This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dd54a66-f59d-4277-8991-4ca518479423.cer
File:                     9dd54a66-f59d-4277-8991-4ca518479423.cer (raw, json)
Hash identifier:          ebTUc/U85cJcOmJvrX7yrsyqSdDXg1TNpSAfrPJ9vFo=
Subject key identifier:   A1:26:C5:6B:50:CD:B3:D0:B2:61:B0:77:B5:9A:AC:C9:B0:31:18:84
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BE572F71E42377F9E29A8DF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dd54a66-f59d-4277-8991-4ca518479423/9dd54a66-f59d-4277-8991-4ca518479423.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dd54a66-f59d-4277-8991-4ca518479423/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 02:59:27 +0000
Certificate not after:    Mon 21 Feb 2028 02:59:27 +0000
Subordinate resources:    AS: 32215
                          IP: 204.154.122.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e5:72:f7:1e:42:37:7f:9e:29:a8:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 18 02:59:27 2025 GMT
            Not After : Feb 21 02:59:27 2028 GMT
        Subject: CN=9dd54a66-f59d-4277-8991-4ca518479423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:5b:65:ef:c5:c7:d8:3c:f0:a9:e1:d2:d1:
                    03:65:bc:34:1c:02:70:85:d3:b1:d3:2d:eb:3d:91:
                    80:8a:9a:eb:91:e8:c9:84:fb:6c:d7:d7:ca:90:6b:
                    f2:60:3a:c2:c8:73:aa:3f:69:35:e0:f5:dd:c5:1a:
                    13:75:df:cc:40:da:e4:89:d3:bb:ef:aa:d7:bf:b1:
                    10:ad:65:98:fa:55:2a:27:ff:41:fa:42:2d:f5:c5:
                    64:4b:bb:22:fc:a7:3e:a8:8f:fd:1f:b9:95:5b:1b:
                    e7:1e:ef:98:7a:3f:22:03:3f:c0:42:13:43:6d:1c:
                    8a:0b:0a:60:9f:ca:b3:84:7c:5d:6a:55:39:9e:d4:
                    c2:10:b4:27:5a:a4:7a:e1:79:ae:e7:19:07:b5:28:
                    47:7d:86:9c:78:d9:9f:92:b8:65:e5:17:42:33:4d:
                    92:ce:32:82:aa:c1:f6:70:e0:e3:f8:94:15:27:08:
                    23:d7:39:21:89:64:84:92:2c:d2:7a:64:cb:2a:e6:
                    3b:89:bf:ec:67:e6:5e:22:9b:3d:6e:f4:d9:58:d0:
                    1a:82:f6:b8:c1:8f:20:4c:99:1a:13:b8:08:db:65:
                    30:a7:dd:b7:6f:75:0e:f8:94:f4:48:98:ce:d2:73:
                    82:77:af:07:a7:e5:b9:da:5f:01:fa:7d:56:d2:03:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:C5:6B:50:CD:B3:D0:B2:61:B0:77:B5:9A:AC:C9:B0:31:18:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dd54a66-f59d-4277-8991-4ca518479423/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dd54a66-f59d-4277-8991-4ca518479423/9dd54a66-f59d-4277-8991-4ca518479423.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.122.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32215

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6d:34:25:fa:d4:8c:25:76:7f:2a:5f:73:c3:7b:de:f9:90:
         e3:1d:41:1d:2f:a1:d3:f3:8d:99:8f:cc:01:74:27:ca:23:ee:
         ec:83:09:81:26:10:2a:19:b7:72:7c:b6:2b:02:e1:8d:e5:d2:
         9e:ce:32:2f:cf:ec:21:91:79:12:99:9f:90:e0:bf:bc:64:a0:
         3e:e8:a7:4a:d9:a3:f0:95:40:58:10:a2:77:26:4a:4e:6d:a1:
         7c:36:dc:61:4b:26:17:8b:af:f3:de:c5:70:a7:11:4c:fa:89:
         87:07:0b:49:8d:a2:54:09:aa:bb:75:89:10:f5:67:13:07:79:
         58:d1:fb:34:8f:a5:16:e0:ce:fc:e3:60:f6:c2:16:66:a5:aa:
         61:f5:ff:25:66:8c:d5:48:d0:f6:33:2e:7b:69:dd:f4:79:77:
         50:a2:0c:a7:e3:f8:86:dd:8e:5e:6a:6a:d4:19:fe:29:4a:05:
         71:6c:71:e7:6b:1b:bb:5f:11:50:77:a0:1a:cb:1a:74:60:6e:
         c7:f4:da:d8:c5:4f:00:fa:67:8e:6d:f5:d0:5e:b9:17:88:b7:
         48:79:6b:62:c0:40:e3:20:8b:68:68:99:a6:37:7b:06:7c:7c:
         21:5c:fa:dc:0f:d2:b4:c6:43:24:38:a3:ab:d9:d5:28:a0:2d:
         c0:ef:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----