This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
File:                     dafe2535-2dc5-4d47-b03e-d44eea26032f.cer (raw, json)
Hash identifier:          pvNinTw1xTFw+TOa+Z1CGS0++CCMR28H3fYhuODHZz0=
Subject key identifier:   37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C4C9983B0F421E129841FDE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 25 Dec 2025 01:45:23 +0000
Certificate not after:    Wed 29 Mar 2028 00:45:23 +0000
Subordinate resources:    AS: 20185
                          IP: 63.246.48.0/20
                          IP: 76.10.240.0/20
                          IP: 192.92.112.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4c:99:83:b0:f4:21:e1:29:84:1f:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 25 01:45:23 2025 GMT
            Not After : Mar 29 00:45:23 2028 GMT
        Subject: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:b0:b7:eb:3d:3b:b4:81:98:15:39:0e:a5:
                    a4:db:64:75:6f:ed:4a:6f:cb:2d:2f:5a:7c:26:59:
                    a0:db:4a:f3:40:04:c6:a5:58:cb:f1:96:cd:41:ba:
                    e6:44:0b:f0:d3:63:31:e9:8b:75:c1:26:a3:8e:5c:
                    e0:e8:8d:16:86:69:bf:26:b9:0d:97:dd:ea:fb:54:
                    f7:13:ee:01:bd:92:5d:19:99:9d:60:d3:fc:49:19:
                    81:d7:72:23:f1:5e:d7:d3:98:96:eb:4a:0d:b5:95:
                    f7:ea:61:8c:65:56:46:f7:58:ed:e4:5b:43:78:f1:
                    6b:06:e7:6e:c8:27:d7:bb:c8:74:1d:10:31:94:c6:
                    90:c5:c0:c2:4f:ff:15:40:20:31:02:eb:0d:cd:63:
                    a5:6d:1c:2c:5b:28:d5:dd:83:dd:6c:97:14:ad:18:
                    ae:4e:df:7c:0a:89:49:d3:2f:b7:f6:4c:1f:0b:b0:
                    fe:d8:5e:18:2b:51:9f:35:6d:16:91:b9:f2:e5:c0:
                    35:34:28:37:6f:f6:a1:78:07:05:76:9c:b4:9b:2a:
                    57:cd:f1:3f:c9:5b:12:0d:18:8d:ce:95:f9:5c:43:
                    2d:d3:c4:a3:ca:66:4c:e7:ac:30:23:c8:a0:3b:d3:
                    dd:65:9c:81:52:42:20:80:1e:fc:6b:ff:29:6a:f7:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.48.0/20
                  76.10.240.0/20
                  192.92.112.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20185

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:96:77:f5:b3:ee:a2:b8:46:e8:52:1e:02:e3:b1:98:6e:
         01:f3:98:10:51:b2:17:39:7c:cd:b8:fd:0a:a2:4a:be:42:09:
         c9:96:60:99:31:e9:a6:4e:84:47:ba:27:91:27:10:7a:13:2e:
         8f:4b:df:8e:70:a3:36:97:95:ba:4c:88:70:74:18:d9:fc:a2:
         3d:70:e8:fe:87:71:ed:7f:22:d9:e6:0a:59:82:86:70:89:55:
         9c:ce:ba:2c:c6:54:2e:48:dd:42:d6:c6:6f:4c:d7:44:73:62:
         1e:6c:45:d9:43:45:52:1c:32:77:30:68:df:94:c7:9b:13:78:
         79:48:f1:02:c5:86:76:ba:c0:61:4d:df:76:8f:17:c9:bb:71:
         7d:e2:e1:2a:8c:60:63:8e:30:55:c9:fe:2f:88:cd:a3:6a:ff:
         a3:3b:89:de:76:b6:0f:bd:e6:1f:09:af:9f:36:9b:f9:68:eb:
         77:46:60:29:aa:dd:b7:f0:b6:c9:e6:0d:0b:4e:50:c5:b1:2f:
         f3:74:80:44:b8:59:db:8a:af:e9:3a:9b:1d:d7:68:5c:02:0c:
         40:00:58:69:fa:d0:b9:0a:7d:c0:47:93:c7:7c:a1:87:2f:ba:
         01:4c:a5:46:a0:93:65:ca:9f:7a:35:98:79:de:10:44:21:8c:
         f8:23:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 07:48:18 2025 by rpki-client