This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
File:                     d886f3a2-7325-4b74-8802-19528a9f380c.cer (raw, json)
Hash identifier:          0Kvxj1t0zVNNdORqp1/DC4V8RpfmRLYLcI3c0P+taq4=
Subject key identifier:   70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584C29B3F65ACAD49A4E249E1100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Dec 2025 13:45:23 +0000
Certificate not after:    Thu 16 Mar 2028 12:45:23 +0000
Subordinate resources:    IP: 158.51.44.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:29:b3:f6:5a:ca:d4:9a:4e:24:9e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 12 13:45:23 2025 GMT
            Not After : Mar 16 12:45:23 2028 GMT
        Subject: CN=d886f3a2-7325-4b74-8802-19528a9f380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:d2:12:bd:c4:57:43:8c:a7:00:1b:d0:d4:
                    0b:45:e6:23:fb:92:d4:0a:d2:8c:1e:82:d1:c8:1b:
                    90:55:13:48:ff:27:06:20:12:d3:44:63:4e:b4:c0:
                    2a:b1:3c:8f:89:06:12:d1:38:68:b7:64:d8:1c:b9:
                    0f:6b:ae:2c:61:df:73:d6:c3:67:1b:d7:20:72:81:
                    db:3a:ac:ee:25:be:f0:7d:b0:6c:d2:42:8b:b3:7d:
                    37:de:b0:19:7f:1f:bc:23:cf:60:e4:80:52:19:0f:
                    b4:27:a9:01:ea:d2:10:38:ba:36:ec:a4:b9:b0:c4:
                    84:a9:7c:32:ac:59:91:a6:bb:00:80:12:34:c9:6d:
                    2a:64:94:f0:80:0c:d5:18:6e:6d:b4:4c:f5:2a:9c:
                    54:2d:13:bb:2a:07:8a:e3:23:fb:bb:65:7c:21:cd:
                    f1:94:de:fe:7e:90:d2:56:fd:16:5f:0c:8b:80:77:
                    db:13:57:50:8a:3d:51:a9:e1:3e:1e:41:5e:e6:ac:
                    47:da:c2:a8:e7:1d:2e:38:93:e1:36:fc:5a:c9:7a:
                    4b:f6:f6:ea:70:8e:ee:af:cc:8c:1f:7b:63:51:b7:
                    1f:5c:6d:c0:1d:ad:ca:a6:49:d4:23:84:f9:37:50:
                    29:90:b2:bc:c4:64:cf:55:ba:c5:84:86:b4:cc:b2:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:19:b0:71:d8:02:48:c5:cb:e8:87:2e:e0:d5:82:34:40:f6:
         ef:79:ce:28:8e:05:22:42:27:cb:00:43:27:99:ec:19:4f:94:
         1f:78:98:c7:3d:ba:de:30:23:52:2e:48:b1:b5:c5:4f:fa:d2:
         76:01:bd:5e:de:ac:d8:9b:3a:d3:19:22:86:a0:dc:de:1e:a0:
         a4:96:b0:2f:1a:98:5a:3e:f5:3a:06:37:5f:43:68:96:da:ee:
         7e:82:ff:89:69:a7:a7:37:d1:81:c2:45:26:3e:b5:71:9c:6d:
         73:b1:95:2c:78:89:43:96:09:5b:31:ba:56:31:a8:a2:52:71:
         28:f7:dd:61:dd:11:f4:c2:51:19:f4:d8:b4:41:c5:6e:b3:0d:
         e8:67:e2:0f:5b:fd:ad:c2:44:79:cd:df:07:b4:d0:a5:f8:97:
         e0:b1:be:78:df:bb:41:70:8b:53:4f:63:e5:96:35:88:2d:c1:
         93:7c:41:f3:30:0c:99:94:2a:5f:35:4e:32:fd:e4:f6:5e:4a:
         4e:18:fb:9e:06:5f:f9:5e:94:65:db:cc:d3:f0:2f:79:a6:ca:
         f1:39:e5:ef:b4:ea:ea:b6:2c:37:c2:b6:0b:8c:9a:70:ff:39:
         d6:cb:32:29:7f:9b:3b:8a:2d:3a:1a:b8:d8:26:75:92:38:8e:
         cb:4b:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----