This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.cer
File:                     41fa6fa6-1b05-4e52-b6c3-e45c19d51305.cer (raw, json)
Hash identifier:          T1abL8kpsV98nKQcYQ+EyamYKHNW74qKGjXJIU5/26o=
Subject key identifier:   58:40:1C:01:A4:DF:DA:92:6E:83:56:D0:51:E0:04:EB:70:0F:3A:07
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584BD328C289C05E4F6E2E911540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Nov 2025 13:45:23 +0000
Certificate not after:    Mon 14 Feb 2028 13:45:23 +0000
Subordinate resources:    AS: 13920
                          IP: 192.96.143.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d3:28:c2:89:c0:5e:4f:6e:2e:91:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 11 13:45:23 2025 GMT
            Not After : Feb 14 13:45:23 2028 GMT
        Subject: CN=41fa6fa6-1b05-4e52-b6c3-e45c19d51305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:ba:e7:ba:f7:4c:26:08:2b:b3:e9:0b:e3:
                    34:3e:13:6a:2e:9e:40:d7:08:d6:a3:82:fc:20:ff:
                    4a:a6:17:fe:74:07:6d:e3:c7:84:ab:54:42:73:d7:
                    3d:1e:41:4e:8b:e9:91:b5:5b:e1:b2:13:5e:bd:8e:
                    80:e8:fd:f3:87:0a:b1:be:ee:f6:b1:08:6c:98:b3:
                    66:02:af:bb:c9:99:66:5e:ff:82:84:76:09:55:0f:
                    e1:53:62:c9:14:db:e7:c8:b1:d0:08:05:27:bc:16:
                    fd:aa:af:08:60:73:27:9d:b7:87:e2:fd:f7:59:a7:
                    12:a4:a9:45:d6:0d:7a:32:da:d9:8d:35:a0:27:76:
                    1e:1a:0d:4b:10:64:d4:f6:b9:02:a9:bf:f8:6d:6c:
                    5e:86:d8:f1:a0:2e:49:23:82:fd:99:a5:e3:f5:c8:
                    bb:bf:34:a4:b6:75:da:ca:04:7c:a5:95:67:48:06:
                    d3:d3:7e:7d:d1:0e:0a:56:28:cf:13:2b:d8:36:98:
                    b7:27:6b:7f:ed:55:ab:a9:98:16:4d:9f:a3:5f:db:
                    fd:42:d3:62:9f:ff:24:f7:ee:10:b4:4b:d6:90:22:
                    e4:6d:04:a4:63:fc:65:9a:99:3f:3a:72:54:ea:a5:
                    ad:a0:69:64:04:69:68:9c:b4:8f:3f:26:b6:3d:41:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:40:1C:01:A4:DF:DA:92:6E:83:56:D0:51:E0:04:EB:70:0F:3A:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/41fa6fa6-1b05-4e52-b6c3-e45c19d51305/41fa6fa6-1b05-4e52-b6c3-e45c19d51305.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.143.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13920

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:1c:ce:87:7a:04:39:81:14:94:a4:0b:9c:79:06:6d:e5:
         2b:1b:6c:ca:d4:62:77:82:f6:6c:04:91:d4:c7:e3:67:93:88:
         ff:3c:32:e5:4d:b5:04:e6:37:f2:80:1a:fd:70:eb:c4:e6:97:
         2c:ab:64:73:c4:7d:9e:4a:de:15:5e:d4:59:30:16:99:2c:bc:
         bc:72:c2:48:90:83:73:c5:cd:a4:49:47:08:05:50:ea:30:0f:
         5f:53:44:1a:c7:e4:56:a1:0e:b6:75:e3:66:6b:34:aa:aa:a4:
         de:02:ba:1f:8a:ef:36:d7:23:6a:81:dd:a4:2b:77:e5:49:a8:
         f8:48:7c:73:54:04:3c:43:c5:d7:bd:3d:52:5c:e0:77:d1:de:
         c0:6a:aa:43:cd:c6:17:23:52:27:d1:3c:bd:d6:e3:8d:ea:59:
         3c:3d:fe:c2:51:e9:9b:64:02:b0:38:66:29:86:a0:f7:13:7f:
         11:c1:90:7c:49:9f:b1:64:d5:00:c5:4b:99:b1:c0:f9:31:c0:
         aa:d5:f5:16:95:a8:da:42:a7:d6:04:3d:ad:9d:94:c0:b1:56:
         48:72:d9:95:45:0e:e7:e2:43:5b:c5:9c:06:98:2b:02:b7:84:
         55:b6:0b:9b:bd:05:b0:1a:3a:57:19:72:6d:e2:dd:a1:47:1a:
         e2:c6:0b:5d
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEvTKMKJwF5Pbi6RFUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MTExMTEzNDUyM1oXDTI4MDIxNDEzNDUyM1owLzEtMCsGA1UEAxMk
NDFmYTZmYTYtMWIwNS00ZTUyLWI2YzMtZTQ1YzE5ZDUxMzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYW657r3TCYIK7PpC+M0PhNqLp5A1wjWo4L8
IP9Kphf+dAdt48eEq1RCc9c9HkFOi+mRtVvhshNevY6A6P3zhwqxvu72sQhsmLNm
Aq+7yZlmXv+ChHYJVQ/hU2LJFNvnyLHQCAUnvBb9qq8IYHMnnbeH4v33WacSpKlF
1g16MtrZjTWgJ3YeGg1LEGTU9rkCqb/4bWxehtjxoC5JI4L9maXj9ci7vzSktnXa
ygR8pZVnSAbT03590Q4KVijPEyvYNpi3J2t/7VWrqZgWTZ+jX9v9QtNin/8k9+4Q
tEvWkCLkbQSkY/xlmpk/OnJU6qWtoGlkBGlonLSPPya2PUEPVwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFFhAHAGk39qSboNW0FHgBOtwDzoHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80
MWZhNmZhNi0xYjA1LTRlNTItYjZjMy1lNDVjMTlkNTEzMDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQxZmE2ZmE2LTFiMDUtNGU1Mi1i
NmMzLWU0NWMxOWQ1MTMwNS80MWZhNmZhNi0xYjA1LTRlNTItYjZjMy1lNDVjMTlk
NTEzMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAYI8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
NmAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAB48czod6BDmBFJSkC5x5Bm3lKxtsytRid4L2bASR1MfjZ5OI
/zwy5U21BOY38oAa/XDrxOaXLKtkc8R9nkreFV7UWTAWmSy8vHLCSJCDc8XNpElH
CAVQ6jAPX1NEGsfkVqEOtnXjZms0qqqk3gK6H4rvNtcjaoHdpCt35Umo+Eh8c1QE
PEPF1709Ulzgd9HewGqqQ83GFyNSJ9E8vdbjjepZPD3+wlHpm2QCsDhmKYag9xN/
EcGQfEmfsWTVAMVLmbHA+THAqtX1FpWo2kKn1gQ9rZ2UwLFWSHLZlUUO5+JDW8Wc
BpgrAreEVbYLm70FsBo6VxlybeLdoUca4sYLXQ==
-----END CERTIFICATE-----
Generated at Sun Nov 30 14:53:16 2025 by rpki-client