This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3.cer
File:                     89871cf9-6e6f-48f5-97f2-35e8676b70b3.cer (raw, json)
Hash identifier:          mJIrYaxHZu6n102rji4kGHaOjcwNkQP5MQaUISEE73Q=
Subject key identifier:   BB:20:62:40:CA:2F:5B:C4:63:AD:4C:F1:8C:A6:B9:8F:83:13:C7:53
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BF88BBA35B62EE5C42B595500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Nov 2025 23:09:42 +0000
Certificate not after:    Sun 27 Feb 2028 23:09:42 +0000
Subordinate resources:    AS: 30685
                          IP: 192.30.62.0/23
                          IP: 2602:fdd5::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:8b:ba:35:b6:2e:e5:c4:2b:59:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 24 23:09:42 2025 GMT
            Not After : Feb 27 23:09:42 2028 GMT
        Subject: CN=89871cf9-6e6f-48f5-97f2-35e8676b70b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:e3:9b:4b:ba:b9:d9:9e:b3:4e:b6:d7:a6:
                    c2:75:a0:9a:9d:2c:3d:d8:36:42:8f:c2:1b:6b:17:
                    30:4e:e9:d9:ee:e5:e2:f5:f3:64:d4:c2:e3:7a:7d:
                    48:e6:55:b3:58:e0:30:d8:b1:30:ca:4d:3c:db:04:
                    83:63:d1:a9:9a:19:42:2e:58:b8:4f:76:9a:7a:79:
                    77:fc:2d:e4:80:be:e1:b2:b1:ed:74:de:cf:21:b1:
                    04:b5:85:0d:c7:6e:6a:70:22:b1:6d:67:4d:10:d9:
                    d1:6f:c0:66:b7:b9:dd:dc:de:dc:4e:01:c0:b5:3b:
                    63:88:5b:82:50:88:36:53:62:ae:ea:22:50:2d:7e:
                    ad:eb:81:db:c2:05:e1:e5:12:18:7b:0a:8d:c1:b2:
                    b9:3d:94:85:cf:a6:42:42:f4:fc:57:e1:79:c2:74:
                    35:66:c2:b5:6d:87:39:d8:bf:40:1f:93:07:5b:0d:
                    49:05:28:fc:fc:0d:54:ce:2b:b1:76:46:07:b7:7d:
                    1c:0c:51:99:42:bb:42:c6:de:18:5b:a3:5d:18:c3:
                    dd:18:e5:7c:01:9a:5e:fc:17:19:87:da:60:f9:8d:
                    30:14:9f:3d:0b:0f:13:19:06:34:62:7b:25:3e:59:
                    22:75:63:9d:0a:7b:c3:ae:02:b5:0a:09:1e:4d:a5:
                    bf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:20:62:40:CA:2F:5B:C4:63:AD:4C:F1:8C:A6:B9:8F:83:13:C7:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89871cf9-6e6f-48f5-97f2-35e8676b70b3/89871cf9-6e6f-48f5-97f2-35e8676b70b3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.62.0/23
                IPv6:
                  2602:fdd5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30685

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:ac:1f:f2:77:62:5f:07:d8:ab:b5:9e:d4:ba:00:99:76:
         b5:60:84:d4:ae:cb:74:78:cf:88:a6:ff:f2:5b:f8:60:c2:6d:
         4a:2a:ad:24:84:1c:f0:0d:54:ca:6b:9c:63:4d:f0:13:eb:fc:
         5c:01:ad:dd:4c:4e:28:ad:91:ea:7f:f3:8b:46:2c:78:03:f1:
         1a:3e:0e:2c:b0:88:e8:22:59:09:83:da:c0:e7:63:75:2d:f5:
         2a:91:18:ed:29:31:a5:76:7f:7e:09:b1:41:03:69:91:00:10:
         e9:3a:fa:ab:d0:4b:d6:47:37:6b:07:73:6e:2b:1d:f4:27:9b:
         c2:bf:67:52:fa:d3:42:bf:14:15:3e:4a:28:d9:61:e9:0c:19:
         91:c4:de:97:66:80:dc:1f:60:e7:94:63:56:12:f6:be:3f:18:
         54:6c:13:4c:1f:0e:30:e1:51:f1:74:7d:b1:bf:0a:57:fa:13:
         3f:3e:4d:df:4a:04:a9:31:87:bf:14:c7:e9:cc:f2:38:b7:b5:
         43:1c:18:c2:3d:5b:dd:04:80:c4:05:82:dc:f2:70:2c:41:b9:
         e1:46:3f:ca:85:03:52:ea:c6:04:5f:2f:8f:85:e0:e3:d6:0d:
         80:49:ff:26:b5:71:b0:dd:0f:86:37:9e:63:9a:a1:88:22:a0:
         7c:ba:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:46 2025 by rpki-client