This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer
File:                     3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer (raw, json)
Hash identifier:          r7M8dQ7n0XYM0RjXoqHnFFozVyVTvPHXjsHROafjct0=
Subject key identifier:   AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BF583141972627562D7792680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Nov 2025 21:04:51 +0000
Certificate not after:    Sat 26 Feb 2028 21:04:51 +0000
Subordinate resources:    AS: 400848
                          IP: 140.235.236.0/23
                          IP: 2602:f7e3::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f5:83:14:19:72:62:75:62:d7:79:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 23 21:04:51 2025 GMT
            Not After : Feb 26 21:04:51 2028 GMT
        Subject: CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:8c:9e:5e:45:0b:7c:2d:fc:7b:89:18:73:
                    ce:f7:ca:51:3d:d1:2a:18:03:35:85:f0:10:5b:a6:
                    24:82:94:42:a9:00:08:c8:fd:67:93:fa:c0:e7:56:
                    dc:0f:fc:21:a7:62:00:51:91:5c:30:56:85:1b:4d:
                    ed:5b:f6:37:4c:a0:7a:68:1a:3d:47:5c:f8:5a:d5:
                    99:48:ba:2d:c2:3f:d6:59:05:a3:2f:a2:83:32:86:
                    9d:88:3c:f8:86:7e:20:f8:05:f8:4b:d4:5c:56:90:
                    ca:6b:bf:c0:f1:f2:76:e7:2a:4d:5a:fd:55:0d:02:
                    61:f0:8a:60:b3:e1:3e:dd:e1:be:0b:c1:31:ba:ac:
                    34:62:f2:06:31:f5:7d:f0:46:19:5d:f0:5f:05:0c:
                    53:3a:d9:ee:ed:19:0b:f2:a0:76:63:d1:c3:db:d7:
                    b5:9d:1a:fe:56:1b:b8:cc:e1:d3:c9:da:9a:7f:8d:
                    28:88:b3:01:76:66:88:62:aa:a0:51:16:44:50:7f:
                    80:61:67:a4:56:16:dd:4b:d0:fb:8c:b1:9e:0f:95:
                    fe:4b:53:cd:6a:4a:47:6c:a4:1b:cb:3f:59:5c:8f:
                    b2:93:11:07:b3:d9:ee:64:25:fa:00:5f:a5:f4:e1:
                    5b:06:cf:25:25:6a:24:45:37:1c:1a:13:86:db:ea:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.236.0/23
                IPv6:
                  2602:f7e3::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400848

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:d9:dc:4e:61:fb:f8:fa:42:93:68:0d:37:6d:21:73:f4:
         65:6d:9e:ca:00:8d:78:03:7b:51:18:e4:70:03:0e:8d:d9:5f:
         7a:69:19:4d:9e:2f:55:d5:a3:5b:70:e8:7f:5c:86:11:f6:17:
         54:22:ad:2d:61:8d:66:21:5b:21:dd:35:be:9f:db:a4:aa:a4:
         13:d9:fa:44:1e:dc:e9:20:c0:c8:1e:a6:db:c7:c0:e4:18:9f:
         20:5a:fa:7b:df:71:e9:ae:38:e0:34:61:5a:3d:98:00:5c:d5:
         65:e9:88:84:1d:27:bd:84:1c:e3:05:0f:f2:a5:37:a6:0a:bb:
         44:ad:9e:c1:e2:ea:8b:00:c1:ba:69:1a:c8:6a:73:ba:2a:3b:
         c3:8e:01:0d:1f:a3:05:0b:12:ad:2f:b0:55:b8:84:85:c6:bb:
         b8:2e:34:68:9f:cc:1c:0a:78:1b:c0:41:d7:67:83:51:b0:7d:
         74:54:fa:8b:39:5d:3f:0a:41:15:1f:b2:4f:81:81:49:af:29:
         4d:7c:26:b8:c8:7b:f9:8c:6d:08:5d:e7:15:38:40:93:88:dd:
         03:20:6f:6a:f5:5f:f3:5e:a8:9e:c8:02:6e:2c:a8:65:3d:41:
         ea:2b:96:1f:20:5f:76:30:5d:34:05:93:c3:61:f1:cd:6e:2e:
         e0:fd:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:41 2025 by rpki-client