This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer
File:                     60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer (raw, json)
Hash identifier:          7HjVdDmLndeyWsAOGDynHGtdxmQ2qLgayQ+ce4fueQQ=
Subject key identifier:   6E:41:05:F1:B9:56:0B:CE:E4:F0:22:7F:B8:91:CE:12:8B:E3:F9:44
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C6DFFC89DEA0870ADDA9AE400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 06 Jan 2026 00:53:07 +0000
Certificate not after:    Sun 09 Apr 2028 23:53:07 +0000
Subordinate resources:    AS: 171
                          IP: 152.55.152.0/22
                          IP: 2607:f7b8::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6d:ff:c8:9d:ea:08:70:ad:da:9a:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan  6 00:53:07 2026 GMT
            Not After : Apr  9 23:53:07 2028 GMT
        Subject: CN=60f833ba-8149-4ea8-a5bf-33d1da5a60d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:46:e2:7f:b0:da:9a:44:7a:09:6b:44:71:
                    65:38:55:93:d5:9f:9a:c5:69:e6:d6:85:6e:f5:3d:
                    d2:d7:3d:ed:17:2f:64:f4:8b:cc:72:e3:9b:0b:8b:
                    d1:e6:d6:55:57:e3:f1:30:51:89:b9:6a:3e:8f:96:
                    7e:6b:28:ca:80:df:b5:d9:44:e5:27:c3:91:6e:cf:
                    bd:09:c1:ba:78:b2:80:59:a2:92:06:c1:71:41:87:
                    c7:e4:44:b0:d2:06:b0:6b:1c:5d:45:c8:23:71:c7:
                    69:6c:76:c0:e8:73:c3:33:7a:0f:46:f0:71:9e:b6:
                    09:f7:9d:45:0d:98:48:d3:8a:ed:1f:e9:f6:89:11:
                    27:6a:bd:d0:09:70:81:13:67:0f:12:f5:38:33:f8:
                    e5:f2:3d:56:08:af:15:4c:32:06:d8:d1:a7:d2:ad:
                    51:26:2d:f1:08:61:79:09:1b:31:7d:2c:12:37:18:
                    6f:3a:cb:8f:d6:7c:c6:23:f9:39:d8:0f:2f:52:73:
                    46:b1:98:0b:be:ed:22:63:fb:76:7a:a8:e2:c3:23:
                    43:1f:33:f1:54:38:0a:8f:31:f8:32:57:22:c4:49:
                    a0:5d:20:cc:b2:f7:0f:c6:03:de:5a:af:d7:71:85:
                    ee:6e:c0:c3:73:8f:45:ae:87:89:c3:f7:14:85:63:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:41:05:F1:B9:56:0B:CE:E4:F0:22:7F:B8:91:CE:12:8B:E3:F9:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.152.0/22
                IPv6:
                  2607:f7b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  171

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:2b:a7:17:f8:32:aa:c8:e0:04:f1:de:71:ca:f3:e1:94:
         b9:47:3a:1a:02:dd:45:a6:37:b0:4a:c8:e7:c4:93:f4:22:1f:
         31:c0:6f:b3:c4:8b:59:a2:fd:12:a8:3d:2d:c1:5f:6a:ce:e2:
         62:0e:f9:15:ec:57:86:ad:c3:a2:87:1c:62:6d:52:58:da:27:
         08:bc:7c:86:d6:78:6b:f7:97:e1:db:d1:e2:b5:47:7f:a8:b8:
         5d:e5:f4:ee:60:3d:1e:91:cc:41:7a:15:ce:64:e7:fe:af:cc:
         d0:a2:c9:53:34:2f:30:be:9f:2b:7b:d6:87:d8:16:bf:45:26:
         44:ff:c4:a2:9f:b9:96:05:28:e1:20:18:47:73:96:64:fc:a8:
         3a:33:41:4f:73:69:d1:19:21:9d:35:64:1e:1f:d8:09:68:3d:
         5f:c2:01:a4:2d:21:56:3f:8f:48:ff:78:f1:ab:6c:b4:32:b0:
         95:0c:67:97:4a:33:a8:69:e4:2b:f2:70:ff:34:5e:d9:8f:af:
         db:6f:cf:e6:36:d7:bd:17:95:0e:34:7f:fb:7e:b9:fa:04:07:
         d8:48:67:f6:ea:2f:66:0d:fe:43:dc:77:7b:f0:26:77:e2:34:
         22:92:aa:32:af:f5:5b:14:1f:c8:ce:95:8a:71:c7:14:b0:ae:
         73:29:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:34:22 2026 by rpki-client