This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer
File:                     7659d706-fdf7-4c2e-8e41-352e9090b48c.cer (raw, json)
Hash identifier:          iPUU+JsPSnWDUmH4NWN2kbiD1Q3HY7FZxprVkraBzLA=
Subject key identifier:   5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584B96B7466B694F9083FD22E000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Oct 2025 22:08:14 +0000
Certificate not after:    Sun 23 Jan 2028 23:08:14 +0000
Subordinate resources:    AS: 402070
                          IP: 131.143.91.0/24
                          IP: 2602:f523::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:b7:46:6b:69:4f:90:83:fd:22:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 20 22:08:14 2025 GMT
            Not After : Jan 23 23:08:14 2028 GMT
        Subject: CN=7659d706-fdf7-4c2e-8e41-352e9090b48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:5c:31:f8:ba:ea:ec:34:67:f2:d4:0d:af:
                    63:80:1d:76:2d:f4:91:ec:8c:e0:55:30:cb:1e:7b:
                    40:53:5c:91:68:c2:35:9c:bf:ef:5d:19:e5:a3:f9:
                    4c:f7:dc:1a:f8:b4:51:4c:33:68:3a:e0:4e:dd:51:
                    d4:d9:bd:42:6b:5e:ca:3c:7f:b4:32:3e:2c:9c:9d:
                    9b:60:25:ff:70:8c:2e:94:86:ea:fb:87:02:18:b6:
                    fc:71:56:d2:60:a3:9b:22:a8:ee:45:b6:59:18:57:
                    b5:6b:82:98:b3:a8:fe:d6:a1:3a:6d:80:ff:f2:ba:
                    ef:63:82:54:9e:ac:4b:e9:62:cc:bc:ef:0a:52:38:
                    80:c9:1b:53:f3:00:ce:d9:f6:bb:55:21:ea:56:57:
                    7f:c5:dd:a2:52:3b:63:90:84:fd:a2:b2:0b:8a:9a:
                    d9:47:96:ec:b6:e9:8b:19:71:ec:be:bb:0f:7a:b0:
                    37:f0:3a:b0:9a:84:05:9f:35:24:9b:1f:35:24:a1:
                    02:5f:79:96:ac:c2:a6:e9:56:a6:2b:45:81:b9:dc:
                    e9:76:d9:33:a2:57:a7:91:b0:43:96:d6:2f:6b:57:
                    d5:fe:a0:2c:c7:8d:a8:92:10:59:80:17:4f:1c:32:
                    0b:60:27:1a:9f:cd:f3:46:eb:07:32:a6:20:36:65:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.91.0/24
                IPv6:
                  2602:f523::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402070

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:13:72:68:86:48:c2:6a:7b:50:e7:49:7f:ee:69:33:b8:a4:
         b0:52:a8:4a:d7:a5:0d:e0:35:86:15:fa:ed:02:77:bd:64:9a:
         fd:92:eb:0e:98:c8:56:f1:31:ee:ee:fd:b9:f8:f9:18:47:7c:
         a8:a4:47:d9:2a:16:eb:3a:11:43:38:03:4e:8f:cc:6f:e5:48:
         dc:1c:7b:c9:9a:f8:d7:16:1b:b3:77:20:a5:fa:6c:6c:96:f7:
         13:ea:c9:d2:61:1e:e9:3f:54:05:9d:1f:cf:83:0d:21:13:e3:
         c1:20:66:37:0b:22:38:5b:48:c1:27:d2:77:ce:0c:d4:9f:65:
         55:f8:84:6b:75:96:30:85:64:a2:87:af:99:d2:ad:0d:1c:46:
         76:78:83:2d:6d:06:96:e9:18:d1:7b:9c:6a:9d:57:f1:91:a5:
         b9:d9:22:bb:7d:35:02:5d:de:c6:af:fc:7f:5b:bd:2d:9a:10:
         75:3b:57:cf:a2:35:89:16:ad:2f:81:55:7c:20:03:fb:63:a0:
         88:17:1f:f1:53:6f:33:e5:c3:a4:31:46:94:11:8b:ff:76:22:
         ca:7f:73:7a:74:1e:35:36:d1:79:c2:90:a9:ff:04:e6:42:a3:
         09:8c:f2:84:27:12:96:ff:77:ec:35:6a:2f:7d:fe:f2:62:94:
         69:5e:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:51 2025 by rpki-client