This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
File:                     7834df4e-1d40-4a3e-b949-220f86329057.cer (raw, json)
Hash identifier:          wUUeRgHQ28Lh/SbP9CtGAZJBuklOZ3ZLDvouuh0ZB7U=
Subject key identifier:   F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C635459E775A7F8610CBEC180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 05:09:37 +0000
Certificate not after:    Thu 06 Apr 2028 04:09:37 +0000
Subordinate resources:    AS: 402102
                          IP: 23.151.252.0/24
                          IP: 2602:f47f::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:63:54:59:e7:75:a7:f8:61:0c:be:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan  2 05:09:37 2026 GMT
            Not After : Apr  6 04:09:37 2028 GMT
        Subject: CN=7834df4e-1d40-4a3e-b949-220f86329057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:9d:da:e1:77:3e:34:2c:b4:d4:a8:3d:53:
                    15:5b:38:20:77:55:c9:e3:73:45:65:66:56:91:d4:
                    b3:33:82:a0:71:e9:a0:3f:cf:bd:2f:e0:61:b3:95:
                    f4:d0:87:4f:54:ff:c4:2a:e0:d9:0a:4f:9c:a1:16:
                    0c:a2:73:bb:92:5f:c2:06:22:37:b4:6b:d7:2e:3b:
                    f3:3d:23:82:07:c5:9b:df:ab:b8:64:a8:34:c6:8f:
                    a3:01:ec:9d:75:7c:ee:61:05:85:ce:d2:8a:77:41:
                    51:27:ce:54:3a:6f:0c:8c:d2:37:83:b3:a0:02:a4:
                    d0:cc:63:3b:31:3b:8c:da:e6:d7:4b:4a:f3:39:ed:
                    c2:38:9e:c6:c0:3a:60:ed:25:fb:e6:7e:99:25:bc:
                    70:83:d7:86:17:0e:9e:19:6c:91:90:e3:e8:9d:64:
                    fe:75:ac:9f:9c:e5:31:e3:63:56:c9:97:6e:1b:44:
                    45:3e:69:ef:6c:d1:4e:48:70:32:24:8d:0b:02:c4:
                    3f:67:71:d1:cc:e3:d4:14:9d:82:a2:4e:c3:49:37:
                    2e:2d:24:c7:9f:8b:3d:54:8c:ea:19:7d:ab:23:d4:
                    df:f6:72:38:87:a4:c6:2b:be:3f:da:fc:e6:bb:b1:
                    3f:73:6d:9f:75:90:1b:84:46:66:90:16:9c:4f:4e:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.252.0/24
                IPv6:
                  2602:f47f::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402102

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:22:ee:26:ca:04:f0:20:c3:90:e4:55:61:c2:cd:e6:ed:a2:
         fe:8f:93:84:8e:ba:30:dd:c0:33:9f:ea:34:01:68:9f:93:90:
         cf:15:36:ce:50:d4:23:20:c3:77:78:2c:f9:46:83:a3:8f:4f:
         b5:e3:d6:68:a0:7c:49:6b:34:39:9f:af:ca:8c:97:3f:e0:e2:
         fe:b6:ac:e4:7c:4c:e1:27:d7:da:6a:77:b3:e6:9e:a0:ed:03:
         71:3b:3f:11:3e:be:2c:b7:82:a6:8a:44:94:40:0a:14:03:1b:
         e6:cd:be:39:a4:62:ca:ba:99:64:31:5d:5a:d6:67:0b:b4:0d:
         38:50:61:18:d3:39:2a:f3:a0:8c:c6:fb:45:e9:9c:c9:9b:fc:
         52:37:25:ca:7c:f9:c4:22:8a:c5:43:ba:d5:83:b5:ec:9e:0b:
         79:ef:3f:f0:76:e6:a6:b5:90:28:68:4f:c4:a6:33:5c:77:ce:
         aa:b4:34:5e:45:1f:f4:9d:9f:7c:2f:2a:76:36:4c:00:d9:d0:
         c4:6d:d8:12:89:89:1f:15:b0:34:25:c5:ed:e0:f2:10:67:35:
         b0:0d:e7:6d:c6:ce:f3:1e:66:13:32:6d:6c:e5:bb:ab:76:59:
         53:16:57:12:35:ff:25:5b:bf:11:69:17:e3:7e:1f:ef:d0:b5:
         03:58:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:24:31 2026 by rpki-client