This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer
File:                     4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer (raw, json)
Hash identifier:          dW4MHbjV/HNnxvvTwZgJIrcvY9URd5SkqeZVsFbE25Q=
Subject key identifier:   5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BA73715367E761E1807D9E240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Oct 2025 19:58:41 +0000
Certificate not after:    Sat 29 Jan 2028 20:58:41 +0000
Subordinate resources:    AS: 402004
                          IP: 23.146.12.0/24
                          IP: 2602:f54e::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:37:15:36:7e:76:1e:18:07:d9:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 26 19:58:41 2025 GMT
            Not After : Jan 29 20:58:41 2028 GMT
        Subject: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:91:93:28:31:e0:29:4b:4e:bc:e8:99:79:
                    4c:89:13:1c:a3:6c:13:7f:ca:5d:46:6f:83:a3:d9:
                    b4:ac:7d:0b:a4:4f:7b:78:7d:af:86:49:83:fb:1f:
                    77:92:ad:a7:d6:4e:4b:cc:15:31:1d:90:8b:e5:88:
                    c9:12:6e:fe:f6:b1:99:22:a4:8f:3a:5b:93:e8:85:
                    e3:1c:57:ad:13:b5:29:0c:ca:86:36:72:59:72:68:
                    62:41:cf:36:1e:dc:e0:0f:59:3b:9d:12:0b:80:c4:
                    d4:0b:e0:f2:7a:55:f9:31:c2:dd:d1:dc:86:71:04:
                    df:f8:ea:f2:48:12:6e:73:80:05:cc:cd:3e:ff:6a:
                    06:f4:46:28:e4:86:6b:4c:6f:8b:b0:dc:ec:83:dd:
                    55:22:7b:74:d5:11:eb:e9:43:24:61:42:19:0c:13:
                    7f:aa:06:f7:e4:19:97:21:e3:a6:31:1c:53:7e:a3:
                    dd:bd:7a:3a:ac:50:94:5a:a8:14:39:e3:d7:c5:71:
                    d7:37:3d:ad:24:18:9c:65:c9:ca:4d:8a:40:db:2f:
                    cf:d3:b9:a9:2b:bb:39:43:41:09:fa:e3:6f:65:3c:
                    43:cf:d4:ab:d1:e7:71:48:a7:08:dd:c0:c4:22:bc:
                    af:68:3f:8a:f8:ed:dd:0f:80:dc:1a:05:4e:7c:74:
                    fe:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.12.0/24
                IPv6:
                  2602:f54e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402004

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:86:05:c9:3e:ea:bd:1a:0c:65:5b:fd:ed:39:82:89:06:b1:
         80:17:99:3b:b8:c1:b7:7c:cc:81:55:54:45:0c:a2:98:aa:15:
         64:b0:05:d3:4b:f6:93:51:5c:82:87:52:27:4a:73:de:3c:ca:
         ad:56:22:3f:43:1b:1b:54:e4:73:00:9d:24:24:18:bb:4d:4e:
         c5:92:2f:1d:77:15:ce:ee:2e:94:22:22:2f:bd:f3:26:25:c2:
         2e:a4:04:38:6a:3e:17:96:90:a6:dc:49:94:6f:c6:d3:65:f5:
         2e:10:3d:42:6c:73:95:0d:c7:95:75:54:bb:2d:03:60:34:7c:
         7b:f8:ba:84:33:d8:dc:01:64:78:f5:45:62:d9:97:e5:57:c9:
         bc:92:cb:28:c0:f3:e4:47:1e:48:9e:b9:0b:20:20:75:12:69:
         e1:3f:d3:43:55:47:ac:86:df:6c:c6:5d:7c:0d:07:4b:05:0e:
         33:b7:6a:84:2d:53:ea:55:0a:cc:bf:31:a7:ee:37:16:0e:a6:
         3f:6e:9d:76:70:8e:fa:03:46:63:3c:ad:85:f4:c9:7f:32:17:
         d0:cf:60:f1:b1:88:93:e8:ec:48:90:7b:c7:21:b6:c8:ca:b9:
         26:05:75:ae:cd:88:50:3b:0d:20:d7:3f:91:ae:b6:fa:c4:91:
         21:a0:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:00 2025 by rpki-client