b:f5:f7:3e:d7:eb:
                    7b:d3:41:0d:65:45:ab:24:8d:b1:5d:50:f2:19:51:
                    0b:a5:c2:84:52:ce:95:b7:12:85:3b:9d:55:79:9e:
                    e4:55:c6:14:75:b7:db:b8:2f:24:bc:5e:d8:e5:42:
                    fe:9a:0a:82:40:e8:c7:9b:08:09:7b:8b:f3:5b:76:
                    bc:8d:5b:72:cf:f8:19:41:12:ba:61:ee:2a:7b:80:
                    03:57:84:46:0f:f0:98:3f:38:0c:0e:6c:4c:18:dc:
                    4e:8f:bd:64:21:05:c9:03:31:ec:ac:6f:31:3f:06:
                    3f:86:40:dd:05:4c:d4:76:d9:58:cc:d7:1e:b4:ed:
                    22:01:45:92:0d:99:60:e6:62:90:9f:cb:92:c8:a0:
                    b2:73:6c:9c:af:38:53:05:89:6b:61:df:73:59:c7:
                    a6:32:05:7f:32:33:5c:73:99:a4:77:36:a3:b3:68:
                    34:48:92:c1:5b:3b:20:8f:5d:02:e7:0d:36:8f:f7:
                    b1:18:f8:6a:6c:5a:2e:95:62:2d:af:20:9c:07:32:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:C6:25:17:CB:01:AB:63:F7:6E:34:38:B2:74:0C:84:0E:CF:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/146866df-349a-49cb-92d4-dcd854a87c94/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/146866df-349a-49cb-92d4-dcd854a87c94/146866df-349a-49cb-92d4-dcd854a87c94.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4d:c4:9c:1b:84:17:7f:27:18:f2:b5:74:d0:a5:d4:a2:ca:
         39:9e:3f:84:74:6b:ed:18:20:77:38:b4:a7:f9:be:12:20:10:
         2d:08:48:06:b6:c9:76:5e:d2:34:bf:b4:8d:f8:27:e0:c0:35:
         de:14:be:97:72:06:78:5e:2d:ed:58:05:7e:e5:ef:9f:f5:37:
         ac:c3:d6:be:65:f9:b4:65:d3:5a:a5:3a:77:39:72:8d:d1:6a:
         8f:b4:e0:c9:46:75:0c:32:5d:20:81:52:f5:01:47:a6:d5:24:
         36:a7:e5:f1:6c:dd:e4:51:81:4b:8b:00:f1:86:4a:8c:53:11:
         1b:cb:1a:b4:00:0d:b0:fe:03:f2:eb:a4:5a:15:b1:6b:47:89:
         ca:4a:84:19:59:2a:f1:b6:e0:ec:67:82:ce:e0:7b:59:db:2a:
         ac:8b:15:d8:ae:da:97:55:1d:ff:75:c4:18:03:31:71:b5:e5:
         58:0e:d5:b8:d4:03:79:7a:44:e2:b2:22:3c:24:4b:f6:58:7e:
         b0:8f:b1:8d:8a:a8:f7:04:12:98:35:bb:7d:b5:73:cf:80:d5:
         3b:6a:1e:ad:7c:44:a7:13:f0:7a:ad:8b:cb:60:db:d1:ac:e0:
         4d:5b:1a:81:61:9b:5a:64:68:3d:9a:0f:bf:42:07:fb:e6:9d:
         69:44:43:67
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvbrivZZ0RDILdBuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MTExNDE1MDA0MFoXDTI4MDIxNzE1MDA0MFowLzEtMCsGA1UEAxMk
MTQ2ODY2ZGYtMzQ5YS00OWNiLTkyZDQtZGNkODU0YTg3Yzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWODaSxaufHwnz8Jw32VNEMDsy3Aqb8r6Aiv
nxiH2e49pC8vwY5VZGOVCBQa4Mv/PQVeZzJL9fc+1+t700ENZUWrJI2xXVDyGVEL
pcKEUs6VtxKFO51VeZ7kVcYUdbfbuC8kvF7Y5UL+mgqCQOjHmwgJe4vzW3a8jVty
z/gZQRK6Ye4qe4ADV4RGD/CYPzgMDmxMGNxOj71kIQXJAzHsrG8xPwY/hkDdBUzU
dtlYzNcetO0iAUWSDZlg5mKQn8uSyKCyc2ycrzhTBYlrYd9zWcemMgV/MjNcc5mk
dzajs2g0SJLBWzsgj10C5w02j/exGPhqbFoulWItryCcBzJIoQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFBxNxiUXywGrY/duNDiydAyEDs/rMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x
NDY4NjZkZi0zNDlhLTQ5Y2ItOTJkNC1kY2Q4NTRhODdjOTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE0Njg2NmRmLTM0OWEtNDljYi05
MmQ0LWRjZDg1NGE4N2M5NC8xNDY4NjZkZi0zNDlhLTQ5Y2ItOTJkNC1kY2Q4NTRh
ODdjOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATO3XAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAd03EnBuEF38nGPK1dNCl
1KLKOZ4/hHRr7Rggdzi0p/m+EiAQLQhIBrbJdl7SNL+0jfgn4MA13hS+l3IGeF4t
7VgFfuXvn/U3rMPWvmX5tGXTWqU6dzlyjdFqj7TgyUZ1DDJdIIFS9QFHptUkNqfl
8Wzd5FGBS4sA8YZKjFMRG8satAANsP4D8uukWhWxa0eJykqEGVkq8bbg7GeCzuB7
WdsqrIsV2K7al1Ud/3XEGAMxcbXlWA7VuNQDeXpE4rIiPCRL9lh+sI+xjYqo9wQS
mDW7fbVzz4DVO2oerXxEpxPweq2Ly2Db0azgTVsagWGbWmRoPZoPv0IH++adaURD
Zw==
-----END CERTIFICATE-----