This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
File:                     0a609de0-040f-42a5-990f-417b65a086a6.cer (raw, json)
Hash identifier:          fvoi0keb5hMMTiZdn/0KI+BMzHbF8ux3CD/YF5ubgSc=
Subject key identifier:   F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584C416EC8E999306132A0E76F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Dec 2025 01:45:24 +0000
Certificate not after:    Sat 25 Mar 2028 00:45:24 +0000
Subordinate resources:    AS: 20347
                          IP: 24.51.0.0/19
                          IP: 66.22.128.0/19
                          IP: 2605:7540::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:6e:c8:e9:99:30:61:32:a0:e7:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec 21 01:45:24 2025 GMT
            Not After : Mar 25 00:45:24 2028 GMT
        Subject: CN=0a609de0-040f-42a5-990f-417b65a086a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:a1:df:75:cc:ec:3f:54:16:7a:02:e2:aa:
                    d1:12:9a:47:a2:a1:b2:47:05:d7:4b:62:48:a6:7c:
                    ac:e1:8a:b1:bb:65:21:d3:16:c8:d4:5c:30:6f:f1:
                    8b:87:f2:4e:36:e5:3b:d1:1f:4a:76:da:8b:4f:38:
                    5a:95:22:39:c3:ea:50:9e:04:d7:20:06:0b:e8:71:
                    5d:27:23:ce:88:b8:0a:61:9d:34:f8:ff:13:13:6a:
                    65:a8:ab:57:21:f6:66:fa:a0:34:92:fa:16:9d:8b:
                    e5:18:82:ff:7f:fa:f2:91:ce:f0:85:6b:a5:5d:b1:
                    39:35:7e:0d:c9:37:69:32:6b:8d:1d:d0:00:53:c1:
                    f1:3c:9b:52:9c:83:f3:3d:f1:2a:a3:4b:ef:0b:cb:
                    75:14:50:dc:7d:4f:1c:39:70:0e:fd:df:cc:54:47:
                    e6:64:49:22:f7:b2:f3:43:da:d1:9b:e3:c4:00:e7:
                    23:c7:f4:23:28:1f:3b:58:77:3b:55:6a:c9:11:a2:
                    aa:b6:33:d6:b0:60:81:82:1f:a8:04:92:28:b0:8b:
                    d1:ec:1a:7e:d9:e8:8d:89:61:e0:b0:b8:68:76:fb:
                    f6:f7:c0:3e:77:3b:dd:12:2e:9a:4a:57:61:51:1a:
                    ba:4a:65:2e:15:b0:b7:0f:5c:bb:15:b0:6b:f0:d3:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.0.0/19
                  66.22.128.0/19
                IPv6:
                  2605:7540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20347

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:26:66:01:28:57:b0:44:41:33:c5:61:cc:2c:85:46:b6:25:
         7d:08:11:20:e2:0e:af:6b:1a:73:e0:f8:f1:5b:fe:43:99:42:
         7b:14:27:f3:f0:4d:6b:cd:0b:29:72:d5:69:08:0c:dd:5a:1a:
         1b:68:5a:88:71:59:d0:fd:4c:f2:69:83:00:17:b8:15:76:19:
         8a:1e:0d:1d:d5:25:58:ff:69:d1:6a:c4:6c:57:1b:4e:ec:f8:
         a0:0e:cd:7c:2f:d1:88:e5:e1:68:88:20:22:be:f0:3b:c7:02:
         ae:11:20:61:4e:fb:00:11:c1:37:2a:1d:78:10:49:25:c4:cb:
         9c:c3:8c:c6:2c:92:84:84:bf:5d:8d:6e:03:0a:1e:4d:0e:4a:
         23:6a:75:a7:de:e5:3a:81:f9:c9:f7:c5:e7:8d:65:f6:64:83:
         3e:34:1e:bc:e2:d0:30:e8:97:e5:fd:87:e2:00:a6:78:15:e2:
         3c:a2:d5:15:d4:b0:04:96:94:24:04:08:3c:9a:1a:a9:fd:e1:
         b9:84:ab:be:f3:9e:78:df:05:7f:d7:d9:68:67:88:09:a7:33:
         f0:e0:8f:75:10:ab:70:d2:0e:5c:b4:24:37:a5:d4:0e:70:1b:
         26:1a:b9:c6:70:33:13:d8:61:91:86:79:63:d8:b2:2c:54:65:
         6e:09:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:07:00 2025 by rpki-client