This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f0efaf3-a09a-418e-a337-16e900bba6cf.cer
File:                     9f0efaf3-a09a-418e-a337-16e900bba6cf.cer (raw, json)
Hash identifier:          eywro1tP8xVtqyyQYrmTct4gjCAS8dPPHiqOWTsH+Vs=
Subject key identifier:   A7:FD:2F:00:DE:E9:6B:7D:56:CD:90:CA:57:3D:37:60:13:4E:9D:25
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BC80B5A3FAB5F49B21D48D480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f0efaf3-a09a-418e-a337-16e900bba6cf/9f0efaf3-a09a-418e-a337-16e900bba6cf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f0efaf3-a09a-418e-a337-16e900bba6cf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Nov 2025 14:12:15 +0000
Certificate not after:    Thu 10 Feb 2028 14:12:15 +0000
Subordinate resources:    AS: 13975
                          IP: 207.90.250.0/24
                          IP: 2602:fba5::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c8:0b:5a:3f:ab:5f:49:b2:1d:48:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov  7 14:12:15 2025 GMT
            Not After : Feb 10 14:12:15 2028 GMT
        Subject: CN=9f0efaf3-a09a-418e-a337-16e900bba6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:23:57:9d:69:e2:a5:f0:88:44:36:8e:ae:
                    68:ec:e3:83:a7:55:b9:8c:d0:59:87:84:c6:65:da:
                    1f:8b:03:58:90:3c:b2:bb:e5:c1:bb:02:6d:07:a4:
                    b8:69:8b:be:53:21:37:07:c4:f1:96:bc:22:52:0e:
                    74:eb:0f:3b:cb:2b:52:e8:9f:e2:63:78:a9:1f:36:
                    6e:af:35:09:2b:84:c5:78:83:a0:10:f3:05:fd:7e:
                    86:2d:90:aa:30:8d:4c:bc:8a:a4:88:27:84:5f:6e:
                    99:f5:d3:3f:a0:e6:9f:05:8e:a0:2d:76:3f:4c:64:
                    b5:fc:b7:a0:8e:ad:fb:f2:6c:8e:b0:ea:69:84:dc:
                    12:ed:ec:13:b3:4e:9e:53:03:42:20:fc:7e:17:0a:
                    82:96:f5:db:ec:b1:0d:3d:9c:65:c2:8e:3d:3f:1f:
                    c9:71:f0:2c:54:51:39:7f:cd:4c:99:b3:0b:9f:0f:
                    01:ab:30:c1:26:56:0e:44:67:b5:f1:1f:dc:01:e3:
                    44:b5:a4:15:51:c2:89:cb:c0:63:a7:01:b3:f1:b2:
                    a4:34:30:76:14:3a:ac:2f:5e:9d:6d:74:54:05:da:
                    5f:d3:ac:48:0f:d1:48:db:05:cd:3b:38:42:ed:eb:
                    85:9e:5e:96:db:40:59:89:ab:db:98:17:48:95:b2:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:2F:00:DE:E9:6B:7D:56:CD:90:CA:57:3D:37:60:13:4E:9D:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f0efaf3-a09a-418e-a337-16e900bba6cf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f0efaf3-a09a-418e-a337-16e900bba6cf/9f0efaf3-a09a-418e-a337-16e900bba6cf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.250.0/24
                IPv6:
                  2602:fba5::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13975

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:78:d2:54:fc:ba:8d:99:a6:96:d1:86:af:04:c0:b6:1f:c8:
         e8:37:14:62:41:80:d9:22:2a:9a:9e:71:5a:ab:e9:b1:90:09:
         de:8b:70:01:b8:f7:12:bb:3f:97:3b:21:88:45:9f:37:43:f8:
         26:d4:93:2a:8f:2a:5e:a7:1f:a4:70:72:d5:88:68:8c:10:ee:
         c8:be:5a:fa:6a:a7:c0:b8:78:08:12:11:96:e1:8b:73:69:6f:
         f1:57:a9:bd:ee:d9:a2:b6:48:f8:05:43:ff:b2:b6:63:5c:44:
         e0:3d:4a:54:80:9b:a1:ea:04:87:18:cc:87:09:4e:05:22:14:
         d9:80:2e:11:cd:c1:01:c9:69:eb:2e:d3:1a:de:36:6d:a2:0d:
         f9:52:c9:2b:50:f1:da:76:64:16:94:df:40:a2:6a:3b:8f:0b:
         71:0a:9f:1b:28:01:73:b0:06:f0:a3:52:af:a5:91:d9:2a:26:
         e7:59:2f:9f:67:b5:b9:6b:a4:7e:fc:a9:29:07:c1:a5:c4:44:
         fa:08:39:dd:fe:90:2b:0c:ae:97:a3:7f:eb:aa:03:4e:a5:23:
         9d:54:d0:84:5d:dc:8b:4d:3b:7e:76:8c:f6:79:28:ed:49:7f:
         2e:ed:47:97:c1:ed:68:40:dd:33:f7:16:2c:ed:93:9d:1e:d0:
         73:f4:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:39 2025 by rpki-client