This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.cer
File:                     196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.cer (raw, json)
Hash identifier:          rs25tsRmWsmfviji85encGmGiT2IUm7d5KAWQE/mRiM=
Subject key identifier:   4F:33:EB:CF:E0:D0:D6:70:4F:73:AA:C7:00:BA:08:E1:13:02:7F:67
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584C25A315666FBB0680F3BA4F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 02:48:08 +0000
Certificate not after:    Wed 15 Mar 2028 01:48:08 +0000
Subordinate resources:    IP: 204.122.16.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:25:a3:15:66:6f:bb:06:80:f3:ba:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 11 02:48:08 2025 GMT
            Not After : Mar 15 01:48:08 2028 GMT
        Subject: CN=196a0ddd-ebe5-4b0b-9afd-5cc049ccb814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:4d:2f:d7:b9:4c:86:fc:3d:32:12:3a:42:
                    ae:44:80:02:da:0c:a8:f2:c2:4b:61:d3:1c:af:2f:
                    98:17:b1:c5:f6:0e:81:1f:6c:93:d3:57:d3:99:5e:
                    42:15:97:6a:5d:9d:84:6c:ed:ba:7d:39:15:e4:99:
                    6f:90:4a:0a:91:32:78:ce:9c:b3:3f:c7:c4:dd:ee:
                    d5:92:dd:d0:28:4a:f8:55:4d:af:70:05:b6:e5:b1:
                    ad:39:bb:d9:60:07:52:89:5c:3a:7f:0e:7c:09:95:
                    df:fc:6c:11:37:26:d3:48:e7:8b:57:4a:fa:3c:29:
                    4e:c7:3c:18:13:1e:1b:7d:4e:06:eb:98:01:33:5e:
                    d0:de:fe:61:cd:63:58:b7:da:66:ed:8c:b5:05:88:
                    c5:93:04:55:11:69:68:93:f9:47:f8:ea:a6:37:ea:
                    d3:2c:a8:f6:68:70:d5:f7:88:8d:7b:08:7d:b6:a7:
                    c8:e4:c8:78:6d:9c:f8:d0:a6:e0:3c:94:46:0b:b6:
                    8d:3d:97:d9:9a:83:2a:35:64:ea:3f:2e:a4:3d:e8:
                    9e:7a:0a:9e:89:d6:18:c2:e3:01:44:99:e6:d5:a6:
                    af:dc:cb:9f:a5:5f:59:da:09:65:17:51:e0:02:92:
                    81:25:ee:d8:72:e1:52:90:cf:51:d0:d6:5c:ce:7c:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:33:EB:CF:E0:D0:D6:70:4F:73:AA:C7:00:BA:08:E1:13:02:7F:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:88:71:04:f2:5f:fb:46:7d:0e:a9:d1:94:c5:b3:d3:f0:
         08:cb:70:d7:6d:84:3a:5c:18:30:3f:30:18:55:27:73:32:7e:
         d7:8e:13:87:4b:4d:0a:e8:45:1b:e7:f6:f1:0d:0c:7c:c3:d3:
         be:63:aa:e3:d6:dd:de:4c:9d:47:c9:2a:d0:10:09:e3:92:11:
         e2:86:f5:db:1e:df:18:3c:ef:52:88:a7:6d:19:c9:dc:19:57:
         ca:11:f4:93:9f:76:a4:81:c3:02:b2:45:e9:24:f5:e2:fe:32:
         31:10:f6:14:ce:cd:c9:7e:38:6d:5d:c1:00:05:c4:3c:ad:92:
         0f:77:78:2c:78:bb:38:af:e7:3f:0a:62:d2:40:17:90:1c:5e:
         50:b6:70:f1:51:f7:15:16:ca:41:12:b0:59:4d:89:4f:3e:2a:
         d3:76:fc:a0:39:f6:17:85:87:fe:f2:91:37:58:71:5a:4b:80:
         ec:b3:81:8a:bb:d4:ca:ea:ae:c7:2a:a3:f3:29:df:f6:ed:a6:
         3d:7d:2f:5c:b4:e7:d2:a2:01:c6:bb:15:be:b8:e9:5b:3f:81:
         d6:e1:59:93:96:aa:d2:6a:53:cf:51:45:bd:dd:3a:c5:fd:dc:
         e8:f0:6a:ee:3e:54:cf:3f:49:a8:4a:36:80:73:c1:80:3a:5d:
         e8:e9:6c:58
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEwloxVmb7sGgPO6T4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MTIxMTAyNDgwOFoXDTI4MDMxNTAxNDgwOFowLzEtMCsGA1UEAxMk
MTk2YTBkZGQtZWJlNS00YjBiLTlhZmQtNWNjMDQ5Y2NiODE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSlNL9e5TIb8PTISOkKuRIAC2gyo8sJLYdMc
ry+YF7HF9g6BH2yT01fTmV5CFZdqXZ2EbO26fTkV5JlvkEoKkTJ4zpyzP8fE3e7V
kt3QKEr4VU2vcAW25bGtObvZYAdSiVw6fw58CZXf/GwRNybTSOeLV0r6PClOxzwY
Ex4bfU4G65gBM17Q3v5hzWNYt9pm7Yy1BYjFkwRVEWlok/lH+OqmN+rTLKj2aHDV
94iNewh9tqfI5Mh4bZz40KbgPJRGC7aNPZfZmoMqNWTqPy6kPeieegqeidYYwuMB
RJnm1aav3MufpV9Z2gllF1HgApKBJe7YcuFSkM9R0NZcznzl8QIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFE8z68/g0NZwT3OqxwC6COETAn9nMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x
OTZhMGRkZC1lYmU1LTRiMGItOWFmZC01Y2MwNDljY2I4MTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzE5NmEwZGRkLWViZTUtNGIwYi05
YWZkLTVjYzA0OWNjYjgxNC8xOTZhMGRkZC1lYmU1LTRiMGItOWFmZC01Y2MwNDlj
Y2I4MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADMehAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc5qIcQTyX/tGfQ6p0ZTF
s9PwCMtw122EOlwYMD8wGFUnczJ+144Th0tNCuhFG+f28Q0MfMPTvmOq49bd3kyd
R8kq0BAJ45IR4ob12x7fGDzvUoinbRnJ3BlXyhH0k592pIHDArJF6ST14v4yMRD2
FM7NyX44bV3BAAXEPK2SD3d4LHi7OK/nPwpi0kAXkBxeULZw8VH3FRbKQRKwWU2J
Tz4q03b8oDn2F4WH/vKRN1hxWkuA7LOBirvUyuquxyqj8ynf9u2mPX0vXLTn0qIB
xrsVvrjpWz+B1uFZk5aq0mpTz1FFvd06xf3c6PBq7j5Uzz9JqEo2gHPBgDpd6Ols
WA==
-----END CERTIFICATE-----