This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
File:                     1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer (raw, json)
Hash identifier:          cIb1Y/yahK0e47ngk4PJqD83ey9kjNtbfFRzoCgCrgo=
Subject key identifier:   FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584C321404C01F3CF52CF6746400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Dec 2025 13:45:23 +0000
Certificate not after:    Sun 19 Mar 2028 12:45:23 +0000
Subordinate resources:    IP: 74.116.156.0/22
                          IP: 209.142.84.0/22
                          IP: 209.209.116.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:32:14:04:c0:1f:3c:f5:2c:f6:74:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 15 13:45:23 2025 GMT
            Not After : Mar 19 12:45:23 2028 GMT
        Subject: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:d5:df:24:9e:11:13:b8:ab:e0:e9:36:98:
                    1e:15:d8:b1:95:60:b3:26:27:d9:db:7b:76:7c:be:
                    bf:dc:4c:df:49:80:33:1f:30:1c:37:00:31:48:a2:
                    2c:b2:2a:97:a1:e6:1f:19:a0:27:b5:83:d8:c7:95:
                    95:9e:b0:30:0c:cd:78:58:1f:87:74:a3:42:d8:fc:
                    74:56:6b:0c:a4:e3:c5:4f:f8:3b:52:e3:b9:0a:08:
                    db:74:41:c8:40:04:e7:ae:b0:99:c0:a3:61:f1:77:
                    68:61:97:50:c1:68:9e:7e:75:41:9a:ce:b2:bd:6e:
                    a4:16:dc:dc:4e:f0:e0:5c:47:55:40:7b:5e:b0:0c:
                    7d:e2:e2:1c:55:46:72:9e:69:8f:01:25:61:ea:26:
                    55:ea:f2:00:c2:d7:d6:e3:93:2f:f7:ef:6a:28:64:
                    71:2a:ce:bb:e3:3a:d9:6c:ed:98:49:32:b0:60:21:
                    48:3e:aa:28:09:22:ed:3a:3b:ba:12:99:b6:b0:84:
                    0c:c2:a4:00:59:e0:29:27:e7:7c:fd:02:00:d4:00:
                    39:b2:d6:c4:a2:eb:7d:01:2a:75:0e:01:80:89:5e:
                    5c:63:1a:60:79:46:29:19:f3:7a:d4:95:8d:84:46:
                    1e:29:ba:72:36:2d:9c:37:c4:96:5d:c5:c2:12:00:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.156.0/22
                  209.142.84.0/22
                  209.209.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:33:a9:da:99:d1:6f:f3:28:55:55:ed:cc:e2:00:b2:50:
         58:63:66:86:ea:ad:66:72:fe:a1:12:a0:c0:dd:b9:e3:41:c6:
         3c:5d:68:d3:31:0a:7c:03:92:b5:77:17:67:19:09:9e:d4:35:
         b7:eb:de:7d:db:3e:68:b4:be:87:83:6f:f2:fe:da:35:2e:ca:
         f0:10:42:e4:b7:67:9b:da:e5:78:03:a0:50:5e:8c:92:f3:9f:
         37:00:6c:83:d7:c4:3e:a3:7e:25:ad:1a:bd:d0:78:7f:fa:66:
         b4:29:fb:a1:d3:cb:33:2c:8d:de:f9:af:96:e8:91:8a:c6:2a:
         94:c3:a4:e1:d6:06:af:88:32:77:5d:37:4b:e7:a6:e4:37:ec:
         13:82:bd:a0:d9:f8:30:8b:e5:0b:2b:ba:a0:05:c8:42:b8:3e:
         b0:5c:e6:86:34:b3:fc:46:b8:cd:b9:c8:ba:51:6f:d7:ba:86:
         5e:50:60:85:70:58:1a:5c:1b:62:e0:b8:c7:a3:01:a2:31:c7:
         a8:ae:93:fb:a7:ec:96:99:08:3a:c2:03:8c:c4:fd:a9:b8:6e:
         cb:e0:2e:3b:a8:1b:38:d9:b7:c9:2f:11:f0:6d:4e:92:4e:1f:
         89:38:52:c3:e2:8d:ef:ef:bc:ea:10:93:4d:31:72:78:b5:69:
         ed:d2:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:58:46 2025 by rpki-client