This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/161a50f9-a7d4-4d65-951a-3d4cd252ec5c.cer
File:                     161a50f9-a7d4-4d65-951a-3d4cd252ec5c.cer (raw, json)
Hash identifier:          TNLihaxR1E6ZXR9HLS2fxEBAtz50zrTDqbOIlao4KlY=
Subject key identifier:   EA:77:CA:C9:F4:C1:8D:89:39:D5:B9:F5:8B:11:E3:D9:AD:C1:82:8E
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BDBC0142BE5B3F3863D5C41C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/161a50f9-a7d4-4d65-951a-3d4cd252ec5c/161a50f9-a7d4-4d65-951a-3d4cd252ec5c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/161a50f9-a7d4-4d65-951a-3d4cd252ec5c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Nov 2025 15:36:45 +0000
Certificate not after:    Thu 17 Feb 2028 15:36:45 +0000
Subordinate resources:    IP: 2606:df00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:db:c0:14:2b:e5:b3:f3:86:3d:5c:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 14 15:36:45 2025 GMT
            Not After : Feb 17 15:36:45 2028 GMT
        Subject: CN=161a50f9-a7d4-4d65-951a-3d4cd252ec5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:72:12:53:c4:ce:57:86:e3:8e:0a:b2:ac:
                    8c:a9:85:94:af:76:05:9c:79:e4:84:22:2a:b9:12:
                    64:5b:69:36:f2:bd:7e:b4:18:d7:c6:2d:b4:80:16:
                    f3:8f:c9:7b:27:9f:db:7f:ff:f9:af:1b:72:45:3b:
                    75:45:5a:74:b8:75:9d:41:3c:86:fd:b7:3b:d8:da:
                    51:2e:65:f5:18:45:fa:88:7f:77:12:53:1c:40:bb:
                    d4:2b:15:32:47:94:88:75:e5:95:e6:82:2f:37:11:
                    94:a6:86:99:cf:7f:a0:09:d6:35:3c:92:a1:78:9c:
                    bd:5f:a3:ef:e7:e4:59:15:f2:f8:3c:e3:09:3a:fd:
                    b3:41:fb:f3:46:01:3e:d7:ae:2c:17:be:47:68:b9:
                    1b:fe:64:19:9a:b9:e4:9b:e4:ce:81:68:3e:67:e3:
                    fa:24:78:d2:2d:a8:90:76:a6:f3:82:31:7b:d4:4d:
                    2e:9a:e9:86:f3:cd:d1:9d:61:33:93:3d:8c:ef:d4:
                    ac:46:d2:68:d8:cf:f1:5f:62:99:e4:ff:a1:06:72:
                    cb:05:50:11:8f:66:12:6e:63:f2:23:8c:7f:50:9e:
                    31:6e:5d:c9:28:93:99:bf:b5:91:1e:2b:21:ff:ec:
                    5e:28:6a:f7:c5:ce:f7:39:68:16:6e:19:ff:a2:4f:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:CA:C9:F4:C1:8D:89:39:D5:B9:F5:8B:11:E3:D9:AD:C1:82:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/161a50f9-a7d4-4d65-951a-3d4cd252ec5c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/161a50f9-a7d4-4d65-951a-3d4cd252ec5c/161a50f9-a7d4-4d65-951a-3d4cd252ec5c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:df00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:3a:03:20:7c:d5:6b:a1:43:3d:6e:91:68:35:e4:32:9b:
         c1:bc:ac:25:62:53:32:2a:df:96:2c:51:c4:a6:f2:59:ce:cb:
         69:01:41:29:39:c4:57:4c:20:b1:5d:31:25:3d:94:aa:34:20:
         71:e3:4c:63:51:24:49:de:1a:54:79:92:6f:cb:18:22:79:88:
         cd:78:cf:7f:d3:e4:85:1e:db:3b:91:49:5a:dd:a3:9a:2d:5c:
         5b:f2:e9:04:6d:06:9d:d1:7a:7f:16:28:6b:bc:0a:87:52:27:
         a7:14:28:2a:45:b1:63:20:72:04:78:fa:92:7f:41:0e:50:5f:
         88:cd:7c:5d:f7:ba:09:c3:ce:db:19:15:ca:88:52:f7:ae:52:
         05:da:8c:85:be:a6:1f:39:50:67:4b:92:fa:a7:61:3e:1d:74:
         e4:8b:19:e8:59:37:1b:a7:92:c7:2a:8f:a2:c1:76:ab:99:b8:
         35:33:d6:73:84:ba:94:07:10:f2:6d:38:46:ad:ac:fa:26:42:
         65:36:c2:e1:ee:17:34:be:f9:f1:60:d5:a5:1a:6f:4f:4e:04:
         fc:ec:d8:81:a4:c6:f6:77:e2:37:34:1c:88:51:f7:ec:e3:b1:
         81:a4:2d:3e:46:83:3e:d7:be:52:7f:34:a3:e4:ce:aa:2b:7b:
         8f:0b:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----