This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer
File:                     1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer (raw, json)
Hash identifier:          +fyF1GVZRlnG/dlqlq3LgYMgP5v4NbXCvVNVidfD/g8=
Subject key identifier:   74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C390EBA0084347DD664863340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 01:45:23 +0000
Certificate not after:    Wed 22 Mar 2028 00:45:23 +0000
Subordinate resources:    AS: 40205
                          IP: 23.189.216.0/24
                          IP: 2620:cd:a000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:39:0e:ba:00:84:34:7d:d6:64:86:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 18 01:45:23 2025 GMT
            Not After : Mar 22 00:45:23 2028 GMT
        Subject: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:71:44:44:7c:41:1c:a6:5b:25:cd:d2:87:
                    e7:1c:e8:a0:84:29:99:9b:c5:83:71:d1:9b:fc:f6:
                    af:fd:cc:88:e8:30:4a:d0:1b:ef:70:af:15:89:44:
                    ed:c6:2d:70:14:20:6e:4b:76:4f:de:81:53:ac:1a:
                    bd:7a:6a:de:c3:18:b4:18:46:4c:51:a0:da:ad:2d:
                    4a:1c:fc:26:4d:1a:76:06:2a:22:61:bd:d5:30:17:
                    0e:29:16:ca:02:17:8d:8f:40:a2:b7:a7:c1:86:9f:
                    1b:12:1a:d2:12:29:d6:fb:07:0c:5e:a9:7a:19:dd:
                    c1:73:2b:a3:24:fc:2d:3d:b4:47:e4:96:95:73:87:
                    36:c6:12:43:57:d4:f4:1b:4a:41:41:e0:16:6f:e5:
                    aa:20:8f:c7:0c:be:e5:4b:8b:17:1c:8b:4a:95:b2:
                    18:42:ac:fe:d8:a6:74:bd:76:fe:3f:f5:b8:cc:b5:
                    3b:86:24:a1:e2:c1:aa:87:14:0a:0f:25:79:13:31:
                    7b:b1:86:b9:5d:57:2b:c6:3a:94:df:ef:92:64:73:
                    31:fe:98:aa:0b:6a:73:37:ec:b3:a5:ea:37:d2:5d:
                    c9:70:0d:f8:bf:71:10:34:53:c2:64:88:78:60:89:
                    a4:0a:4e:7b:0f:ac:fe:ae:6c:0b:3e:e0:67:19:5c:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.216.0/24
                IPv6:
                  2620:cd:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:04:8c:3b:70:b0:a2:dc:57:5c:ee:5d:05:ab:71:db:b7:e0:
         9f:7b:3b:97:59:da:ac:df:e2:fd:f9:77:bd:f0:95:c1:da:c7:
         d8:82:05:74:09:e0:24:b1:3d:c2:d5:3c:e0:1b:9b:e0:44:8a:
         7d:41:e6:5b:d4:f8:c3:5d:b4:e3:23:fd:c7:cc:20:7f:72:75:
         d8:d4:79:82:66:53:88:c2:42:ca:05:96:b8:8d:f7:1a:cc:a3:
         42:a7:d1:3b:6a:be:1b:2f:bd:6d:92:7a:cc:0e:e6:6c:57:c7:
         4a:2c:92:b4:1f:e5:5b:8a:b9:a5:5c:3e:ba:7a:2e:59:5c:40:
         e4:6e:54:f3:9d:35:1f:ad:f4:1d:55:65:2b:a1:e8:62:0a:53:
         ab:a9:cd:09:42:08:95:14:c0:d9:0f:21:7d:ac:99:61:9a:53:
         57:50:be:27:bc:7d:be:83:73:c9:29:0e:39:17:5f:0d:57:fc:
         28:92:01:c1:8f:de:90:1b:c2:d4:a8:79:ca:24:8a:d3:28:7f:
         ba:99:56:85:6f:9e:d5:57:f3:36:d9:78:0d:bf:75:7d:62:e6:
         0e:fe:85:10:11:41:c5:d3:30:14:43:81:68:24:01:c3:80:b6:
         d0:fd:2a:99:f0:d7:15:83:f4:f3:46:95:6a:82:c4:38:a3:c1:
         10:99:93:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----