This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4942c0b3-8af6-46c1-80c7-ab98ff82154d.cer
File:                     4942c0b3-8af6-46c1-80c7-ab98ff82154d.cer (raw, json)
Hash identifier:          aImqeRWNHdX6axD4ZzklfygYj93+kr9ie95/G6VQOgc=
Subject key identifier:   B9:5A:08:DB:83:11:45:B1:29:CC:43:A8:1B:A3:17:CA:3E:AD:45:2F
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BAF9B643DAF44265A23409040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4942c0b3-8af6-46c1-80c7-ab98ff82154d/4942c0b3-8af6-46c1-80c7-ab98ff82154d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4942c0b3-8af6-46c1-80c7-ab98ff82154d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Oct 2025 20:07:15 +0000
Certificate not after:    Tue 01 Feb 2028 21:07:15 +0000
Subordinate resources:    IP: 205.196.98.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:9b:64:3d:af:44:26:5a:23:40:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 29 20:07:15 2025 GMT
            Not After : Feb  1 21:07:15 2028 GMT
        Subject: CN=4942c0b3-8af6-46c1-80c7-ab98ff82154d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:1e:c5:fb:f4:ed:11:93:4a:f7:f3:b4:93:
                    14:90:a0:19:c9:22:42:8a:ef:51:6d:60:ef:00:30:
                    89:ec:95:ea:72:82:f7:e2:4d:f2:98:17:bd:46:6c:
                    3a:25:3c:1f:1c:08:26:41:30:3c:2a:cc:2e:89:1d:
                    57:7b:e9:6d:ae:3c:e0:6d:5d:3d:96:5b:67:eb:6d:
                    9c:fc:77:6b:99:51:b4:88:2c:2b:c3:9e:23:25:6b:
                    1a:f3:80:e3:7d:4c:33:c1:7b:e7:55:d7:a5:38:6c:
                    ca:6a:15:0b:35:f7:46:d8:24:1d:27:78:9d:8f:a7:
                    f7:1a:5b:97:c8:a1:65:1e:5c:79:a8:7d:e6:99:20:
                    df:bb:3f:86:d7:8b:94:12:d4:b3:ff:4d:2f:8d:6f:
                    f2:ad:12:7c:5c:be:87:75:de:9e:48:96:c1:0c:0d:
                    08:2f:0a:41:47:a3:9d:7a:84:d1:b3:1f:43:f8:30:
                    6e:3e:93:06:52:66:65:9b:ef:80:5c:b4:87:16:46:
                    9c:f9:6d:4c:7d:09:bd:16:59:b0:c8:21:58:20:5d:
                    a0:d9:cf:51:b4:96:09:6f:be:1e:42:15:ae:2e:85:
                    8c:e1:4f:35:ed:96:17:db:58:0a:3b:3e:09:e1:70:
                    25:3f:12:f5:62:d2:f6:2e:5d:a8:a9:e4:8a:43:71:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:08:DB:83:11:45:B1:29:CC:43:A8:1B:A3:17:CA:3E:AD:45:2F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4942c0b3-8af6-46c1-80c7-ab98ff82154d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4942c0b3-8af6-46c1-80c7-ab98ff82154d/4942c0b3-8af6-46c1-80c7-ab98ff82154d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:64:3a:50:f0:1c:d5:0d:3e:c2:46:2d:c1:e5:43:30:dc:
         3d:7a:62:fe:cb:d1:f9:52:96:42:77:5a:8a:05:83:eb:f2:2f:
         f9:0d:c4:34:0b:07:6d:7d:c6:07:70:04:fb:ce:3c:ff:db:86:
         35:6c:a0:2d:69:4a:0d:c7:b9:4e:ae:bf:35:6d:58:f5:dc:17:
         f2:32:22:c0:dc:3f:df:fc:ce:d7:e3:75:d1:0a:3d:f6:d0:af:
         30:42:ce:9a:88:e6:40:b0:d7:ca:b3:9c:a3:68:3f:49:ec:ad:
         ec:af:d4:17:b4:86:1e:35:45:8e:89:bf:ac:e6:be:8f:64:c9:
         0c:a4:37:e0:b8:d6:d8:46:0c:ec:b2:b3:49:a3:0c:84:91:64:
         32:be:3d:6b:83:64:48:94:c3:f0:52:e5:58:25:e9:4d:f7:5e:
         c3:a4:16:47:a5:4c:9d:a9:4c:fb:8d:a6:48:5e:f9:9f:40:85:
         a0:0a:63:9e:7a:94:4d:97:b3:3f:37:cc:66:54:74:b4:a2:51:
         7c:67:e3:49:cf:b3:47:dd:79:9e:27:ab:ed:af:91:d5:5d:d2:
         25:c9:d3:b3:71:20:21:77:f3:7d:ce:ee:aa:49:75:9c:55:9d:
         f3:03:69:81:c8:b2:11:61:9b:cb:e0:dd:c6:c0:5b:b6:d5:8f:
         15:d2:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:40 2025 by rpki-client