This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer
File:                     ef944392-b528-43c2-9abf-e4543229ae2d.cer (raw, json)
Hash identifier:          EN/9jYiXQrTkAb29oDCiazeWS7OTBUL2h6auevsu3kk=
Subject key identifier:   D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584C2C7EA7C55AC3E9FAEAD27900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Dec 2025 13:45:24 +0000
Certificate not after:    Fri 17 Mar 2028 12:45:24 +0000
Subordinate resources:    IP: 23.188.120.0/24
                          IP: 2602:f81f::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2c:7e:a7:c5:5a:c3:e9:fa:ea:d2:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 13 13:45:24 2025 GMT
            Not After : Mar 17 12:45:24 2028 GMT
        Subject: CN=ef944392-b528-43c2-9abf-e4543229ae2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:1b:f7:f6:0c:75:25:35:c4:6a:fe:61:f9:
                    37:9e:02:af:7c:2b:c8:29:cb:83:fd:5d:be:93:c8:
                    36:02:78:be:df:3b:02:a3:60:48:39:5e:83:66:df:
                    c7:3e:5f:27:35:ea:ab:ce:03:31:92:13:ad:25:b0:
                    bc:fa:60:b6:ec:e8:ab:4f:34:af:d4:cb:11:9f:a5:
                    17:85:7a:a4:60:d4:d4:6f:99:b8:b0:7a:03:9d:0a:
                    86:97:ca:81:ee:53:5b:53:0d:16:90:47:c2:1a:fc:
                    47:2f:32:ad:c2:48:f3:85:1d:25:3b:87:43:8a:67:
                    ae:8d:1c:f8:fb:76:b2:eb:dc:b3:72:ad:87:84:49:
                    cc:07:92:e8:a2:e1:64:87:f5:b2:18:f5:8c:5e:ea:
                    df:0e:37:c1:f1:1a:ea:ad:d6:ec:9b:3b:55:65:cd:
                    d3:aa:cd:ba:09:07:c3:3c:ab:b2:9e:be:18:3b:bb:
                    1f:9a:ac:94:e2:76:19:99:33:f4:a2:f7:53:5a:3c:
                    5d:9a:d5:69:cc:ad:ea:e7:44:1e:b9:c8:0d:3d:67:
                    0a:a4:9b:92:62:ce:e4:43:78:76:d2:5b:44:10:2f:
                    4e:58:6f:cf:1b:15:ff:67:4d:52:79:c5:eb:82:79:
                    3d:4e:1a:7f:f9:92:f3:84:75:17:60:a2:47:4a:6b:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.120.0/24
                IPv6:
                  2602:f81f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:f9:8a:e2:06:fa:86:2f:f3:0d:c7:a0:da:4b:7f:fe:04:
         a0:51:12:20:c6:ea:5f:b0:b2:dc:f4:83:55:14:1f:95:91:3f:
         fa:41:c1:9d:0c:73:ab:ec:64:e7:64:00:52:b7:9b:17:87:54:
         fa:10:5a:a6:e7:38:c9:03:8b:22:4f:bf:49:2b:22:9a:76:aa:
         35:36:e6:cc:dd:be:1b:f4:b5:a1:51:8a:73:2a:5d:40:96:0c:
         87:ae:95:cb:32:50:85:a2:e6:74:6e:38:fd:71:47:3f:be:19:
         0a:73:16:1e:7d:f0:9e:6e:49:aa:80:8a:b9:d0:b6:c5:60:10:
         1f:3b:99:d4:e1:7b:63:72:0a:f1:df:56:b9:61:c9:7a:7d:fa:
         04:b5:b2:85:6e:dd:21:30:80:35:31:c5:9f:57:bf:17:ed:23:
         93:c1:84:b5:16:d5:89:a4:42:8c:73:4d:d8:e7:ac:13:85:18:
         7e:c6:e4:77:1f:2e:b6:92:6d:da:94:0c:f1:de:c3:b2:c8:fa:
         5a:84:07:d0:d2:62:27:21:ee:78:1b:c9:72:7e:b8:11:55:37:
         cb:3a:f0:2c:69:48:02:74:b3:9b:c3:e0:0b:04:d1:7b:4a:c0:
         89:49:71:72:32:29:02:53:49:3e:bf:8b:72:31:e4:ac:0f:50:
         ed:03:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----