This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
File:                     36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer (raw, json)
Hash identifier:          hoH3TXEA6BTbabPlJALV/eJAeR0E0f+bNQ6sRRshY/k=
Subject key identifier:   E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority key identifier: 5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70
Certificate issuer:       /CN=f70c9613-7def-4bc4-b860-f4e5374d76a7
Certificate serial:       010D0C9F4328584BEEBA65BD8B34B3310EE5FF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
caRepository:             rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 21 Nov 2025 10:45:39 +0000
Certificate not after:    Thu 24 Feb 2028 10:45:39 +0000
Subordinate resources:    AS: 398991
                          IP: 130.250.188.0/23
                          IP: 184.154.240.0/21
                          IP: 198.13.16.0/23
                          IP: 199.245.233.0 -- 199.245.234.255
                          IP: 206.109.56.0/22
                          IP: 208.122.16.0/22
                          IP: 209.131.120.0/22
                          IP: 2607:a540::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ee:ba:65:bd:8b:34:b3:31:0e:e5:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70c9613-7def-4bc4-b860-f4e5374d76a7
        Validity
            Not Before: Nov 21 10:45:39 2025 GMT
            Not After : Feb 24 10:45:39 2028 GMT
        Subject: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:b2:18:15:32:11:70:77:d6:39:f7:63:a0:
                    b3:6e:e8:77:94:d1:e3:d1:e8:e7:f4:f2:6d:5c:8a:
                    95:47:74:75:32:f3:9c:6e:14:87:b0:9c:7f:69:17:
                    93:62:44:ef:f1:ae:6a:36:ad:88:87:77:70:e0:10:
                    ed:fd:16:4c:95:93:fe:9d:02:9b:18:78:f2:dc:a6:
                    7b:2e:fa:a1:1d:cf:12:40:73:fd:c2:7a:6d:51:f3:
                    0f:74:17:71:94:ba:de:70:30:67:eb:95:91:5d:5f:
                    1f:02:fd:c4:38:39:1a:b2:18:fa:cd:8c:f6:a6:ad:
                    f8:0d:66:09:6a:64:3e:33:a3:a6:81:ed:47:06:dd:
                    bf:be:87:7e:0e:fb:9b:b2:a4:62:85:8c:1e:f8:64:
                    77:30:78:5c:00:0d:6b:68:c9:00:6d:cc:d2:1c:3c:
                    96:15:55:a8:ae:ef:09:55:cf:0d:df:8a:82:b8:05:
                    b2:6c:04:f0:dc:8e:98:f3:93:38:a3:1a:2b:a4:47:
                    a8:56:82:72:90:69:3a:f2:2b:0c:c4:4f:66:5b:74:
                    ae:be:2e:00:a9:6f:f5:8a:63:9d:ee:f4:b5:18:c6:
                    28:83:73:67:93:cf:14:be:75:83:d6:20:13:53:d5:
                    88:46:34:80:00:be:eb:80:41:53:4c:c4:a0:d1:d4:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl

            X509v3 Authority Key Identifier:
                keyid:5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.188.0/23
                  184.154.240.0/21
                  198.13.16.0/23
                  199.245.233.0-199.245.234.255
                  206.109.56.0/22
                  208.122.16.0/22
                  209.131.120.0/22
                IPv6:
                  2607:a540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398991

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:77:64:3d:1f:07:0f:64:a5:0c:29:8f:50:de:cd:a4:06:d2:
         be:c8:d7:9a:f8:77:e4:30:01:3a:4a:bd:6e:be:6e:05:4c:1b:
         d2:8a:5a:d9:cf:bf:00:0c:88:eb:e5:31:46:9a:2e:dc:fe:e0:
         29:0c:50:d4:83:f7:12:02:eb:25:b3:10:39:d2:09:1b:a7:4c:
         66:4d:2a:5a:be:fb:16:95:80:76:69:5b:c2:ac:a6:2c:a7:5c:
         46:1a:68:d6:fe:15:9f:a8:45:62:91:dd:29:3d:ee:78:8d:4a:
         a1:89:2f:b9:ed:9f:78:a5:7e:3a:f5:b5:91:52:6c:19:a1:c8:
         8c:d4:53:25:c7:9b:0e:b4:6d:4a:dd:77:67:74:74:95:03:04:
         f1:ab:40:d7:b6:1b:12:82:d8:68:db:68:b3:70:6f:1b:9d:cc:
         43:54:38:9a:dc:1e:64:62:41:38:b6:d0:e3:45:6d:45:a0:4c:
         08:47:e4:b5:80:3e:ef:b8:ee:26:54:b7:db:d5:64:44:a7:46:
         c9:a9:4c:e4:34:d1:62:da:94:fb:a9:15:fb:55:07:43:12:46:
         e6:c4:83:02:83:a6:35:4c:99:13:fb:e3:ff:41:1b:0d:fb:2f:
         c4:1f:fa:03:ca:45:d8:a1:bb:4c:4f:63:b6:a7:6f:f5:2f:ee:
         95:2d:b5:74
-----BEGIN CERTIFICATE-----
MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWEvuumW9izSzMQ7l/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjcwYzk2MTMtN2RlZi00YmM0LWI4NjAtZjRlNTM3NGQ3
NmE3MB4XDTI1MTEyMTEwNDUzOVoXDTI4MDIyNDEwNDUzOVowPTE7MDkGA1UEAxMy
MzZmYzAzYzJlMTE2NzEyYzIzMjE0OTcxMGRlYTFiOTU0OTdmMDIwMDM4MWZjMjg3
NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs37IYFTIRcHfWOfdj
oLNu6HeU0ePR6Of08m1cipVHdHUy85xuFIewnH9pF5NiRO/xrmo2rYiHd3DgEO39
FkyVk/6dApsYePLcpnsu+qEdzxJAc/3Cem1R8w90F3GUut5wMGfrlZFdXx8C/cQ4
ORqyGPrNjPamrfgNZglqZD4zo6aB7UcG3b++h34O+5uypGKFjB74ZHcweFwADWto
yQBtzNIcPJYVVaiu7wlVzw3fioK4BbJsBPDcjpjzkzijGiukR6hWgnKQaTryKwzE
T2ZbdK6+LgCpb/WKY53u9LUYxiiDc2eTzxS+dYPWIBNT1YhGNIAAvuuAQVNMxKDR
1LyTAgMBAAGjggP8MIID+DAdBgNVHQ4EFgQU4VQIwxCwbpqV7RLOLukzK3LC2dMw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvNWJjODcyODk0NzNiNDNjNWE2Y2VlOTE5
ZTZkZWIwOTAvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvNWJjODcyODk0NzNiNDNjNWE2Y2VlOTE5ZTZkZWIwOTAv
MC9FMTU0MDhDMzEwQjA2RTlBOTVFRDEyQ0UyRUU5MzMyQjcyQzJEOUQzLm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBk
Mi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Y3MGM5NjEzLTdkZWYtNGJjNC1iODYw
LWY0ZTUzNzRkNzZhNy9mNzBjOTYxMy03ZGVmLTRiYzQtYjg2MC1mNGU1Mzc0ZDc2
YTcuY3JsMB8GA1UdIwQYMBaAFF9iejLza6bYSEbWnz+J3Z/cfmpwMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1kMGQyLTQxNjUt
ODMwOC1kZjI1OTdlMzQzZjgvZjcwYzk2MTMtN2RlZi00YmM0LWI4NjAtZjRlNTM3
NGQ3NmE3LmNlcjBaBggrBgEFBQcBBwEB/wRLMEkwOAQCAAEwMgMEAYL6vAMEA7ia
8AMEAcYNEDAMAwQAx/XpAwQAx/XqAwQCzm04AwQC0HoQAwQC0YN4MA0EAgACMAcD
BQAmB6VAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWjzBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQd2Q9
HwcPZKUMKY9Q3s2kBtK+yNea+HfkMAE6Sr1uvm4FTBvSilrZz78ADIjr5TFGmi7c
/uApDFDUg/cSAuslsxA50gkbp0xmTSpavvsWlYB2aVvCrKYsp1xGGmjW/hWfqEVi
kd0pPe54jUqhiS+57Z94pX469bWRUmwZociM1FMlx5sOtG1K3XdndHSVAwTxq0DX
thsSgtho22izcG8bncxDVDia3B5kYkE4ttDjRW1FoEwIR+S1gD7vuO4mVLfb1WRE
p0bJqUzkNNFi2pT7qRX7VQdDEkbmxIMCg6Y1TJkT++P/QRsN+y/EH/oDykXYobtM
T2O2p2/1L+6VLbV0
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:50:02 2025 by rpki-client