This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.cer
File:                     71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.cer (raw, json)
Hash identifier:          JWCv0/97lAzXozi+RyhTyuqtYqnYqI5m1g1f5g+of0o=
Subject key identifier:   B6:C3:55:ED:41:0C:E9:C0:7E:52:F2:31:C5:08:22:28:56:A8:E2:59
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584C297FF92D86A60951DA56BD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Dec 2025 12:00:38 +0000
Certificate not after:    Wed 15 Mar 2028 19:06:21 +0000
Subordinate resources:    AS: 33199
                          IP: 167.253.132.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:29:7f:f9:2d:86:a6:09:51:da:56:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 12 12:00:38 2025 GMT
            Not After : Mar 15 19:06:21 2028 GMT
        Subject: CN=71e39e17-6ca1-4b9f-86ab-2db7eb8384e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:0d:05:06:09:35:b9:ac:81:2c:4e:35:87:
                    78:8f:88:97:0e:60:f4:0c:5b:91:82:ed:50:e4:1b:
                    d8:71:2f:f5:05:75:e3:47:39:cf:02:ab:e3:de:d6:
                    be:c6:4c:38:ea:c2:55:85:ff:ab:32:c2:64:8f:27:
                    c9:45:ac:15:59:fa:0b:36:f2:5a:3b:a8:ce:fb:b6:
                    ef:1a:10:d6:1a:76:74:ca:ee:6e:f2:1d:04:9a:07:
                    8d:90:e8:59:9e:c2:bb:5a:82:e9:db:2a:47:f5:56:
                    44:71:87:40:90:15:98:12:8c:58:09:2d:df:ff:ee:
                    d8:66:79:39:b7:90:30:70:af:2a:cf:1e:7d:a8:40:
                    a2:c1:c3:8b:47:36:b0:dd:24:7d:4a:4f:43:1f:54:
                    5f:9a:d0:52:8c:04:70:49:64:e8:ff:3c:23:5c:1c:
                    23:ee:0c:25:0b:6f:cd:7b:29:9a:42:57:4e:2c:42:
                    d9:b6:ab:27:73:3c:ae:d7:fd:2b:f3:a8:5e:ef:b2:
                    ad:ac:4e:de:d1:b2:20:ce:27:e0:a0:5b:0e:7a:e6:
                    24:1e:f4:b7:0d:49:62:a6:e5:23:32:d5:59:dc:d4:
                    c2:df:90:41:e3:8f:0f:40:b6:36:ea:1d:b6:22:58:
                    af:05:fd:c1:d0:ac:fc:96:98:9c:da:8e:01:1a:4f:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:55:ED:41:0C:E9:C0:7E:52:F2:31:C5:08:22:28:56:A8:E2:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.132.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33199

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:99:6e:13:44:eb:8f:08:0d:c4:6d:43:81:da:26:8e:02:18:
         00:36:fc:b4:35:5b:1d:22:3b:58:98:56:e7:b1:3e:83:d9:f1:
         b5:9c:d3:8f:8f:fe:62:11:7e:40:59:e9:54:3b:32:e3:8f:87:
         ee:c0:c6:9e:7d:73:78:a9:d2:5d:3a:fe:a0:6a:00:a6:90:98:
         35:4d:15:72:a6:ba:2d:e2:48:9e:02:ee:68:76:ba:ff:10:7d:
         60:2c:3f:1f:65:e3:83:41:46:50:9c:9a:92:1b:62:b8:ee:3c:
         f0:8a:93:73:c5:61:e3:ad:b1:a8:89:a2:95:14:9d:b7:7c:fd:
         3c:8a:b5:4e:18:06:c0:71:b0:32:78:01:3c:a0:c4:39:ee:7e:
         d1:fa:20:1a:dc:83:7b:0d:02:ea:6f:1d:9b:a5:7f:bf:28:e2:
         4a:fa:97:e2:bf:71:1d:12:28:70:88:8c:63:c7:6e:57:00:4e:
         ce:59:de:6c:43:95:9b:a3:fe:9e:cc:77:a7:1b:21:ff:31:e9:
         60:cf:22:5f:3d:43:58:ba:4e:68:7f:07:00:42:59:9a:93:af:
         10:fe:96:32:2e:eb:31:17:35:b2:d7:78:c2:52:4e:4d:70:e0:
         33:64:70:21:81:55:ae:4e:8a:1c:b5:5f:ac:d9:5e:63:43:4e:
         8d:3b:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----