This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
File:                     a9586916-68f6-41f9-8be8-415f39b3aff8.cer (raw, json)
Hash identifier:          oNWuNFBZ3yXEqUVYFebO7QeEw9wv/BsOSU1hBYMvC6c=
Subject key identifier:   5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C5A55A7B5F8C091FD15771F18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Dec 2025 23:49:58 +0000
Certificate not after:    Sun 02 Apr 2028 22:49:58 +0000
Subordinate resources:    AS: 402095
                          IP: 23.151.236.0/24
                          IP: 2602:f482::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:55:a7:b5:f8:c0:91:fd:15:77:1f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 29 23:49:58 2025 GMT
            Not After : Apr  2 22:49:58 2028 GMT
        Subject: CN=a9586916-68f6-41f9-8be8-415f39b3aff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:b5:7c:a8:45:ff:80:d6:c0:f3:15:a2:78:
                    94:28:6d:f8:51:f6:c8:a5:7c:0b:28:d4:ce:a8:43:
                    27:bd:96:ef:c7:5e:ce:93:38:92:6d:e2:49:75:9e:
                    97:9a:75:fa:93:bb:77:79:e1:a0:36:7f:8a:49:6a:
                    8f:5e:34:95:8c:ff:87:0b:56:44:a9:51:ad:96:41:
                    db:c0:cf:c8:bc:fd:a3:c6:0b:ce:5c:9b:56:c8:bd:
                    01:f6:41:47:69:fa:80:36:ae:2e:c7:40:a7:ff:ab:
                    65:60:3a:e0:80:1c:2f:21:09:8b:ae:31:fe:34:3c:
                    27:cf:55:02:93:6e:45:fe:b2:37:89:b8:93:e9:78:
                    e7:ef:13:ea:57:74:dc:c7:3a:2b:dd:3d:d0:71:3b:
                    aa:54:66:d6:a7:13:c0:b1:c1:0a:97:a8:19:65:f2:
                    d2:8c:0e:98:7e:b5:4e:db:7f:51:f7:23:b4:67:a5:
                    fd:96:00:78:ec:a5:6d:d5:c6:9f:bc:d4:02:99:d0:
                    f1:25:46:d5:ec:03:ae:d4:ae:61:04:1f:e7:14:ee:
                    a7:7a:4c:cc:62:fc:9c:37:b0:77:d7:e6:8a:20:0b:
                    30:af:92:6a:d6:7a:c2:65:f2:68:90:16:6c:15:fd:
                    24:21:77:b5:6b:79:e8:ca:c1:a6:3d:08:bb:cd:5f:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.236.0/24
                IPv6:
                  2602:f482::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402095

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:83:ab:94:a2:c6:2e:ea:3f:10:f8:99:9b:60:81:83:58:b5:
         91:c1:3b:92:61:35:21:76:21:1c:7c:92:5a:f8:5a:8a:62:34:
         8e:62:75:4a:97:df:ca:dd:b0:04:f8:62:fd:c2:55:c5:17:16:
         b3:6d:00:7a:9d:63:98:33:81:29:08:38:33:71:a2:a0:c6:8c:
         c7:3a:12:19:b8:2a:9a:50:44:12:d4:17:c0:5c:e0:6a:69:1f:
         79:89:f2:d2:8b:ac:b8:60:64:da:eb:f2:69:75:d8:a6:42:cc:
         9a:18:31:44:11:be:e0:d7:7d:43:10:85:96:c8:ca:39:96:51:
         79:28:9e:c5:62:21:4a:14:2a:1a:ac:b1:7e:ed:09:9b:25:0c:
         f9:44:1e:52:57:52:01:5f:05:d3:5f:b1:20:8d:26:fc:01:b1:
         1a:c7:63:02:54:a1:2c:1d:92:ac:2d:ac:5a:22:66:41:25:06:
         e3:93:b1:7b:95:a7:d5:b0:d1:4f:e4:59:fe:15:31:8b:e5:2b:
         6e:5b:6a:ca:43:e9:7a:95:b7:04:1b:de:7d:4c:41:ac:38:61:
         50:7f:4b:c8:42:9e:10:5e:43:45:b1:c0:c2:63:43:07:59:cd:
         23:46:83:b8:20:3a:e8:62:1b:12:c3:de:2d:b0:1f:aa:32:2d:
         67:00:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----