This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73f713fc-8257-475a-9eb9-521b4eef168d.cer
File:                     73f713fc-8257-475a-9eb9-521b4eef168d.cer (raw, json)
Hash identifier:          Awr4nt4Z1pNs2UkI4w928WJbUEKf2oRyARIrDgFCZp8=
Subject key identifier:   C0:B5:8F:A8:49:1C:D7:22:9F:13:91:2A:4B:08:F9:17:69:4F:42:64
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BD682B6042749C46E3234B580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73f713fc-8257-475a-9eb9-521b4eef168d/73f713fc-8257-475a-9eb9-521b4eef168d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73f713fc-8257-475a-9eb9-521b4eef168d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 18:34:03 +0000
Certificate not after:    Tue 15 Feb 2028 18:34:03 +0000
Subordinate resources:    IP: 131.143.8.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:82:b6:04:27:49:c4:6e:32:34:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 12 18:34:03 2025 GMT
            Not After : Feb 15 18:34:03 2028 GMT
        Subject: CN=73f713fc-8257-475a-9eb9-521b4eef168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:07:83:d6:1f:ef:e8:01:47:91:66:e7:9b:
                    8c:99:9b:0b:e3:9d:91:bc:dc:e0:66:bd:10:66:d9:
                    26:63:9c:0e:29:e3:78:d5:2e:77:67:57:61:63:da:
                    e0:29:7b:86:71:bc:4a:fc:76:9a:b9:64:c2:8d:04:
                    54:96:86:ee:d9:1c:62:12:2b:bd:49:ff:0d:3e:d8:
                    48:1e:ee:18:05:be:60:38:a6:76:84:c2:be:72:72:
                    b8:2f:34:57:91:1b:d9:7f:be:77:e0:de:73:e3:53:
                    cb:a5:f5:92:86:e0:d9:f1:64:93:4e:8a:4f:98:af:
                    a0:80:df:c6:99:18:d0:63:0f:c6:6c:fe:11:77:28:
                    1b:ff:f4:49:48:9d:46:34:80:5d:41:f7:71:ae:2c:
                    84:b4:7f:5f:2e:5b:9c:22:e2:12:69:5f:4f:c8:a4:
                    c5:49:b2:c7:70:05:b2:d1:75:d3:42:f1:d2:9f:c8:
                    60:ce:fa:6f:2d:d9:84:b6:da:56:4c:80:04:61:f5:
                    91:3c:65:93:7a:d7:b7:c8:0c:5b:00:7e:38:18:98:
                    47:11:15:79:c1:01:45:e1:1b:69:55:8e:e2:c0:30:
                    fe:d3:6b:15:d0:d7:b0:bf:bc:d0:42:f7:cb:c3:fe:
                    87:fd:6e:78:a3:b1:c2:28:a4:3d:dc:b5:71:78:96:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B5:8F:A8:49:1C:D7:22:9F:13:91:2A:4B:08:F9:17:69:4F:42:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73f713fc-8257-475a-9eb9-521b4eef168d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73f713fc-8257-475a-9eb9-521b4eef168d/73f713fc-8257-475a-9eb9-521b4eef168d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:66:af:6e:89:1b:1d:de:be:f0:b7:c8:25:a6:f3:ed:27:f9:
         fd:42:2b:29:82:32:d7:bf:1e:40:53:c6:15:ef:50:be:0f:f5:
         13:1a:44:59:71:98:48:4e:20:94:28:89:1c:b8:24:ff:0e:62:
         29:5c:2f:68:45:11:59:ff:61:7a:c6:2a:0d:31:44:bb:d2:93:
         30:f9:05:96:38:f5:4e:c9:88:a8:99:71:ed:88:71:71:4f:e0:
         af:ae:b9:93:6d:55:c5:65:a8:bd:e7:54:22:4d:48:b7:f2:54:
         70:a1:00:c8:52:56:95:d2:65:8d:62:ec:71:13:69:e6:e9:8c:
         1c:30:4c:b9:1e:04:83:4f:83:e1:56:07:44:c8:29:7c:2b:d5:
         15:88:a3:d9:52:2d:06:e8:f4:3c:06:8a:19:34:13:32:b5:2f:
         7c:42:13:d7:76:22:63:e4:42:62:a9:9e:f5:d3:b4:c3:d0:fc:
         07:ca:e2:69:9f:d9:cf:42:ba:6d:9c:3c:be:b2:ac:ea:50:1b:
         cf:86:be:45:06:6a:09:6f:a3:88:4b:ba:99:91:1b:ee:47:13:
         f3:c1:50:d4:63:d6:dd:e1:66:d7:c5:4d:22:6d:b0:e1:92:98:
         38:77:46:9e:04:57:6d:b5:73:18:0a:ca:54:7c:00:6f:52:ab:
         83:10:91:a9
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvWgrYEJ0nEbjI0tYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTExMjE4MzQwM1oXDTI4MDIxNTE4MzQwM1owLzEtMCsGA1UEAxMk
NzNmNzEzZmMtODI1Ny00NzVhLTllYjktNTIxYjRlZWYxNjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI4Hg9Yf7+gBR5Fm55uMmZsL452RvNzgZr0Q
ZtkmY5wOKeN41S53Z1dhY9rgKXuGcbxK/HaauWTCjQRUlobu2RxiEiu9Sf8NPthI
Hu4YBb5gOKZ2hMK+cnK4LzRXkRvZf7534N5z41PLpfWShuDZ8WSTTopPmK+ggN/G
mRjQYw/GbP4Rdygb//RJSJ1GNIBdQfdxriyEtH9fLlucIuISaV9PyKTFSbLHcAWy
0XXTQvHSn8hgzvpvLdmEttpWTIAEYfWRPGWTete3yAxbAH44GJhHERV5wQFF4Rtp
VY7iwDD+02sV0Newv7zQQvfLw/6H/W54o7HCKKQ93LVxeJbkWQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFMC1j6hJHNcinxORKksI+RdpT0JkMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83
M2Y3MTNmYy04MjU3LTQ3NWEtOWViOS01MjFiNGVlZjE2OGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzczZjcxM2ZjLTgyNTctNDc1YS05
ZWI5LTUyMWI0ZWVmMTY4ZC83M2Y3MTNmYy04MjU3LTQ3NWEtOWViOS01MjFiNGVl
ZjE2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDjwgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGGavbokbHd6+8LfIJabz
7Sf5/UIrKYIy178eQFPGFe9Qvg/1ExpEWXGYSE4glCiJHLgk/w5iKVwvaEURWf9h
esYqDTFEu9KTMPkFljj1TsmIqJlx7YhxcU/gr665k21VxWWovedUIk1It/JUcKEA
yFJWldJljWLscRNp5umMHDBMuR4Eg0+D4VYHRMgpfCvVFYij2VItBuj0PAaKGTQT
MrUvfEIT13YiY+RCYqme9dO0w9D8B8riaZ/Zz0K6bZw8vrKs6lAbz4a+RQZqCW+j
iEu6mZEb7kcT88FQ1GPW3eFm18VNIm2w4ZKYOHdGngRXbbVzGArKVHwAb1KrgxCR
qQ==
-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:58 2025 by rpki-client