This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer
File:                     98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer (raw, json)
Hash identifier:          vRYi5VHw5yC93xH0a2gqtgDKYzZ0WZtEjwPUyG1VrlU=
Subject key identifier:   34:AD:46:B4:D3:2F:57:24:80:23:A9:28:49:2F:B0:61:CE:E5:FD:97
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BD1EAF1A564F4ED013E5FD980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Nov 2025 03:05:02 +0000
Certificate not after:    Mon 14 Feb 2028 03:05:02 +0000
Subordinate resources:    IP: 131.143.120.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d1:ea:f1:a5:64:f4:ed:01:3e:5f:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 11 03:05:02 2025 GMT
            Not After : Feb 14 03:05:02 2028 GMT
        Subject: CN=98bb1a5e-296b-4265-806f-5bfbd7773fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:e1:fa:64:17:62:ca:c0:63:69:de:62:81:
                    68:00:7c:49:ba:f9:5c:94:4e:d1:13:9e:06:0a:78:
                    be:05:49:44:18:07:fa:6a:0b:73:51:94:e6:ea:91:
                    23:3a:d8:2c:55:da:c6:c3:9c:9b:77:42:63:23:11:
                    c5:17:d9:81:14:31:c1:17:32:09:2a:c7:f9:97:a4:
                    69:a1:3c:f8:14:d0:fd:b6:1a:0c:a4:a7:e0:f9:10:
                    9a:48:c5:5c:e7:a5:cc:9d:0b:50:59:3a:d3:76:5f:
                    9d:08:b0:c0:ce:b7:fb:0c:f3:32:97:ec:b8:b6:8d:
                    4c:a3:0b:e9:04:6a:93:22:90:c9:df:a3:c8:60:f4:
                    70:ca:c4:d1:6b:cb:8a:c8:e7:b9:de:71:32:8b:66:
                    52:64:4e:f4:0a:f2:47:84:24:6a:e3:08:90:0b:df:
                    52:d6:01:c3:0d:0e:a1:e8:0d:87:93:39:fa:d9:11:
                    94:cc:37:70:17:71:67:ab:26:44:af:e0:d5:f2:16:
                    44:f8:cf:27:44:91:6e:95:88:3c:2c:17:07:59:a2:
                    33:72:4d:eb:6b:ec:d0:23:f2:67:19:3b:9f:af:13:
                    16:5e:b0:47:3c:1e:5d:b3:8c:46:c0:e0:87:d0:24:
                    23:05:61:83:ab:d4:9e:ba:28:02:d8:0f:16:b2:97:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AD:46:B4:D3:2F:57:24:80:23:A9:28:49:2F:B0:61:CE:E5:FD:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:50:09:6c:a0:37:91:04:3a:8e:4e:f5:81:d3:5d:0d:3f:a5:
         94:15:7e:c8:a4:9f:0c:df:73:cf:fe:0f:53:46:09:4d:4e:65:
         f0:6e:ab:87:a6:57:1b:5f:42:ef:89:5f:39:5f:ab:a8:6c:a7:
         7b:24:06:63:11:5e:c1:13:29:80:fa:99:55:bb:68:e1:5d:17:
         b2:d2:70:2e:44:7f:b6:37:db:17:ce:9c:04:c3:40:12:43:d4:
         a5:73:e6:c0:66:17:2e:b9:5d:5c:5c:23:2d:67:61:79:9f:3f:
         74:0d:09:fd:1f:dc:f1:85:22:a7:e8:1f:06:ee:2f:23:85:d2:
         45:87:3f:8c:3f:17:d1:db:f5:b9:ca:82:d3:60:12:62:2c:f7:
         ef:6e:95:80:47:a6:a5:ac:1b:d6:ef:f8:43:84:60:fb:f4:53:
         4f:ff:0b:4a:17:58:0a:ed:28:a5:99:33:7c:75:2a:ac:2f:0a:
         37:2d:05:8f:aa:5b:9c:77:04:cb:d5:30:e8:27:e7:ce:a8:ad:
         90:43:d0:1b:9e:37:dd:7f:94:7d:69:9b:d8:04:de:87:dd:19:
         19:2f:ff:d8:5a:7f:68:d3:6b:20:78:c7:37:1c:db:64:30:78:
         1f:87:77:cc:f0:4b:19:f4:f1:6f:e8:68:ff:31:1c:4f:81:61:
         16:e0:c4:18
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvR6vGlZPTtAT5f2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTExMTAzMDUwMloXDTI4MDIxNDAzMDUwMlowLzEtMCsGA1UEAxMk
OThiYjFhNWUtMjk2Yi00MjY1LTgwNmYtNWJmYmQ3NzczZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkDh+mQXYsrAY2neYoFoAHxJuvlclE7RE54G
Cni+BUlEGAf6agtzUZTm6pEjOtgsVdrGw5ybd0JjIxHFF9mBFDHBFzIJKsf5l6Rp
oTz4FND9thoMpKfg+RCaSMVc56XMnQtQWTrTdl+dCLDAzrf7DPMyl+y4to1Mowvp
BGqTIpDJ36PIYPRwysTRa8uKyOe53nEyi2ZSZE70CvJHhCRq4wiQC99S1gHDDQ6h
6A2Hkzn62RGUzDdwF3FnqyZEr+DV8hZE+M8nRJFulYg8LBcHWaIzck3ra+zQI/Jn
GTufrxMWXrBHPB5ds4xGwOCH0CQjBWGDq9SeuigC2A8WspcApQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFDStRrTTL1ckgCOpKEkvsGHO5f2XMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85
OGJiMWE1ZS0yOTZiLTQyNjUtODA2Zi01YmZiZDc3NzNmYjcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk4YmIxYTVlLTI5NmItNDI2NS04
MDZmLTViZmJkNzc3M2ZiNy85OGJiMWE1ZS0yOTZiLTQyNjUtODA2Zi01YmZiZDc3
NzNmYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDj3gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZFAJbKA3kQQ6jk71gdNd
DT+llBV+yKSfDN9zz/4PU0YJTU5l8G6rh6ZXG19C74lfOV+rqGyneyQGYxFewRMp
gPqZVbto4V0XstJwLkR/tjfbF86cBMNAEkPUpXPmwGYXLrldXFwjLWdheZ8/dA0J
/R/c8YUip+gfBu4vI4XSRYc/jD8X0dv1ucqC02ASYiz3726VgEempawb1u/4Q4Rg
+/RTT/8LShdYCu0opZkzfHUqrC8KNy0Fj6pbnHcEy9Uw6CfnzqitkEPQG5433X+U
fWmb2ATeh90ZGS//2Fp/aNNrIHjHNxzbZDB4H4d3zPBLGfTxb+ho/zEcT4FhFuDE
GA==
-----END CERTIFICATE-----