This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
File:                     487abf98-3073-43c6-b10e-a615e64ccc65.cer (raw, json)
Hash identifier:          0VFYri08svp7bq0QzyFuXRUNCSJjqaixlQiYbQJudVc=
Subject key identifier:   50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C2F4956CD8722F4E59A906F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Dec 2025 13:45:24 +0000
Certificate not after:    Sat 18 Mar 2028 12:45:24 +0000
Subordinate resources:    AS: 18726
                          AS: 22992
                          IP: 206.55.100.0/22
                          IP: 208.89.40.0/21
                          IP: 216.9.204.0/22
                          IP: 2620:133:c000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2f:49:56:cd:87:22:f4:e5:9a:90:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 14 13:45:24 2025 GMT
            Not After : Mar 18 12:45:24 2028 GMT
        Subject: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:58:c3:02:7e:37:2d:a5:3e:27:7f:43:9f:
                    1d:04:1f:13:c1:58:8a:ec:61:8c:a1:28:3e:d8:95:
                    bf:a5:49:48:a2:f8:87:15:d2:73:e7:50:56:ba:d1:
                    e2:7b:b5:64:7f:03:4f:6d:2a:46:1d:d4:90:b4:87:
                    80:4b:97:a6:a1:e3:5a:92:89:61:0c:99:3f:c4:45:
                    d1:bb:23:34:da:56:8b:b3:53:7a:b6:b9:da:b6:5e:
                    c6:fe:d9:fc:6c:21:74:ac:6c:11:2b:e1:1f:44:1c:
                    a6:32:22:23:5a:b3:50:48:95:cd:c4:b1:ff:76:1c:
                    f0:71:a0:6b:d3:6e:94:dd:d8:c6:11:75:14:20:68:
                    c3:30:29:02:62:db:7f:f2:2a:ee:c7:40:09:57:17:
                    d4:00:65:53:84:d0:4b:53:69:a1:76:02:96:55:01:
                    d6:4d:c0:82:1b:7c:32:14:7b:98:9a:1d:26:2a:85:
                    22:b0:8a:a7:3b:12:90:e9:58:4d:a8:05:0e:62:1b:
                    aa:57:b4:2d:24:dc:2b:4f:0e:b1:03:03:96:a1:4e:
                    85:5d:c6:e8:89:13:d6:b2:36:6b:01:f4:c2:69:16:
                    f0:cb:72:38:4f:28:8a:a9:17:ba:ff:be:cc:f5:45:
                    ee:e6:58:68:c4:d1:5f:e4:79:d2:ed:6f:c8:87:1c:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.100.0/22
                  208.89.40.0/21
                  216.9.204.0/22
                IPv6:
                  2620:133:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18726
                  22992

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:4c:cd:e8:5e:ab:db:b4:44:98:ac:7b:7e:dc:9e:7c:ab:
         2e:d3:8e:fb:4b:3a:32:e8:36:48:43:76:34:6f:9b:10:0c:7c:
         6a:01:4a:c6:5c:f0:95:aa:ee:d0:f5:ca:c6:6c:06:f1:27:d5:
         e7:37:76:3f:ba:42:60:e1:98:9f:12:0c:a6:62:21:c6:7a:56:
         07:a9:a7:ea:c8:e4:d0:68:b3:7c:95:89:13:b0:ee:15:34:b7:
         fe:80:da:6a:ea:28:70:3e:8f:b1:54:33:36:3a:67:7d:f7:6f:
         b6:09:c7:2f:0c:42:a4:71:d8:ce:56:fc:82:65:8d:ec:9d:92:
         7d:9d:3b:cd:79:fe:68:a8:d3:32:bf:9a:69:53:3b:ad:68:e2:
         58:f4:f9:a5:cf:1c:52:4a:ea:b6:08:0d:de:81:78:9f:16:fb:
         ee:c1:71:05:2d:eb:6a:02:ac:65:e9:06:9c:c4:e8:e6:df:b7:
         70:aa:0c:ac:fd:e0:9b:2b:6e:d6:d5:12:37:b8:cf:f8:b3:b0:
         59:08:dd:62:fc:e6:23:29:4f:c7:c2:24:9d:7d:05:51:1a:3d:
         4d:73:f2:4c:ff:3e:8d:0d:2f:10:61:3a:24:a6:28:21:e3:d0:
         d7:11:35:a2:c8:4a:94:d3:28:54:35:51:95:54:b9:71:08:91:
         df:61:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:59:44 2025 by rpki-client