This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer
File:                     5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer (raw, json)
Hash identifier:          +ffBX9bYxC0Po/IrFiTZ6Sf1mPh1d7ltZVM0m7U/M6U=
Subject key identifier:   63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584B9565D5F9E71D602DF0549400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Oct 2025 10:48:20 +0000
Certificate not after:    Sun 16 Jan 2028 16:03:55 +0000
Subordinate resources:    AS: 13416
                          IP: 142.248.191.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:65:d5:f9:e7:1d:60:2d:f0:54:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 20 10:48:20 2025 GMT
            Not After : Jan 16 16:03:55 2028 GMT
        Subject: CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:80:57:92:87:28:80:90:07:22:61:f8:f9:
                    00:14:ba:bc:5d:b0:d8:39:0c:de:35:76:be:15:8a:
                    2d:40:c1:cc:4b:38:22:ed:9d:26:33:cd:ce:b3:08:
                    37:03:a3:95:ce:90:e0:0f:2f:f3:81:8c:c5:70:84:
                    2b:b7:a4:96:c1:4e:ba:d7:7c:9b:08:cd:42:0c:3e:
                    bb:98:a2:e0:c3:43:fe:83:ad:60:df:16:75:4a:6a:
                    09:c5:2b:27:2b:0d:7b:f9:32:38:69:21:93:25:10:
                    f1:38:b6:ec:b9:ec:a8:72:06:1b:3e:c1:8a:f4:35:
                    9a:0d:18:55:ab:dd:d7:1d:16:61:da:93:27:86:bb:
                    50:4d:a0:53:de:4c:83:d4:07:8e:07:22:5d:b6:e2:
                    8d:8d:1d:f6:a9:b0:4d:8d:d5:bc:98:ed:2b:04:54:
                    de:9f:9c:5d:0a:5f:43:c0:81:5b:2c:b1:87:40:e7:
                    d2:17:ce:3a:42:a1:cc:18:77:b5:90:61:1e:cc:ad:
                    2d:10:43:d7:5d:10:1a:da:e1:36:5c:47:5d:16:c6:
                    12:f5:f3:8f:71:43:12:00:2c:e2:2e:e9:10:4b:36:
                    10:65:49:a6:46:38:b5:c3:2b:bf:bd:14:57:99:7c:
                    f2:05:28:22:39:38:75:09:30:1c:74:ab:eb:c2:0f:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.191.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13416

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:22:72:39:0a:14:3d:6e:10:b9:d7:24:5a:d0:23:e3:a9:0f:
         e7:6e:cb:2d:df:48:39:b4:80:0a:16:83:81:a6:23:0a:14:9f:
         f1:eb:0c:72:1b:02:98:d5:a7:75:14:f9:ca:3b:21:31:0d:1d:
         7d:04:6e:5f:8b:df:d6:cf:95:ff:87:5a:33:d2:c4:ed:a4:01:
         15:3c:64:59:c2:0f:c8:19:42:29:e0:b5:b6:77:29:d1:a5:b1:
         b7:35:8c:8c:c4:98:8d:ec:ac:f5:d3:9b:11:c3:70:7b:73:b5:
         0c:c9:15:54:c1:7e:6d:af:a0:7d:bf:ac:9b:11:6e:ef:c9:71:
         e5:70:a6:56:08:db:c8:0d:ef:48:8e:8c:ef:60:54:dc:28:b0:
         8c:76:9a:18:73:d0:c3:97:9d:fd:d8:13:95:0a:7a:fb:15:f6:
         c3:f4:19:95:24:fc:d6:c0:2c:67:46:20:9b:9f:df:29:8f:05:
         5b:2b:4e:93:0f:05:39:4b:a2:74:49:3b:f7:dc:6e:25:97:d9:
         b0:da:20:c4:b1:89:88:bf:d3:24:bc:cc:9a:ae:33:16:39:ca:
         cb:12:97:3f:5b:9c:c4:4b:63:cd:fe:b4:fa:f8:1c:2d:8f:78:
         17:b2:8b:16:6f:a7:4d:b8:a6:60:b2:e6:c3:29:95:25:d3:7f:
         f2:88:68:6d
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuVZdX55x1gLfBUlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTAyMDEwNDgyMFoXDTI4MDExNjE2MDM1NVowLzEtMCsGA1UEAxMk
NTg5NTY0MGYtZmU2Mi00YWE4LWE1OWMtMGNkYTRjNDliZGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FmAV5KHKICQByJh+PkAFLq8XbDYOQzeNXa+
FYotQMHMSzgi7Z0mM83Oswg3A6OVzpDgDy/zgYzFcIQrt6SWwU6613ybCM1CDD67
mKLgw0P+g61g3xZ1SmoJxSsnKw17+TI4aSGTJRDxOLbsueyocgYbPsGK9DWaDRhV
q93XHRZh2pMnhrtQTaBT3kyD1AeOByJdtuKNjR32qbBNjdW8mO0rBFTen5xdCl9D
wIFbLLGHQOfSF846QqHMGHe1kGEezK0tEEPXXRAa2uE2XEddFsYS9fOPcUMSACzi
LukQSzYQZUmmRji1wyu/vRRXmXzyBSgiOTh1CTAcdKvrwg9fzwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFGO/Yngp+fYDeHC7daLaJaKHneL8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81
ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0OWJkYTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzU4OTU2NDBmLWZlNjItNGFhOC1h
NTljLTBjZGE0YzQ5YmRhNC81ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0
OWJkYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACO+L8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
NGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAASJyOQoUPW4QudckWtAj46kP527LLd9IObSAChaDgaYjChSf
8esMchsCmNWndRT5yjshMQ0dfQRuX4vf1s+V/4daM9LE7aQBFTxkWcIPyBlCKeC1
tncp0aWxtzWMjMSYjeys9dObEcNwe3O1DMkVVMF+ba+gfb+smxFu78lx5XCmVgjb
yA3vSI6M72BU3CiwjHaaGHPQw5ed/dgTlQp6+xX2w/QZlST81sAsZ0Ygm5/fKY8F
WytOkw8FOUuidEk799xuJZfZsNogxLGJiL/TJLzMmq4zFjnKyxKXP1ucxEtjzf60
+vgcLY94F7KLFm+nTbimYLLmwymVJdN/8ohobQ==
-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:34 2025 by rpki-client