This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87b7c547-c7bd-4cf8-ad44-5dae543854f1.cer
File:                     87b7c547-c7bd-4cf8-ad44-5dae543854f1.cer (raw, json)
Hash identifier:          kcssm4HPlCxsj+Ss9Y2+ZlsTCKzFCj+13mxlufE2QE4=
Subject key identifier:   FF:C8:61:5A:22:26:65:38:89:F7:A8:1F:17:FF:97:59:6B:60:47:7B
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584C21222861D388ACB72A719200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87b7c547-c7bd-4cf8-ad44-5dae543854f1/87b7c547-c7bd-4cf8-ad44-5dae543854f1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87b7c547-c7bd-4cf8-ad44-5dae543854f1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Dec 2025 12:05:08 +0000
Certificate not after:    Mon 13 Mar 2028 11:05:08 +0000
Subordinate resources:    AS: 395589
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:21:22:28:61:d3:88:ac:b7:2a:71:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Dec  9 12:05:08 2025 GMT
            Not After : Mar 13 11:05:08 2028 GMT
        Subject: CN=87b7c547-c7bd-4cf8-ad44-5dae543854f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:24:45:13:07:d1:4f:7b:6b:90:d4:f2:84:
                    56:3c:fc:f3:34:8a:e1:50:45:4e:0d:9f:a9:11:07:
                    93:53:22:f0:19:6d:02:dd:d4:f7:ca:57:49:86:48:
                    2f:2b:62:3c:60:7f:6f:33:9a:8f:1f:52:3e:25:a8:
                    c4:d2:f9:8b:9c:82:45:f6:76:4c:94:db:18:b9:96:
                    e6:e8:b3:b1:6f:e7:c9:63:dd:fa:f8:f2:83:a8:be:
                    d7:2e:fd:e5:be:3b:57:48:fd:2f:de:f2:4c:67:8d:
                    2b:bd:06:ad:0b:eb:c6:f0:a3:b1:5a:ff:ad:ac:f7:
                    6a:3f:f2:ed:af:e0:db:8b:4e:5b:d5:b2:99:74:c9:
                    63:b2:ce:24:3e:69:d2:ff:65:da:ca:d1:d5:f6:91:
                    63:9a:bc:ef:4f:35:63:f6:82:dc:1a:c9:7e:04:2d:
                    52:88:b5:e3:e4:c6:36:03:dc:e2:ab:53:95:8a:07:
                    93:9f:5c:e3:c2:cf:02:94:33:6b:eb:cc:63:e6:c9:
                    38:1a:30:95:a0:24:ae:be:ea:8a:e9:09:ce:43:f2:
                    84:59:df:13:81:06:7f:79:f5:1d:98:54:d2:17:95:
                    26:0b:2e:5b:35:49:8d:2c:b4:12:60:47:1f:98:7c:
                    dc:fb:51:dc:9e:02:2c:6d:42:35:77:d3:f9:f4:da:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C8:61:5A:22:26:65:38:89:F7:A8:1F:17:FF:97:59:6B:60:47:7B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87b7c547-c7bd-4cf8-ad44-5dae543854f1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87b7c547-c7bd-4cf8-ad44-5dae543854f1/87b7c547-c7bd-4cf8-ad44-5dae543854f1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395589

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:c9:c4:b5:03:e8:ea:75:c9:ef:f5:91:1b:88:7b:13:d2:59:
         12:c1:82:7e:ef:7b:b4:67:eb:36:af:c6:20:37:9f:7b:b3:a7:
         7e:34:95:d9:72:e1:a5:ed:95:ce:0c:ed:8e:17:c6:bc:58:a5:
         4f:1e:fa:61:1b:a4:9b:f0:8f:8b:f9:d6:c1:d2:59:a1:5d:22:
         65:ba:2a:16:63:d5:a8:b4:b9:2c:8a:87:e8:02:a5:7a:19:47:
         16:80:77:46:17:bd:7e:28:6c:f0:cc:21:3b:38:0f:4a:db:15:
         65:28:44:36:e7:78:a8:79:40:c8:31:4f:e8:86:d3:64:5e:dd:
         ae:f4:ad:4e:a3:98:91:52:05:fe:4b:ec:9e:1d:fc:3f:fb:23:
         76:17:08:54:ce:0b:05:cc:4b:cf:7e:b7:6e:34:a1:37:6a:eb:
         17:41:ae:20:84:f7:2c:54:8e:6b:13:20:df:4f:ac:f8:f4:1c:
         f7:bd:c6:4f:87:19:78:81:92:d7:10:3e:c3:a1:bb:d1:b9:12:
         66:7d:49:4d:75:b2:a6:c6:b0:b3:b7:63:34:db:2a:d5:c9:cd:
         e9:c5:2c:1a:60:cd:53:fd:2c:1f:68:dc:61:0f:64:a6:d5:27:
         b0:15:9f:50:9e:47:14:5e:52:3b:b6:4f:01:47:0d:93:e5:22:
         6b:6d:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----