This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer
File:                     3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer (raw, json)
Hash identifier:          J7JcVPEYRtFVRwY97ngVLINAsIsYUL7jEcxXL7agIdE=
Subject key identifier:   91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BB22FCF56ECA97C93E433E360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Oct 2025 18:17:55 +0000
Certificate not after:    Wed 02 Feb 2028 19:17:55 +0000
Subordinate resources:    AS: 25955
                          IP: 207.210.160.0/19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:2f:cf:56:ec:a9:7c:93:e4:33:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 30 18:17:55 2025 GMT
            Not After : Feb  2 19:17:55 2028 GMT
        Subject: CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:06:ac:25:c5:c5:6e:61:a8:bc:e2:49:e6:
                    17:31:06:95:e9:be:a0:78:5c:d9:ad:8c:03:1e:2a:
                    86:c4:2d:9e:7d:45:cd:b2:02:c6:9a:f7:ae:db:4f:
                    ed:36:3d:bb:b0:2a:6e:f1:a3:42:62:89:36:7a:c5:
                    5d:b2:6a:fb:95:66:b5:b7:ba:9d:83:00:03:cf:bc:
                    67:08:85:d1:14:6c:90:a5:c8:34:aa:c1:02:c9:0f:
                    e0:dd:0e:89:15:5d:fd:5b:a9:16:b7:dd:e0:3c:c1:
                    40:d4:db:08:25:9f:10:07:6d:89:99:c1:00:e8:f1:
                    06:2a:d3:4f:90:30:c6:e4:86:e5:15:7b:a8:91:6e:
                    0e:80:e0:ea:d7:5a:ee:c3:48:16:86:74:15:b9:cc:
                    26:b0:dc:3e:eb:2b:da:61:44:4e:f4:d6:cc:1f:e8:
                    8a:a5:da:f3:31:6b:2f:9e:f9:3a:72:2b:02:9e:00:
                    50:99:b0:3e:47:09:cf:6d:20:7d:52:66:1a:4e:3c:
                    0f:11:34:2f:cb:05:14:55:71:0d:50:bb:08:bd:a3:
                    e1:9a:31:2b:fe:a9:61:76:a2:56:8a:a6:c7:33:06:
                    b5:66:15:c4:0a:cb:be:8f:dc:fc:37:be:24:6e:cb:
                    6f:55:65:a3:ce:ec:a4:fd:ed:ac:57:56:f2:b7:04:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.160.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25955

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:af:3a:17:e3:c0:0a:bf:be:fc:8d:35:24:a9:a4:a3:da:d6:
         49:fb:23:7f:f3:c7:40:3f:e4:30:aa:f7:25:88:09:c2:a7:d5:
         91:87:81:1c:be:43:0e:dc:18:95:88:d2:f3:9e:8a:3a:68:bb:
         4b:7c:0e:76:6e:90:bb:dd:bc:d2:6d:f4:15:bf:68:ee:ff:7b:
         63:a0:fe:66:68:d5:8a:e5:e7:64:d8:3f:b5:be:fe:94:00:06:
         1e:6d:c9:b2:06:37:e6:a0:f1:7f:c0:46:d1:9c:8e:33:24:02:
         bd:28:4b:83:f6:67:5c:7c:6f:79:dc:ae:b9:09:1e:cd:9c:b6:
         3f:c6:94:aa:23:6a:32:78:80:d9:71:bd:17:10:e1:b4:69:05:
         10:24:96:fc:8a:8d:2b:a1:98:f5:f2:50:91:53:8e:13:1e:2e:
         1d:e5:6d:a1:ad:1a:df:c6:b3:9c:bf:0c:e3:5e:f6:93:0f:c0:
         af:1b:a6:d4:4e:d7:63:46:4e:b2:48:70:6e:70:a4:f1:86:0e:
         6c:9b:02:21:4f:16:01:93:83:78:48:6b:49:28:f6:f0:a7:42:
         56:6e:17:01:a6:c9:d3:88:c1:4f:fc:7b:58:50:31:c7:3a:19:
         ea:74:a7:cc:1e:78:97:d3:7d:b2:ce:0d:b0:68:02:83:34:21:
         e7:c3:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:50 2025 by rpki-client