This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer
File:                     ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer (raw, json)
Hash identifier:          LTBctvoTNYlcHlYWNAMLV2LQvhJnxH/mZuzjjQBRNd4=
Subject key identifier:   FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C2C7EA7CE0B964D5B53625E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Dec 2025 13:45:24 +0000
Certificate not after:    Fri 17 Mar 2028 12:45:24 +0000
Subordinate resources:    IP: 98.159.96.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:7e:a7:ce:0b:96:4d:5b:53:62:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 13 13:45:24 2025 GMT
            Not After : Mar 17 12:45:24 2028 GMT
        Subject: CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1e:21:35:7c:f8:0c:01:27:b6:27:37:5b:f7:
                    30:7f:12:fe:6e:ee:4d:05:f5:e7:96:d0:f6:9b:62:
                    81:e9:59:4b:6c:1b:11:f0:e3:5d:c1:e1:9e:87:14:
                    79:d9:92:8c:6a:75:98:a3:8e:65:0c:6b:1b:a0:49:
                    4d:e8:92:ed:9f:5d:5b:d5:b2:2c:08:49:b8:6b:65:
                    43:4a:f6:9d:ff:63:cc:30:15:a2:c8:9c:55:3e:26:
                    47:6f:97:21:fe:a3:a1:b8:82:fb:c7:ab:2b:92:95:
                    04:53:04:11:51:cf:50:8a:c4:fb:58:c0:90:db:c1:
                    b0:ea:fb:09:4a:7f:e1:01:16:ef:7e:b7:46:8a:02:
                    c0:0c:be:a0:4d:eb:5c:e7:0f:57:4a:c7:1c:94:d0:
                    c3:cb:39:a3:10:cb:b1:59:ba:1a:e9:53:db:f8:8f:
                    81:2b:c3:11:7a:07:bd:24:25:e4:79:51:a7:88:47:
                    a6:77:6e:c9:b7:97:6d:51:54:3e:4d:bb:95:5e:3b:
                    7d:a8:e7:c3:9c:82:f5:f3:b0:91:63:8b:1b:fa:ce:
                    5f:10:11:c3:ab:e9:cb:87:ea:a1:51:90:f8:86:ea:
                    7c:73:f5:ed:de:a1:c5:6b:ac:40:db:c1:ef:a2:e1:
                    7b:cd:1e:a3:75:44:4f:57:6f:c3:b3:5d:76:ff:c5:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:23:78:99:8f:6f:fb:53:b6:d9:b0:60:9d:17:76:ce:ab:
         67:ba:d9:d3:19:ff:19:0b:f6:e0:bc:84:ed:47:1f:49:47:ac:
         83:c2:ff:1f:8b:3b:61:96:c2:1e:23:78:69:62:91:24:38:2f:
         99:c7:59:48:c4:56:31:d2:06:dc:10:a6:90:da:7f:20:74:af:
         32:2e:1c:12:cc:25:74:50:7a:44:76:e4:23:0c:f7:01:97:60:
         75:bf:20:be:98:ad:f2:69:df:e6:41:3f:01:14:a3:b7:0f:ba:
         0b:fe:86:73:5e:13:06:98:e8:3d:d3:cc:2a:53:0d:7d:d8:1b:
         9d:5f:55:e6:1a:22:cf:96:39:41:5c:21:4b:b2:36:f0:21:02:
         e1:a4:4f:c8:b5:b7:11:61:db:a2:45:bc:0d:e8:ab:7a:78:5a:
         27:15:44:ac:ff:ca:ff:b6:9b:96:b7:30:d9:25:e7:43:40:aa:
         ab:89:10:92:f1:08:28:e0:72:0e:32:d0:b4:12:7f:13:22:e3:
         b1:d2:8b:99:57:4b:21:d0:21:da:9a:e9:0d:a6:53:f2:6d:77:
         36:bd:38:e3:4e:d0:ea:a4:1f:fb:2e:88:d9:aa:b4:cc:2b:80:
         d6:dd:c2:87:70:d8:33:8e:8f:9d:e7:cf:bf:46:50:28:6a:83:
         35:2e:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----