This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/670fdc41-85b8-493d-9c46-78918856629f.cer
File:                     670fdc41-85b8-493d-9c46-78918856629f.cer (raw, json)
Hash identifier:          owhEPsRVaQAl1qi1ha1NXGT/tjg8OqgziWmFGvLyTys=
Subject key identifier:   43:47:97:CD:35:CB:E8:8D:BF:8B:98:67:C5:06:31:5D:D3:3D:B8:18
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C78733C4B690883FDECA20480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/670fdc41-85b8-493d-9c46-78918856629f/670fdc41-85b8-493d-9c46-78918856629f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/670fdc41-85b8-493d-9c46-78918856629f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Jan 2026 18:43:49 +0000
Certificate not after:    Thu 13 Apr 2028 17:43:49 +0000
Subordinate resources:    AS: 63309
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:78:73:3c:4b:69:08:83:fd:ec:a2:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan  9 18:43:49 2026 GMT
            Not After : Apr 13 17:43:49 2028 GMT
        Subject: CN=670fdc41-85b8-493d-9c46-78918856629f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:18:d0:b5:c2:f2:52:8a:ca:23:10:4a:e1:
                    82:f4:28:a0:85:f7:ab:b0:35:c6:4a:e3:d7:4f:c1:
                    73:b1:ee:cc:19:9d:ee:6e:72:15:17:3e:90:9e:78:
                    0b:e9:f6:71:cb:ef:e2:7c:21:8a:11:4d:dd:c5:65:
                    12:f8:76:c9:28:00:03:95:a8:c4:2d:15:ad:a9:bf:
                    46:26:b4:f3:72:05:36:e3:ba:06:ef:9e:a4:2d:b3:
                    81:92:3b:09:e5:84:46:6d:10:50:7d:02:63:9c:e6:
                    32:21:14:11:a0:67:4f:82:9b:fb:e6:43:73:23:fc:
                    11:57:28:22:9c:3f:59:11:ec:f2:04:17:ed:b2:41:
                    7c:b4:86:16:9c:38:5c:1d:65:f3:67:c5:03:76:97:
                    08:8a:87:6c:88:70:73:22:83:78:57:4b:57:87:97:
                    75:18:d0:86:b7:46:bb:9a:9b:1a:36:34:55:22:ac:
                    8a:bf:c1:11:12:14:e1:d1:83:65:f0:28:66:83:53:
                    d8:ea:e1:81:28:a8:75:75:96:40:2b:59:e7:fe:a0:
                    13:39:cd:5d:cf:7b:60:20:e8:fe:37:75:fe:64:42:
                    92:3a:ac:fa:a0:39:37:e1:35:7b:4e:ae:6b:c2:0e:
                    3d:f4:b7:b9:40:9c:0d:42:b9:03:97:06:ba:78:22:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:97:CD:35:CB:E8:8D:BF:8B:98:67:C5:06:31:5D:D3:3D:B8:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/670fdc41-85b8-493d-9c46-78918856629f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/670fdc41-85b8-493d-9c46-78918856629f/670fdc41-85b8-493d-9c46-78918856629f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63309

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:aa:87:4f:1c:7a:12:64:76:91:37:81:d1:96:5b:20:6a:
         41:1b:c3:55:7c:0f:b2:fd:4f:7d:22:8d:79:22:9c:5f:06:cf:
         15:0e:3d:59:e5:ec:11:38:a2:06:cb:56:23:f3:8f:0f:52:a6:
         6b:ec:8a:5d:97:99:57:1b:48:9f:25:b4:3f:81:f3:35:9f:cc:
         30:a4:6e:5f:25:1b:eb:34:d5:ea:b6:ca:06:36:cd:07:fc:20:
         09:71:6d:7e:35:76:b5:81:93:e5:b1:55:dc:78:02:d4:11:3b:
         a4:bf:4d:f3:7f:b6:c8:b9:3a:29:3e:f0:bf:7d:27:05:61:68:
         d1:86:86:14:d3:c3:bf:42:a3:c2:45:a3:17:df:dd:72:c4:16:
         bd:0f:94:15:d6:c5:5c:39:2e:14:9b:ba:b4:c4:7c:17:e5:4d:
         67:0f:12:40:87:8c:5a:ed:9e:bb:5a:e2:74:f8:b1:d1:4b:36:
         11:94:a7:da:40:f6:ca:b1:cc:20:14:6e:b8:af:17:34:08:01:
         fc:02:1b:eb:4c:59:c3:14:6b:d6:4c:5d:fb:f1:53:c4:09:b6:
         54:cb:26:2d:6b:95:8a:2b:b1:49:c0:87:e6:6c:fe:91:6f:be:
         a1:f2:d3:0a:9a:75:86:87:9e:2c:1f:a6:c0:ec:19:d6:41:e2:
         0c:2e:00:97
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEx4czxLaQiD/eyiBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI2MDEwOTE4NDM0OVoXDTI4MDQxMzE3NDM0OVowLzEtMCsGA1UEAxMk
NjcwZmRjNDEtODViOC00OTNkLTljNDYtNzg5MTg4NTY2MjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuMY0LXC8lKKyiMQSuGC9CighfersDXGSuPX
T8Fzse7MGZ3ubnIVFz6QnngL6fZxy+/ifCGKEU3dxWUS+HbJKAADlajELRWtqb9G
JrTzcgU247oG756kLbOBkjsJ5YRGbRBQfQJjnOYyIRQRoGdPgpv75kNzI/wRVygi
nD9ZEezyBBftskF8tIYWnDhcHWXzZ8UDdpcIiodsiHBzIoN4V0tXh5d1GNCGt0a7
mpsaNjRVIqyKv8EREhTh0YNl8Chmg1PY6uGBKKh1dZZAK1nn/qATOc1dz3tgIOj+
N3X+ZEKSOqz6oDk34TV7Tq5rwg499Le5QJwNQrkDlwa6eCJTawIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFENHl801y+iNv4uYZ8UGMV3TPbgYMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82
NzBmZGM0MS04NWI4LTQ5M2QtOWM0Ni03ODkxODg1NjYyOWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzY3MGZkYzQxLTg1YjgtNDkzZC05
YzQ2LTc4OTE4ODU2NjI5Zi82NzBmZGM0MS04NWI4LTQ5M2QtOWM0Ni03ODkxODg1
NjYyOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAPdNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIMLqodPHHoSZHaRN4HRllsgakEb
w1V8D7L9T30ijXkinF8GzxUOPVnl7BE4ogbLViPzjw9Spmvsil2XmVcbSJ8ltD+B
8zWfzDCkbl8lG+s01eq2ygY2zQf8IAlxbX41drWBk+WxVdx4AtQRO6S/TfN/tsi5
Oik+8L99JwVhaNGGhhTTw79Co8JFoxff3XLEFr0PlBXWxVw5LhSburTEfBflTWcP
EkCHjFrtnrta4nT4sdFLNhGUp9pA9sqxzCAUbrivFzQIAfwCG+tMWcMUa9ZMXfvx
U8QJtlTLJi1rlYorsUnAh+Zs/pFvvqHy0wqadYaHniwfpsDsGdZB4gwuAJc=
-----END CERTIFICATE-----