This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef.cer
File:                     7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef.cer (raw, json)
Hash identifier:          UkfgGMPx5oJdk3owxgT+3d2HjxjTMU6FMwEF2h/avME=
Subject key identifier:   79:87:D3:BD:B8:34:FC:2F:D8:E4:9F:19:AB:21:53:88:7C:FD:45:4C
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BF649F6CD9875DD4A9B74B000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Nov 2025 03:45:35 +0000
Certificate not after:    Sun 27 Feb 2028 03:45:35 +0000
Subordinate resources:    IP: 23.149.100.0/24
                          IP: 2602:f4d4::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f6:49:f6:cd:98:75:dd:4a:9b:74:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 24 03:45:35 2025 GMT
            Not After : Feb 27 03:45:35 2028 GMT
        Subject: CN=7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:97:3a:8e:c1:e0:22:02:cc:a2:5e:28:98:
                    4a:2b:c8:5f:96:ad:89:f9:c7:56:85:fb:83:cf:25:
                    4f:f3:01:aa:59:ad:48:fc:23:b0:ca:b6:98:ef:16:
                    94:07:94:79:d6:30:a3:8c:8d:cf:8b:0a:73:a6:0f:
                    28:43:35:94:1a:fa:72:f0:78:eb:1f:50:be:1d:9e:
                    88:ad:b5:3c:5d:98:c8:8e:1f:15:ab:48:bc:df:bf:
                    5f:03:30:b5:c2:c3:6b:5d:5e:ab:28:52:61:3b:63:
                    cf:10:0a:c4:5b:0a:23:b0:bc:50:3d:78:86:68:51:
                    84:1f:7d:5b:8d:f4:d6:c8:d9:2d:1f:ae:1d:eb:9b:
                    c1:38:27:2e:80:5f:65:e9:7f:ff:b8:3b:ce:f5:ee:
                    fb:7c:6a:a5:0c:8f:f0:30:27:44:2f:d0:8a:bc:7b:
                    07:10:85:0d:08:ac:7e:94:8f:a1:06:75:5f:dc:f0:
                    24:5c:86:16:d1:0f:5d:78:c5:5c:eb:41:ca:52:45:
                    a9:40:55:bc:44:bd:3e:c5:7a:24:04:54:9b:45:1a:
                    ec:56:bc:24:38:56:6d:0c:e9:b4:89:88:f8:b6:da:
                    92:6a:3b:70:c1:b4:29:5c:5c:c4:41:22:ac:d2:c1:
                    f4:62:27:48:45:5c:11:0a:d2:f3:29:da:d8:48:d5:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:D3:BD:B8:34:FC:2F:D8:E4:9F:19:AB:21:53:88:7C:FD:45:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef/7b6debd1-c3fb-474a-9c43-c50aa9e1e3ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.100.0/24
                IPv6:
                  2602:f4d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:a5:81:1e:40:4c:15:08:da:66:50:12:ec:63:6b:2c:cc:
         95:44:d1:70:67:55:8c:3e:8f:ff:a2:cb:bc:5e:47:9c:de:9e:
         61:c1:8f:db:57:9f:ab:f8:65:98:85:04:f6:d3:74:2b:af:43:
         60:2d:8e:be:0a:7d:34:43:d7:9a:b8:29:73:ba:8a:b8:ba:b4:
         38:46:89:9a:c2:ff:a3:9c:f7:cc:6a:5e:15:79:cd:66:a4:c6:
         91:55:67:b1:94:24:8b:d2:3b:ef:9a:37:cb:a8:f5:b0:ed:42:
         14:98:1d:00:c3:fd:7d:31:c7:89:cd:66:3a:71:34:a0:01:1c:
         f5:bf:13:07:0d:6d:e8:79:69:fd:50:95:bb:10:91:48:fb:4e:
         eb:9a:a7:3d:64:5e:d6:66:2b:4c:9d:7e:e7:55:06:a9:63:47:
         78:71:80:b7:28:1f:30:2f:53:48:e1:e4:27:43:f1:8f:21:76:
         08:00:db:79:df:9d:c2:09:75:66:7a:4b:a1:92:9a:ad:8f:3c:
         56:51:77:bd:4e:8a:0c:84:26:c4:d2:c0:5a:7b:5f:19:12:1f:
         68:8c:b5:da:87:c5:3d:bf:87:e4:f3:9e:c1:53:a1:7c:ae:91:
         ef:37:39:e5:94:b7:4f:01:ae:ec:67:16:d5:bd:7b:24:7f:e7:
         8f:f2:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:41 2025 by rpki-client