This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
File:                     1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer (raw, json)
Hash identifier:          X19WezkHVKe338PNs79puEkHuSPA0wSHiB5HskkVGN0=
Subject key identifier:   5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C4C99837D78EE09F603587180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 25 Dec 2025 01:45:23 +0000
Certificate not after:    Wed 29 Mar 2028 00:45:23 +0000
Subordinate resources:    AS: 17290
                          AS: 40064
                          AS: 40419
                          IP: 23.190.216.0/24
                          IP: 142.249.174.0/24
                          IP: 149.112.177.0/24
                          IP: 2602:fa86::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4c:99:83:7d:78:ee:09:f6:03:58:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 25 01:45:23 2025 GMT
            Not After : Mar 29 00:45:23 2028 GMT
        Subject: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:79:36:e9:e7:44:bd:97:18:e1:6c:bd:23:
                    b4:75:7d:4e:73:84:2e:e2:f7:dc:f6:70:61:bc:bc:
                    2e:52:d9:b1:f0:ad:f2:d2:60:64:ae:66:e2:75:24:
                    7e:96:97:78:78:04:ce:1a:93:19:dc:66:5f:b3:ef:
                    0b:6a:c8:87:92:ab:e9:b7:95:46:c1:b7:7d:a4:e0:
                    9c:48:c1:13:67:72:48:41:0f:f1:b3:eb:71:d1:a7:
                    22:29:5a:3a:04:fe:1c:1f:9b:8f:e4:92:b4:7b:b9:
                    13:ef:f6:36:09:b4:de:1c:9b:b8:fb:8e:9a:2f:9c:
                    14:7f:b7:4f:83:cb:d0:f6:76:5c:7c:be:49:fd:be:
                    ea:aa:ac:9b:4f:9f:48:c9:d8:26:8a:1a:98:83:4d:
                    9c:41:78:b1:be:32:84:34:2e:7e:54:b9:55:f6:a9:
                    4c:7c:ab:0d:72:c5:3a:5f:7f:d0:52:16:93:94:0b:
                    ee:f4:59:de:ab:14:2b:5c:40:60:23:67:b6:b8:3e:
                    a8:ad:35:15:10:66:df:dd:48:b9:45:40:8a:44:11:
                    80:21:08:67:0d:f4:6c:71:82:6b:fb:e8:72:4f:21:
                    f9:41:de:79:34:27:06:89:48:b0:72:59:75:6b:14:
                    32:19:6e:63:92:bc:4c:61:41:22:cf:41:32:0b:1a:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.216.0/24
                  142.249.174.0/24
                  149.112.177.0/24
                IPv6:
                  2602:fa86::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17290
                  40064
                  40419

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:32:22:d9:c9:90:34:f9:ed:92:7a:8d:ae:ed:a4:76:d8:
         66:74:b8:fc:dc:d9:e5:30:7c:78:49:de:da:47:cd:7d:28:52:
         8d:2c:8e:2a:11:01:1a:c6:b4:35:cc:62:e8:44:9a:82:53:3d:
         95:d7:53:b3:92:6e:78:7b:8f:69:52:95:8c:12:8f:be:10:c3:
         7e:22:29:c0:ef:03:f5:91:25:7d:00:a1:51:4b:bf:2d:0f:5b:
         a0:61:b3:f7:15:35:2d:2a:ab:f4:fa:19:f9:d4:d9:fe:f7:b0:
         11:70:00:01:53:cc:4e:b8:0f:d1:1b:6e:f6:75:8c:46:ab:ed:
         b7:5b:20:06:80:f4:69:b9:e7:fa:94:a0:07:31:e8:26:a6:dc:
         07:09:d0:27:f6:72:08:c7:62:55:00:20:9a:47:a9:96:e1:51:
         3d:75:6b:e4:6f:6b:3b:77:eb:d9:5b:fa:79:b3:ea:11:72:cb:
         20:68:70:69:33:2a:5b:a7:6b:57:0e:b0:dd:ed:aa:e1:50:fe:
         03:63:4e:0a:54:34:ad:47:50:48:cb:f4:58:39:c7:37:64:78:
         20:e4:1f:df:82:b1:0f:cb:cf:cc:be:3a:b3:58:d4:3d:03:ff:
         c8:20:1b:e2:93:ce:a4:3c:04:83:ca:9c:c2:07:aa:05:58:a6:
         51:82:79:94
-----BEGIN CERTIFICATE-----
MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWExMmYN9eO4J9gNYcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI1MTIyNTAxNDUyM1oXDTI4MDMyOTAwNDUyM1owLzEtMCsGA1UEAxMk
MTg4NmU0YmItZThiMy00NmY0LThkOWQtOGQyMjYyOTVhOTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjJ5NunnRL2XGOFsvSO0dX1Oc4Qu4vfc9nBh
vLwuUtmx8K3y0mBkrmbidSR+lpd4eATOGpMZ3GZfs+8LasiHkqvpt5VGwbd9pOCc
SMETZ3JIQQ/xs+tx0aciKVo6BP4cH5uP5JK0e7kT7/Y2CbTeHJu4+46aL5wUf7dP
g8vQ9nZcfL5J/b7qqqybT59IydgmihqYg02cQXixvjKENC5+VLlV9qlMfKsNcsU6
X3/QUhaTlAvu9FneqxQrXEBgI2e2uD6orTUVEGbf3Ui5RUCKRBGAIQhnDfRscYJr
++hyTyH5Qd55NCcGiUiwcll1axQyGW5jkrxMYUEiz0EyCxo6CwIDAQABo4IEQDCC
BDwwHQYDVR0OBBYEFFtZRlWYqiQz7GdosyvKvfB434lCMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x
ODg2ZTRiYi1lOGIzLTQ2ZjQtOGQ5ZC04ZDIyNjI5NWE5ODIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzE4ODZlNGJiLWU4YjMtNDZmNC04
ZDlkLThkMjI2Mjk1YTk4Mi8xODg2ZTRiYi1lOGIzLTQ2ZjQtOGQ5ZC04ZDIyNjI5
NWE5ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAXvtgDBACO+a4DBACVcLEwDgQCAAIwCAMGBCYC
+oYAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAkOKAgMAnIACAwCd4zBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQCPIzIi2cmQNPntknqNru2kdthmdLj83NnlMHx4Sd7aR819KFKNLI4qEQEaxrQ1
zGLoRJqCUz2V11Ozkm54e49pUpWMEo++EMN+IinA7wP1kSV9AKFRS78tD1ugYbP3
FTUtKqv0+hn51Nn+97ARcAABU8xOuA/RG272dYxGq+23WyAGgPRpuef6lKAHMegm
ptwHCdAn9nIIx2JVACCaR6mW4VE9dWvkb2s7d+vZW/p5s+oRcssgaHBpMypbp2tX
DrDd7arhUP4DY04KVDStR1BIy/RYOcc3ZHgg5B/fgrEPy8/MvjqzWNQ9A//IIBvi
k86kPASDypzCB6oFWKZRgnmU
-----END CERTIFICATE-----
Generated at Thu Dec 25 23:51:53 2025 by rpki-client