This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3.cer
File:                     5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3.cer (raw, json)
Hash identifier:          KtpS3iqpOaG39J1Uv7rwex1yJgH3num/14EJSq1HdNg=
Subject key identifier:   93:08:B3:38:1D:BF:AE:9C:90:04:5A:F3:E6:F3:90:B6:F5:76:98:5D
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B4621A823CEBB1712674C7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 18:03:07 +0000
Certificate not after:    Mon 01 Feb 2027 19:03:07 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/32
Validation:               Failed, certificate revoked on Tue 29 Oct 2024 18:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b4:62:1a:82:3c:eb:b1:71:26:74:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 29 18:03:07 2024 GMT
            Not After : Feb  1 19:03:07 2027 GMT
        Subject: CN=5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:7c:f9:2f:4c:88:82:d8:a0:73:79:fd:ba:
                    25:16:f9:cd:eb:c2:e7:15:06:44:bc:da:f8:33:36:
                    0d:3b:01:89:b5:4a:73:10:59:59:f5:10:3c:31:e5:
                    2c:10:e9:1c:47:6e:14:37:3b:d7:71:b9:9c:6b:ee:
                    31:fc:33:cf:27:3c:4b:0e:cc:2f:d6:c9:20:27:45:
                    66:d3:18:06:61:d6:de:87:b2:77:a5:b9:a8:7b:d1:
                    99:6a:ae:50:e4:f0:2f:a2:02:5c:e9:e5:01:cc:81:
                    df:0d:57:91:63:dd:48:bd:bc:85:c1:a8:48:64:68:
                    ad:2c:9a:59:a1:3f:1a:68:62:1b:e1:ec:ad:1c:7c:
                    c1:e6:a7:e7:8e:0e:34:0c:d1:d9:4b:b3:3f:c7:3c:
                    d3:42:e5:e0:2a:91:22:16:bb:83:a8:85:e0:ec:6b:
                    c8:b1:75:f8:1b:1d:93:1a:ea:24:f7:e9:b6:d0:3d:
                    86:e4:d1:79:25:0f:4c:94:38:8e:51:25:88:0b:32:
                    06:cd:68:d2:84:b0:ed:01:f5:f0:0b:4a:cd:8a:8e:
                    1b:22:87:99:61:b8:ab:a6:f5:99:09:54:74:25:d2:
                    41:90:36:0c:1a:77:ec:ec:f6:21:ee:8a:1e:12:c5:
                    a8:bf:62:fa:cd:95:e0:1c:40:07:5f:e2:0e:8d:ab:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:08:B3:38:1D:BF:AE:9C:90:04:5A:F3:E6:F3:90:B6:F5:76:98:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3/5b5370f4-c84f-4acc-b7e9-5fc257d6e4c3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:43:88:fe:4a:b3:19:55:a4:0b:69:6b:d2:55:5c:74:fe:
         55:12:f6:87:95:bf:d8:75:55:d0:e5:31:b1:fc:ac:63:51:ab:
         8b:fd:9c:d5:2a:8d:b1:8d:85:08:40:97:48:00:44:58:43:74:
         32:9c:e2:bf:7a:b2:68:39:42:b2:19:b9:e1:53:7c:03:5f:ba:
         06:7d:3e:03:7d:42:7a:b8:e1:58:69:c5:a1:e4:bf:9d:46:c3:
         57:d0:f4:1c:65:f5:5a:a1:ec:f3:ae:0d:49:be:58:23:34:87:
         23:2a:fe:0c:2b:c1:5d:03:6b:e4:c1:02:de:1c:6d:3f:11:f8:
         3e:d7:13:71:ba:57:75:9b:d0:59:be:2c:31:1b:39:5a:10:0a:
         d9:cc:e6:1d:04:41:e5:0c:cf:01:d4:3a:cb:36:59:21:f5:0f:
         c3:6f:63:ef:a8:50:b1:a0:a6:02:b8:72:e3:ed:a8:34:6e:3a:
         4e:b0:ce:9f:9d:81:8a:6f:0b:2e:05:72:89:7f:08:3f:27:c0:
         66:17:be:dc:e1:d0:3d:a1:19:d1:5e:3a:15:9f:e8:b3:8b:aa:
         bc:f1:4c:8c:56:2d:ee:37:e8:cb:ca:e3:91:be:83:f0:ac:cc:
         d2:a7:94:63:df:f9:b9:be:c5:d2:e6:fd:e9:de:36:d2:cd:51:
         c2:76:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:14:14 2025 by rpki-client