This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92.cer
File:                     5197c386-7ea8-41c6-b63f-e3da0b892a92.cer (raw, json)
Hash identifier:          +RHey8qX2OB1MDeQnhf4D7O/m/xLVRD3DFu8qwp0FKA=
Subject key identifier:   75:50:61:3D:3A:15:F7:3D:F9:B6:8E:83:B7:FB:B3:45:EB:C2:45:E8
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BDBBAD150A5856450FA483080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/5197c386-7ea8-41c6-b63f-e3da0b892a92.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Nov 2025 15:26:09 +0000
Certificate not after:    Thu 17 Feb 2028 15:26:09 +0000
Subordinate resources:    AS: 23486
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:db:ba:d1:50:a5:85:64:50:fa:48:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 14 15:26:09 2025 GMT
            Not After : Feb 17 15:26:09 2028 GMT
        Subject: CN=5197c386-7ea8-41c6-b63f-e3da0b892a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:b3:d7:99:40:4f:b2:b8:c8:3b:e0:27:d2:
                    30:ca:55:be:92:3e:28:f0:8a:cb:ba:06:ba:a0:57:
                    42:c4:54:f1:f3:d8:6d:e7:ad:df:3a:cd:4a:7c:86:
                    cf:a1:ce:a9:cb:3b:ed:4e:b4:fa:b4:62:0d:47:1f:
                    26:f6:e3:87:87:b6:e3:74:e6:5e:53:68:ff:61:45:
                    91:47:01:da:93:7c:5b:ec:65:a5:26:a8:11:cc:b4:
                    8d:6c:8b:ef:0e:15:f4:9f:54:79:17:65:21:5e:30:
                    51:5a:ed:47:69:1a:eb:7e:fb:e8:1c:c7:fb:e9:29:
                    bb:48:d9:f0:0d:4d:b8:b2:ec:5a:a1:04:69:de:ba:
                    9b:e3:71:0d:b4:30:86:e4:82:b7:19:5d:1e:8c:b6:
                    ff:c5:29:8f:2f:5f:04:6d:e0:fd:1f:e1:4f:7e:f9:
                    f7:bc:9d:9c:9d:d9:96:56:6b:17:fa:16:c5:b7:12:
                    69:4f:20:28:21:c0:ac:b7:b7:84:01:6e:78:ab:48:
                    ae:d0:9f:2f:a9:a4:34:59:72:1c:47:92:23:e3:ab:
                    64:57:05:cf:f8:22:db:95:6b:fd:4b:8d:2c:97:97:
                    31:b9:7c:05:c2:ff:8c:a0:e1:ca:e5:68:23:f7:d8:
                    4c:77:9c:50:65:b2:67:f0:1b:df:84:49:f4:99:99:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:50:61:3D:3A:15:F7:3D:F9:B6:8E:83:B7:FB:B3:45:EB:C2:45:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5197c386-7ea8-41c6-b63f-e3da0b892a92/5197c386-7ea8-41c6-b63f-e3da0b892a92.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23486

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:35:0b:e1:28:f7:1f:31:11:7e:ad:c9:7f:62:da:5f:33:09:
         4a:bb:f5:33:65:ea:4c:3f:ab:c9:03:73:90:24:ac:45:6a:a1:
         c3:54:30:4b:2b:2e:9e:34:8d:6e:ac:87:4b:dd:03:ff:9a:76:
         22:a8:42:dd:ce:19:7e:41:4f:85:fd:09:60:8e:b4:a1:41:17:
         d1:6c:89:da:f5:f7:ea:e7:9a:4b:7e:a1:27:52:94:20:4b:1a:
         47:03:aa:4e:52:a7:ad:e5:dd:38:4f:8d:c3:2e:f8:90:3c:df:
         b9:3f:d0:9a:26:8e:e7:be:66:ac:75:cf:88:1a:3e:14:98:d0:
         c3:13:da:f6:dd:1a:64:a8:99:9b:6d:42:7f:74:ca:10:b8:41:
         f0:30:ba:cd:c1:19:a5:2e:5e:a7:5d:b4:8a:f7:72:1c:4f:35:
         36:c9:e4:83:bf:8b:19:cb:33:a7:ec:38:df:50:0d:85:90:ba:
         f2:9c:46:ef:4e:ef:77:00:73:ae:37:2f:db:ad:ad:86:45:84:
         5b:79:32:98:9f:40:5a:d5:ae:e6:68:e8:3e:ba:c6:a8:c8:96:
         76:f3:56:49:ac:0f:52:7d:cf:f9:af:33:d8:c7:35:cc:2a:66:
         93:db:ef:2c:9c:ac:09:ed:2a:6e:61:37:7e:64:f2:6a:28:e3:
         7b:96:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:43 2025 by rpki-client