This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304.cer
File:                     020f2bc0-10b9-4714-a437-b2a865c14304.cer (raw, json)
Hash identifier:          /WOFadAyOUfFL9T8NEgejgP90S0IzDk6g41Fy0Xl/e0=
Subject key identifier:   82:56:F3:EB:F5:CD:05:30:CF:B7:D5:0D:A5:28:26:FB:02:E3:4A:DD
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C89D29C21495B976EB30EC000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/020f2bc0-10b9-4714-a437-b2a865c14304.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 00:04:44 +0000
Certificate not after:    Wed 19 Apr 2028 23:04:44 +0000
Subordinate resources:    IP: 199.204.211.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:89:d2:9c:21:49:5b:97:6e:b3:0e:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan 16 00:04:44 2026 GMT
            Not After : Apr 19 23:04:44 2028 GMT
        Subject: CN=020f2bc0-10b9-4714-a437-b2a865c14304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:38:8a:73:32:54:2c:9e:1f:b3:ba:4f:b7:
                    83:5a:71:35:99:dd:16:70:59:33:79:0b:3f:88:8e:
                    c0:00:35:1d:a7:09:71:24:2f:60:fb:32:e8:b7:ec:
                    cf:51:49:10:97:a0:04:7d:11:01:f7:87:1c:0e:13:
                    cb:93:d2:e2:24:aa:2d:84:9a:27:04:f2:cb:5a:52:
                    b7:37:f2:c2:4a:65:17:bc:a1:a7:bb:4f:12:03:ed:
                    e8:8f:44:09:23:0f:6d:38:7c:ee:b2:8a:d3:fa:c7:
                    8c:29:a7:b1:f7:cf:fc:ac:7a:88:54:ea:b6:0f:04:
                    7c:10:eb:48:9d:51:6d:ea:51:6f:8e:e6:5c:b5:11:
                    7e:bf:65:24:f3:14:f3:98:37:23:81:2b:39:83:84:
                    a2:47:d4:66:b7:dd:bb:dc:50:2c:30:11:f9:17:0b:
                    5d:e4:d4:53:12:b1:2e:14:f4:dd:20:4b:ee:40:83:
                    86:be:65:2c:38:03:26:58:f4:89:43:10:0a:97:32:
                    a9:1c:b9:b9:e2:0e:54:21:e9:f4:da:d9:8b:b5:cb:
                    4b:33:99:08:21:23:82:48:ac:81:d0:ce:4e:b4:d2:
                    47:fc:fc:78:2d:13:a1:a4:8a:a5:5d:1e:21:ec:12:
                    b3:59:db:ca:2b:38:5d:ee:9d:c2:df:f6:d5:28:2d:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:56:F3:EB:F5:CD:05:30:CF:B7:D5:0D:A5:28:26:FB:02:E3:4A:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/020f2bc0-10b9-4714-a437-b2a865c14304.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fb:97:f9:07:66:df:5c:75:34:2c:9b:c6:21:56:4f:7d:21:
         9a:b4:1d:20:f1:39:4b:a3:ef:1e:e7:4d:84:9e:09:07:c5:8d:
         80:63:7e:a0:ca:70:0b:52:22:7e:3e:77:c2:c0:9f:e5:db:ab:
         e4:ed:38:ef:f6:c0:e1:5f:f3:67:d9:69:40:ba:17:33:af:2f:
         2d:ea:21:ed:6c:3c:5b:9e:88:67:4f:bb:41:5b:84:b5:44:e2:
         4f:bc:c8:78:69:c3:79:a2:2d:d0:49:ee:60:c4:1f:49:56:40:
         59:6f:7d:29:2c:75:8a:7a:a4:a5:1c:c5:dd:33:5a:5f:12:68:
         34:72:3d:16:56:da:95:43:59:b9:e8:ea:3d:06:6a:9d:1f:cd:
         55:38:b6:ea:15:1a:2b:e6:ab:69:69:8d:82:9d:0b:2c:03:94:
         3e:62:0b:a2:07:0e:ef:ff:04:97:65:77:8d:72:9e:93:5a:2f:
         2b:18:5b:76:fc:c9:1c:a7:bf:bf:49:d6:73:64:11:cc:15:b0:
         c5:90:13:9b:c1:c2:41:d3:69:9b:17:95:d6:29:52:37:9b:bb:
         8d:25:e7:c3:bd:ad:b4:c5:e8:4a:8d:5c:04:eb:34:4a:91:11:
         da:32:7f:d2:db:2f:55:da:af:0d:46:0d:5d:a3:d3:14:42:63:
         79:88:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----