This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer
File:                     1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer (raw, json)
Hash identifier:          S4djBhtNz37RG2FZJEdAbvccKGGKfOrJlW20vd3GzVk=
Subject key identifier:   91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C5BC915EDE321C96C9204CC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Dec 2025 12:18:22 +0000
Certificate not after:    Mon 20 Mar 2028 22:03:01 +0000
Subordinate resources:    AS: 20382
                          IP: 163.245.128.0/19
                          IP: 2604:2da0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5b:c9:15:ed:e3:21:c9:6c:92:04:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 30 12:18:22 2025 GMT
            Not After : Mar 20 22:03:01 2028 GMT
        Subject: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:ac:a1:08:2d:a1:e0:e8:3e:14:fd:39:15:
                    f4:d7:1c:b2:4f:d6:82:28:df:b0:35:f9:09:dd:49:
                    46:2a:5c:f5:3d:0d:46:ed:98:c3:c5:76:65:03:7c:
                    d5:be:67:87:3b:10:ef:20:65:7a:8a:05:ce:49:e0:
                    b1:0e:27:0f:7a:81:1d:c7:7b:3e:4c:e9:b8:05:7a:
                    b3:6b:39:12:de:fd:44:5a:3c:bc:05:1e:08:a3:1d:
                    46:77:8e:ec:e7:8d:6f:b9:b7:e3:b3:f5:f6:e0:85:
                    80:82:b8:a1:eb:44:43:c6:0e:bf:8f:68:e1:3e:53:
                    45:97:d6:b1:0f:3d:d4:f5:3b:25:5e:a4:06:3f:63:
                    50:52:ff:9b:ed:f1:86:14:43:fb:19:bf:28:58:be:
                    37:91:c8:47:cb:22:a9:f4:57:6e:dd:34:2f:8b:36:
                    6f:56:89:03:98:a8:cc:1f:c1:87:92:30:56:6e:0e:
                    7c:36:b1:f8:6a:77:e6:5c:8e:72:bb:58:82:0a:3f:
                    82:c9:2e:11:9d:87:0f:20:8d:40:b0:77:0c:db:f7:
                    03:c6:ae:51:be:06:1d:23:74:7a:19:82:64:1b:9e:
                    a0:74:cd:8b:a9:27:51:b1:a5:45:a6:78:a5:a3:33:
                    66:57:1b:eb:5b:8d:5d:0a:00:8b:1e:10:ae:6f:af:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.128.0/19
                IPv6:
                  2604:2da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20382

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:38:a5:59:77:4e:f5:89:ca:90:4e:68:16:32:30:0a:e6:88:
         7f:57:29:12:98:16:89:68:75:57:d3:c7:84:56:cd:20:b6:9c:
         a7:64:41:d7:e3:a1:a6:a8:7a:51:63:3f:e8:19:e1:19:92:74:
         63:34:b6:d3:c4:a6:fe:a3:8c:08:72:d4:e8:83:f8:2c:7c:8c:
         8d:a8:d2:46:0a:dc:37:e0:fd:6d:1e:4d:f0:09:e8:db:c5:72:
         b0:23:fa:ac:19:9b:d3:df:51:bb:61:c4:83:78:40:df:28:b4:
         4f:aa:a3:e3:7e:f0:b2:20:4f:fd:08:70:f5:1f:9c:fd:3f:ef:
         e8:2d:79:ea:1e:29:2a:1d:14:2c:ef:85:47:83:b3:83:27:d1:
         43:3f:06:1e:f2:4f:29:6d:10:6b:1c:12:ae:39:e6:e6:7a:e9:
         0a:5e:14:f3:4d:a7:d7:18:14:61:5d:06:29:01:e5:64:73:9b:
         3b:3e:ee:1b:c7:9e:db:6e:d6:26:02:51:8e:63:f6:df:c1:05:
         a6:75:ed:d0:5d:1c:95:ee:69:75:56:2c:93:81:2c:97:f4:36:
         63:80:f9:0a:2b:f1:ce:fc:03:07:88:b0:2a:60:54:06:0e:d4:
         c5:19:50:24:b4:96:aa:47:50:4a:21:5f:17:e4:21:f9:a1:5d:
         78:ec:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----