This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25.cer
File:                     2182d348-a81b-4952-b2f6-1c8dbf44eb25.cer (raw, json)
Hash identifier:          2/Jo9G3Hed/X7cr/nycvYqVFOPz/vND06ypoSZeJt8Y=
Subject key identifier:   CC:81:44:43:88:8F:47:83:8C:43:FE:65:ED:E5:C1:6D:75:C0:22:53
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C77EA5BADBCDE1558DC3D29C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/2182d348-a81b-4952-b2f6-1c8dbf44eb25.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Jan 2026 14:08:02 +0000
Certificate not after:    Thu 13 Apr 2028 13:08:02 +0000
Subordinate resources:    IP: 198.168.27.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:77:ea:5b:ad:bc:de:15:58:dc:3d:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan  9 14:08:02 2026 GMT
            Not After : Apr 13 13:08:02 2028 GMT
        Subject: CN=2182d348-a81b-4952-b2f6-1c8dbf44eb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:b7:bb:c3:22:a6:38:a6:6d:ff:e3:4b:bb:
                    95:ea:11:8d:fc:5a:0f:9c:4b:7b:c9:6d:63:84:6d:
                    37:fe:c6:0a:0d:01:05:bb:ff:c2:8c:4b:7c:ec:9f:
                    89:b1:70:74:99:a9:71:40:3f:07:2b:4e:1c:83:19:
                    e2:6e:ce:9f:a4:e7:bb:37:5a:bd:91:48:67:62:aa:
                    fe:f1:d2:2e:ab:db:66:51:26:52:5d:36:ca:7e:54:
                    9e:61:b5:a0:a7:f5:c8:ea:5d:ea:2d:8c:c8:fa:54:
                    85:87:c3:6d:de:76:aa:9a:5e:65:59:4f:93:2e:b4:
                    c8:05:53:e9:bf:63:4a:96:16:65:37:f3:08:4f:16:
                    eb:59:ea:8a:48:b6:b2:1c:51:4d:25:5f:0c:17:da:
                    a9:af:09:b5:75:30:2e:e1:73:8e:c5:5a:55:0a:5e:
                    de:d2:58:48:e2:f0:f0:bf:37:d2:db:cf:48:e2:59:
                    5a:3f:9f:25:a7:91:ac:43:e6:49:16:92:07:9d:46:
                    8b:29:52:03:61:9f:aa:bd:27:c5:23:55:7c:57:46:
                    8f:d9:13:90:68:23:e0:8e:70:05:41:76:59:fd:7b:
                    61:e0:3c:16:f6:69:f1:4e:c9:d7:b6:a9:29:b9:3c:
                    99:5e:95:2d:3f:2e:bb:c8:29:94:3f:af:d8:dd:85:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:44:43:88:8F:47:83:8C:43:FE:65:ED:E5:C1:6D:75:C0:22:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2182d348-a81b-4952-b2f6-1c8dbf44eb25/2182d348-a81b-4952-b2f6-1c8dbf44eb25.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:68:dc:e7:7d:0f:87:de:ba:4f:8a:9a:a8:75:36:26:3c:
         60:70:c2:08:e1:e9:99:cb:cf:ed:67:59:dc:61:f2:05:1a:72:
         3f:27:c9:5b:01:bc:13:05:85:4e:cb:9b:b4:7d:c9:75:52:d2:
         27:93:09:47:2d:f2:cd:64:8d:f7:f2:80:0c:53:f6:da:2b:be:
         25:00:b2:28:77:b1:dd:de:16:e4:0b:c3:d2:60:d5:48:d1:43:
         71:ce:17:08:e1:32:82:05:d9:13:13:ed:d3:d8:bd:a1:13:79:
         66:f0:63:8c:fa:56:e0:90:47:35:98:50:06:41:2f:2e:4f:ca:
         1f:fb:8e:bc:c7:10:08:7e:5f:c8:cc:fa:10:27:8b:eb:91:e6:
         cc:cb:a8:65:22:4d:a5:8a:df:fc:b3:2e:7a:68:6e:1e:d4:fb:
         08:85:2b:05:52:34:e2:4f:5d:bd:6b:57:69:04:05:48:ee:ff:
         2a:75:ef:2e:bc:7f:d6:6b:5c:52:9c:d8:0d:f9:d0:f4:15:03:
         bc:ac:eb:cc:99:f4:dc:35:a5:cf:bb:a3:c5:b6:c9:fa:69:32:
         e6:aa:30:bb:30:e9:69:89:47:7e:99:c4:b4:b3:5f:6d:03:48:
         79:97:93:83:9c:ae:91:b4:7d:4b:96:bf:55:97:da:e4:4b:d8:
         7c:07:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:34:23 2026 by rpki-client