This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563.cer
File:                     2c212b17-58af-41bd-91e5-6527210da563.cer (raw, json)
Hash identifier:          twuM5HS4CBQK4RFU9I0ZHSUVEGqWVjLeatN0CjlqtGs=
Subject key identifier:   88:6A:9D:50:EA:BD:E8:22:B1:9F:A4:1A:32:80:41:18:1F:E7:FA:1D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584BCEF8BA73EF0588FE80A25CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/2c212b17-58af-41bd-91e5-6527210da563.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Nov 2025 01:45:22 +0000
Certificate not after:    Sun 13 Feb 2028 01:45:22 +0000
Subordinate resources:    AS: 11917
                          IP: 66.111.48.0/22
                          IP: 2620:13e:1000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ce:f8:ba:73:ef:05:88:fe:80:a2:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 10 01:45:22 2025 GMT
            Not After : Feb 13 01:45:22 2028 GMT
        Subject: CN=2c212b17-58af-41bd-91e5-6527210da563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:a8:d1:e0:50:9c:63:ce:fb:13:97:db:18:
                    5f:fd:02:51:35:5c:fe:44:de:c8:40:14:dc:2f:43:
                    1d:d1:31:11:4a:9e:e3:46:3a:af:b5:30:83:8c:dd:
                    3e:38:bd:b8:91:01:fe:15:08:67:04:c7:f0:c6:3f:
                    8e:74:7a:a1:25:64:78:e8:0c:aa:68:94:c0:eb:6b:
                    35:f5:ad:43:01:a3:e5:05:84:b6:6f:01:31:a1:af:
                    bc:35:eb:f0:f6:19:e3:94:48:6a:96:b2:c7:d4:12:
                    b5:80:c4:e2:63:f4:34:17:ae:74:49:c0:9e:e9:c6:
                    2c:29:30:8c:4d:02:ce:ad:89:80:48:16:86:3b:ee:
                    cb:8b:e1:67:68:c6:19:e7:aa:9f:dc:13:04:94:7e:
                    3c:ce:37:30:a1:1e:0e:66:29:56:44:d8:b2:c0:c6:
                    1b:49:f0:74:a1:5c:dd:21:c6:75:9e:79:30:a2:ea:
                    6b:cf:19:4d:52:78:25:2a:b0:bb:0f:bd:87:a9:d6:
                    82:2b:83:b2:cd:ec:7e:ef:62:ca:3c:12:ad:a5:56:
                    5e:1f:0f:d8:e5:c5:d9:66:46:58:07:2c:ed:7b:ad:
                    2a:a9:f9:f3:52:4e:24:bb:e4:99:74:5f:12:63:bc:
                    0b:25:2a:be:b1:b1:65:3c:5b:50:78:e9:29:18:5c:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6A:9D:50:EA:BD:E8:22:B1:9F:A4:1A:32:80:41:18:1F:E7:FA:1D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c212b17-58af-41bd-91e5-6527210da563/2c212b17-58af-41bd-91e5-6527210da563.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.48.0/22
                IPv6:
                  2620:13e:1000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11917

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:72:cf:ab:02:da:b2:d8:66:f2:09:38:ce:3d:87:cf:f4:
         80:af:ef:42:f5:d3:73:2a:78:6a:14:a9:92:da:28:0e:52:8a:
         05:f9:92:ed:f3:35:f1:82:37:08:88:56:4b:4e:e6:aa:fb:20:
         38:4e:e1:e3:9b:23:fb:b2:99:ce:d2:6d:ed:9c:f1:65:9f:df:
         9e:9f:aa:30:fa:15:18:a0:10:ac:da:3e:bc:2d:14:11:54:f9:
         46:82:b5:4c:cc:8a:2a:17:c9:ab:bc:20:ab:a2:2f:15:05:3b:
         d0:45:4a:55:26:d7:3b:3d:1a:f4:9c:d8:a1:41:31:a7:b6:8f:
         be:2b:e5:7f:38:ed:b8:2d:e4:15:96:b2:8c:ea:1d:8e:13:7e:
         dd:8f:1d:9c:57:a6:7f:f3:98:67:c2:75:24:f5:98:e1:92:34:
         62:9e:d0:4b:1a:e5:29:87:ce:ec:e3:38:98:b0:07:2e:a7:8c:
         04:10:29:21:b4:e9:e4:81:e1:36:ba:b9:31:24:c6:52:bc:37:
         d0:a0:1f:6f:22:52:8d:dc:7b:ab:22:d1:4d:e8:6a:c5:5f:28:
         e1:40:51:71:1f:90:6d:7b:be:cc:49:46:7f:ce:88:3f:d6:4f:
         37:23:75:ca:43:92:e4:6f:96:09:24:62:87:d1:24:f5:c7:5b:
         bb:0a:81:47
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvO+Lpz7wWI/oCiXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MTExMDAxNDUyMloXDTI4MDIxMzAxNDUyMlowLzEtMCsGA1UEAxMk
MmMyMTJiMTctNThhZi00MWJkLTkxZTUtNjUyNzIxMGRhNTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaCo0eBQnGPO+xOX2xhf/QJRNVz+RN7IQBTc
L0Md0TERSp7jRjqvtTCDjN0+OL24kQH+FQhnBMfwxj+OdHqhJWR46AyqaJTA62s1
9a1DAaPlBYS2bwExoa+8Nevw9hnjlEhqlrLH1BK1gMTiY/Q0F650ScCe6cYsKTCM
TQLOrYmASBaGO+7Li+FnaMYZ56qf3BMElH48zjcwoR4OZilWRNiywMYbSfB0oVzd
IcZ1nnkwouprzxlNUnglKrC7D72HqdaCK4Oyzex+72LKPBKtpVZeHw/Y5cXZZkZY
Byzte60qqfnzUk4ku+SZdF8SY7wLJSq+sbFlPFtQeOkpGFxYWwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFIhqnVDqvegisZ+kGjKAQRgf5/odMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y
YzIxMmIxNy01OGFmLTQxYmQtOTFlNS02NTI3MjEwZGE1NjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJjMjEyYjE3LTU4YWYtNDFiZC05
MWU1LTY1MjcyMTBkYTU2My8yYzIxMmIxNy01OGFmLTQxYmQtOTFlNS02NTI3MjEw
ZGE1NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAJCbzAwDwQCAAIwCQMHBCYgAT4QADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgIujTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz0nLPqwLasthm8gk4zj2Hz/SA
r+9C9dNzKnhqFKmS2igOUooF+ZLt8zXxgjcIiFZLTuaq+yA4TuHjmyP7spnO0m3t
nPFln9+en6ow+hUYoBCs2j68LRQRVPlGgrVMzIoqF8mrvCCroi8VBTvQRUpVJtc7
PRr0nNihQTGnto++K+V/OO24LeQVlrKM6h2OE37djx2cV6Z/85hnwnUk9ZjhkjRi
ntBLGuUph87s4ziYsAcup4wEECkhtOnkgeE2urkxJMZSvDfQoB9vIlKN3HurItFN
6GrFXyjhQFFxH5Bte77MSUZ/zog/1k83I3XKQ5Lkb5YJJGKH0ST1x1u7CoFH
-----END CERTIFICATE-----
Generated at Sun Nov 30 14:52:50 2025 by rpki-client