This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.cer
File:                     3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.cer (raw, json)
Hash identifier:          g+JlSn1MvhNhINAPKphAGjgCTnwxTxzyQ9JgjnbmjeE=
Subject key identifier:   04:2F:FA:3A:38:E1:BD:DC:7F:3A:F0:45:6B:B2:3B:1A:7D:82:DC:65
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BF8329DF4E5955244C93E5D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Nov 2025 20:10:09 +0000
Certificate not after:    Sun 27 Feb 2028 20:10:09 +0000
Subordinate resources:    AS: 21646
                          AS: 46544
                          IP: 172.87.40.0/22
                          IP: 207.210.64.0/24
                          IP: 207.210.70.0/24
                          IP: 207.210.73.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:32:9d:f4:e5:95:52:44:c9:3e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 24 20:10:09 2025 GMT
            Not After : Feb 27 20:10:09 2028 GMT
        Subject: CN=3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:b2:bc:0f:82:3d:a4:d8:e3:7a:89:02:f3:
                    f8:7e:30:08:05:d0:ce:34:4a:33:e2:b6:ab:ee:9c:
                    84:f9:69:5a:20:a2:d4:86:2e:e6:fe:46:9c:f1:ad:
                    8b:ad:b2:74:f3:54:7e:bd:c6:87:1a:f4:cd:02:46:
                    39:45:ad:1c:8b:43:04:63:9a:0f:1b:62:ba:0a:27:
                    4c:74:f3:f2:37:d6:25:55:71:d1:4b:4c:76:aa:c1:
                    c5:4e:d3:3e:51:be:1d:53:89:d0:44:ad:ae:6d:bd:
                    1c:8d:9e:ed:e1:ff:ad:78:67:cf:99:04:e8:54:9e:
                    99:c1:9a:26:f8:d9:be:5b:f3:5e:92:9e:0c:72:85:
                    bf:13:c6:7e:ae:e1:d6:e5:02:12:6f:76:c3:ed:bf:
                    f8:51:ba:b1:83:51:02:5a:fd:19:f6:1e:f6:95:45:
                    9b:07:4c:94:59:0f:74:de:1f:5d:d5:83:9b:68:95:
                    e4:48:16:b3:39:60:e7:b6:31:18:65:0d:af:dd:ed:
                    5a:ac:bb:d0:f9:60:ce:e4:7a:dc:9d:5e:f3:69:13:
                    e2:b4:f3:58:1a:e3:8e:b9:66:1b:46:72:30:fe:3b:
                    da:ad:39:ae:8a:a2:d3:ac:e0:ce:bb:49:0c:12:6d:
                    a5:6b:a7:7e:b1:f1:ba:01:fc:88:28:12:97:45:ba:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:FA:3A:38:E1:BD:DC:7F:3A:F0:45:6B:B2:3B:1A:7D:82:DC:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.40.0/22
                  207.210.64.0/24
                  207.210.70.0/24
                  207.210.73.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21646
                  46544

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:d7:03:eb:fb:28:d0:ca:c2:44:67:03:72:7c:3a:eb:45:
         51:e0:78:bd:e3:da:22:b9:3b:38:a7:c3:18:28:1f:aa:4e:2f:
         2a:cb:cf:76:3a:e9:cf:e7:00:33:d2:fa:22:90:a5:8e:b4:6b:
         e5:11:76:a1:cd:df:12:fe:6f:24:9d:37:0f:85:e9:1a:04:d7:
         4f:a2:61:6e:2a:15:76:45:7c:bb:b6:27:f1:aa:df:2c:16:ac:
         d4:f9:5a:10:d2:5e:4b:18:16:12:24:ad:f4:b7:17:87:3d:4c:
         31:f1:79:83:09:b0:9b:01:1e:09:0c:b4:8f:f3:7a:b5:6a:07:
         7f:c0:3b:be:f6:c3:87:60:8d:35:49:05:71:a0:db:94:93:8e:
         c5:1e:ae:19:0c:cf:b9:c8:3d:18:d5:c0:d7:6a:2a:2e:6b:11:
         45:ed:a9:b6:43:d3:80:db:bc:e8:2a:7c:ce:c0:96:50:2a:40:
         5a:00:a0:b0:9e:c7:1f:d9:93:05:97:bb:74:8f:9b:87:0f:28:
         1d:8f:d2:78:d9:ea:d0:ae:ed:0e:ee:40:f8:67:b2:5e:86:8d:
         40:f6:24:a8:4d:ac:22:77:58:70:33:93:10:a3:ca:c3:39:35:
         77:d3:61:94:17:ad:f2:a6:9b:ad:2a:35:11:e9:60:b6:0d:6b:
         1f:66:2b:92
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEv4Mp305ZVSRMk+XQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTEyNDIwMTAwOVoXDTI4MDIyNzIwMTAwOVowLzEtMCsGA1UEAxMk
M2QwYmE3N2ItMjA0Yy00ZmExLWJiYzAtNWMwZDdiNmIyYTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveayvA+CPaTY43qJAvP4fjAIBdDONEoz4rar
7pyE+WlaIKLUhi7m/kac8a2LrbJ081R+vcaHGvTNAkY5Ra0ci0MEY5oPG2K6CidM
dPPyN9YlVXHRS0x2qsHFTtM+Ub4dU4nQRK2ubb0cjZ7t4f+teGfPmQToVJ6ZwZom
+Nm+W/Nekp4McoW/E8Z+ruHW5QISb3bD7b/4Ubqxg1ECWv0Z9h72lUWbB0yUWQ90
3h9d1YObaJXkSBazOWDntjEYZQ2v3e1arLvQ+WDO5HrcnV7zaRPitPNYGuOOuWYb
RnIw/jvarTmuiqLTrODOu0kMEm2la6d+sfG6AfyIKBKXRbrrcQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFAQv+jo44b3cfzrwRWuyOxp9gtxlMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z
ZDBiYTc3Yi0yMDRjLTRmYTEtYmJjMC01YzBkN2I2YjJhNjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNkMGJhNzdiLTIwNGMtNGZhMS1i
YmMwLTVjMGQ3YjZiMmE2OC8zZDBiYTc3Yi0yMDRjLTRmYTEtYmJjMC01YzBkN2I2
YjJhNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMQYIKwYBBQUH
AQcBAf8EIjAgMB4EAgABMBgDBAKsVygDBADP0kADBADP0kYDBADP0kkwHgYIKwYB
BQUHAQgBAf8EDzANoAswCQICVI4CAwC10DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/s9cD6/so0MrCRGcD
cnw660VR4Hi949oiuTs4p8MYKB+qTi8qy892OunP5wAz0voikKWOtGvlEXahzd8S
/m8knTcPhekaBNdPomFuKhV2RXy7tifxqt8sFqzU+VoQ0l5LGBYSJK30txeHPUwx
8XmDCbCbAR4JDLSP83q1agd/wDu+9sOHYI01SQVxoNuUk47FHq4ZDM+5yD0Y1cDX
aiouaxFF7am2Q9OA27zoKnzOwJZQKkBaAKCwnscf2ZMFl7t0j5uHDygdj9J42erQ
ru0O7kD4Z7Jeho1A9iSoTawid1hwM5MQo8rDOTV302GUF63ypputKjUR6WC2DWsf
ZiuS
-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:50 2025 by rpki-client