This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
File:                     e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer (raw, json)
Hash identifier:          cn7rEXQsVwFlpGfsT2dlt9kbuKqpOvtrdALjezQHYLE=
Subject key identifier:   29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584C3A74117934308E714EA33360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 13:45:23 +0000
Certificate not after:    Wed 22 Mar 2028 12:45:23 +0000
Subordinate resources:    AS: 399805
                          IP: 23.179.144.0/23
                          IP: 2602:fc88::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3a:74:11:79:34:30:8e:71:4e:a3:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 18 13:45:23 2025 GMT
            Not After : Mar 22 12:45:23 2028 GMT
        Subject: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:0a:8d:30:11:27:e3:26:5b:d1:85:3a:69:
                    f9:a0:3f:2e:29:b2:e8:f7:65:8b:d0:c3:82:8a:6d:
                    15:d8:10:a2:22:30:65:eb:ae:54:37:4c:4e:0a:ab:
                    1a:bb:6c:4e:ad:54:5e:27:db:97:b9:ce:e6:4d:bc:
                    8b:66:3c:8c:ac:27:47:9e:7c:32:ab:d5:af:b2:0e:
                    56:2a:81:1d:ce:12:99:f8:ca:c2:dd:ca:0b:90:9a:
                    58:0e:f3:ca:ca:9c:a3:ea:e3:61:05:55:f3:fc:27:
                    be:e1:cc:fe:f4:f7:41:54:36:11:fe:ab:67:8f:ab:
                    a6:7e:90:17:a7:ff:53:82:83:c4:0a:8e:80:a5:c1:
                    46:83:c8:c8:25:df:fe:bf:8f:f7:9e:ef:c2:11:90:
                    67:c2:49:d0:92:dd:86:51:f7:be:c6:28:65:13:f8:
                    e5:95:00:da:56:df:a6:4e:3c:a3:e4:86:0f:ca:11:
                    d2:38:17:87:9a:2a:ef:92:25:e8:82:52:54:4e:71:
                    39:2a:ef:30:49:76:08:7c:21:4c:fd:04:e8:51:89:
                    ab:ea:66:f1:f1:8f:51:bf:65:3e:75:8f:f8:00:86:
                    74:a6:6e:1f:dd:b2:45:99:7e:ad:9c:a6:4a:3e:f7:
                    4f:a6:ef:d4:50:d4:74:84:2c:70:30:0c:68:5b:5f:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.144.0/23
                IPv6:
                  2602:fc88::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399805

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:1e:80:46:6d:5f:ef:65:3f:18:81:dd:1a:49:00:40:5f:
         65:45:97:af:18:80:61:53:64:b4:ce:9c:f0:c9:37:e1:45:b5:
         54:11:85:a3:b1:ad:48:b9:be:1d:5a:f5:1f:ee:cc:95:c5:ac:
         f2:5a:38:6d:b7:2e:c6:f6:9b:3f:00:2a:35:9d:28:02:db:9b:
         32:49:65:78:f5:d4:d0:41:95:9a:d2:28:d6:36:97:20:90:84:
         5c:84:21:fe:5e:e9:38:09:d6:84:94:8f:a4:2c:42:96:a1:86:
         0e:76:e7:b9:54:5e:85:fe:d4:2c:17:71:e3:10:38:d8:42:0a:
         07:a0:45:69:27:4e:80:40:ef:bc:2f:95:50:a8:8a:68:fa:76:
         45:95:f5:c9:72:78:bc:f7:2b:0f:1b:bf:fe:30:e1:a6:8d:29:
         06:fb:9a:ba:2b:bd:be:47:33:91:dc:e8:4b:eb:04:ce:0a:6e:
         0a:f5:07:79:4a:ca:95:52:ec:59:40:91:6d:51:71:4a:64:1b:
         54:c8:52:79:9f:89:39:a5:17:fa:1a:7a:e0:cf:14:63:51:43:
         c6:bd:bd:c5:ea:13:1a:e5:04:4d:86:c8:ba:aa:46:52:77:4e:
         12:98:f5:cf:20:fe:0a:84:1e:cc:f0:06:3c:f7:4b:f6:97:14:
         96:b3:79:2f
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEw6dBF5NDCOcU6jM2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MTIxODEzNDUyM1oXDTI4MDMyMjEyNDUyM1owLzEtMCsGA1UEAxMk
ZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRiMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc4KjTARJ+MmW9GFOmn5oD8uKbLo92WL0MOC
im0V2BCiIjBl665UN0xOCqsau2xOrVReJ9uXuc7mTbyLZjyMrCdHnnwyq9Wvsg5W
KoEdzhKZ+MrC3coLkJpYDvPKypyj6uNhBVXz/Ce+4cz+9PdBVDYR/qtnj6umfpAX
p/9TgoPECo6ApcFGg8jIJd/+v4/3nu/CEZBnwknQkt2GUfe+xihlE/jllQDaVt+m
Tjyj5IYPyhHSOBeHmirvkiXoglJUTnE5Ku8wSXYIfCFM/QToUYmr6mbx8Y9Rv2U+
dY/4AIZ0pm4f3bJFmX6tnKZKPvdPpu/UUNR0hCxwMAxoW19RXQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFCmT8B+pYunCzgf1IBvvHUWvLVkQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l
N2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U3ZjU1ODllLTRmYTEtNDFhZi05
ZDNmLTdkYmQ1ZmJkYjM5NS9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZi
ZGIzOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAEXs5AwDgQCAAIwCAMGBCYC/IgAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYZvTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwSh6ARm1f72U/GIHdGkkAQF9l
RZevGIBhU2S0zpzwyTfhRbVUEYWjsa1Iub4dWvUf7syVxazyWjhtty7G9ps/ACo1
nSgC25sySWV49dTQQZWa0ijWNpcgkIRchCH+Xuk4CdaElI+kLEKWoYYOdue5VF6F
/tQsF3HjEDjYQgoHoEVpJ06AQO+8L5VQqIpo+nZFlfXJcni89ysPG7/+MOGmjSkG
+5q6K72+RzOR3OhL6wTOCm4K9Qd5SsqVUuxZQJFtUXFKZBtUyFJ5n4k5pRf6Gnrg
zxRjUUPGvb3F6hMa5QRNhsi6qkZSd04SmPXPIP4KhB7M8AY890v2lxSWs3kv
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:05:40 2025 by rpki-client