This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.cer
File:                     c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.cer (raw, json)
Hash identifier:          u/eOASEvHAFqs/5061bKaQFIOqi5Nw5SnSakR2PdoS8=
Subject key identifier:   44:40:1E:82:DE:11:D9:4E:9F:9E:0A:D7:F7:27:05:0F:E5:F4:7B:27
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C34DEB4AE23F5652F2CE72980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Dec 2025 13:45:23 +0000
Certificate not after:    Mon 20 Mar 2028 12:45:23 +0000
Subordinate resources:    IP: 2602:80d:3000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:34:de:b4:ae:23:f5:65:2f:2c:e7:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 16 13:45:23 2025 GMT
            Not After : Mar 20 12:45:23 2028 GMT
        Subject: CN=c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:29:64:cf:65:67:1e:90:02:fb:d6:04:13:
                    f5:68:4c:36:e4:8b:1d:e8:d2:24:1f:39:bb:68:db:
                    87:4c:b6:78:be:0d:d3:db:82:ce:27:93:0a:01:1d:
                    85:92:64:75:90:14:6e:52:e5:b7:3e:7e:36:bb:8b:
                    17:69:3a:16:45:7a:df:ea:a0:bf:11:74:6b:69:0c:
                    ff:6b:bf:b5:c8:3f:b5:a2:60:49:10:36:86:73:0c:
                    4a:3d:2c:96:e6:fb:73:ea:8d:ed:b3:6c:48:06:df:
                    de:21:4a:0a:51:5b:04:31:3f:cb:db:d8:e2:8a:1b:
                    7e:0b:ba:ce:e9:ef:23:c2:43:77:55:9b:80:f0:e1:
                    a4:e6:69:62:0b:16:0c:22:53:db:6d:1c:4a:64:cd:
                    80:82:e9:ad:9a:19:db:d2:91:6c:ef:65:94:34:52:
                    e5:9f:5b:58:6a:32:86:9c:13:5f:32:66:ef:9c:91:
                    ef:b7:5f:3e:9c:5b:30:d5:f9:6d:2a:9d:9c:23:b6:
                    38:3a:0d:38:6f:21:e0:fa:4b:34:39:c8:5f:16:32:
                    48:9d:77:12:1f:3b:58:99:2c:76:0a:92:52:6b:bf:
                    b9:2f:ec:74:1b:dd:e8:c9:5e:5e:e7:61:5c:f3:93:
                    c3:37:da:b1:b8:1e:c8:34:00:b0:9e:61:ca:67:87:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:1E:82:DE:11:D9:4E:9F:9E:0A:D7:F7:27:05:0F:E5:F4:7B:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6c:94:84:d7:93:91:2d:35:23:10:52:a5:b8:51:32:e9:b9:
         82:aa:b1:72:01:17:a4:c1:d9:a7:47:44:96:d0:8f:da:2b:d2:
         fb:7f:49:6b:38:0a:11:77:5d:6c:28:71:96:36:fd:d5:4d:89:
         f9:ec:8c:7b:5f:f9:c9:db:d6:a7:7b:e2:10:ac:f2:62:a6:70:
         d3:83:11:d0:88:39:db:9e:a6:e2:6a:e1:42:2c:2a:a6:88:4d:
         44:e1:d3:6f:bf:11:64:c6:31:00:cb:c3:b2:4a:ca:fd:03:60:
         85:30:cc:f3:43:49:7f:ca:a2:44:56:5f:e4:bb:5a:6e:08:24:
         41:e7:a6:46:d8:16:58:1c:ec:16:6a:13:cd:1d:98:db:22:2e:
         23:1d:1e:d4:2e:6b:40:36:51:82:1f:37:fa:df:ef:97:83:66:
         25:97:3e:57:0e:e2:02:c7:ab:cd:69:34:54:ba:80:4e:45:e3:
         6d:30:78:8c:18:41:40:eb:6a:40:1d:0d:2d:87:08:ff:96:e3:
         d1:aa:03:16:26:01:e8:c0:ba:9c:ff:d5:43:5f:e8:df:53:4d:
         02:8c:dc:0c:82:cc:96:7a:51:13:a2:8d:31:cc:5c:aa:75:f2:
         da:21:f6:a0:65:6d:fa:f1:61:eb:4c:30:f7:87:65:76:56:78:
         64:aa:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----