This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer
File:                     b5f48b26-d1bd-4f55-9507-2773595cf9a2.cer (raw, json)
Hash identifier:          B1384o2cqU/MOFhMK4CDl+71bIG3A9G9kWBNOVRbX7s=
Subject key identifier:   BB:54:83:B4:5D:1E:94:DC:7F:63:F2:8C:55:61:D3:28:61:34:CF:64
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BFD72D37133A6B7497E5A7600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Nov 2025 17:18:34 +0000
Certificate not after:    Tue 29 Feb 2028 17:18:34 +0000
Subordinate resources:    IP: 2604:2be0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fd:72:d3:71:33:a6:b7:49:7e:5a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 26 17:18:34 2025 GMT
            Not After : Feb 29 17:18:34 2028 GMT
        Subject: CN=b5f48b26-d1bd-4f55-9507-2773595cf9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:b0:e2:7f:00:53:09:fc:72:d9:95:35:ea:
                    75:f9:64:f0:19:f2:49:49:e0:ab:52:95:ca:a8:02:
                    45:2a:fd:cb:bc:c7:60:90:06:1f:c1:0c:39:90:75:
                    7c:03:2d:b3:df:e6:49:fd:ac:d1:89:44:cb:28:71:
                    6a:54:fc:81:22:c9:67:06:05:e0:63:cd:51:68:89:
                    b9:63:0e:19:43:4e:de:fd:ed:8f:a6:c0:27:ff:b6:
                    03:33:38:7c:78:94:bc:1c:af:ae:da:7b:c1:eb:db:
                    92:66:5a:d2:64:fd:2e:58:d3:a4:02:9c:f0:52:72:
                    8d:b5:ab:27:c9:68:32:05:24:6c:51:3e:37:03:c5:
                    eb:ac:0b:3a:96:24:29:4b:94:36:5f:dd:ca:eb:a7:
                    c0:50:b1:7c:1e:91:7a:57:36:81:20:ae:38:40:30:
                    5a:33:e3:31:ba:06:80:f4:2f:73:7d:6b:41:a4:7a:
                    91:0e:4a:86:6a:a5:06:7b:df:c8:bd:15:0b:b5:0f:
                    71:aa:42:f4:51:e1:43:3a:35:df:bd:ee:4b:de:1b:
                    a2:b8:65:c8:68:82:e9:1e:90:83:84:80:d9:09:82:
                    8b:3e:1f:d2:c4:2d:92:9d:68:4b:f9:4e:03:0e:0d:
                    71:0f:12:a2:bf:f6:a3:fb:93:8d:3d:6b:e9:66:b4:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:83:B4:5D:1E:94:DC:7F:63:F2:8C:55:61:D3:28:61:34:CF:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5f48b26-d1bd-4f55-9507-2773595cf9a2/b5f48b26-d1bd-4f55-9507-2773595cf9a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2be0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:38:8a:4d:52:d9:2b:a0:2a:47:3f:62:ca:45:21:03:90:0c:
         3f:a0:90:e4:73:fa:98:75:86:8a:3a:a4:9b:5b:b2:43:dd:c1:
         69:9d:e3:8b:2f:cf:da:0b:57:be:fb:45:03:80:05:15:9f:53:
         66:c6:c9:92:be:8d:a6:13:b7:4c:4b:b6:e2:53:b3:13:bc:3d:
         7e:65:3f:91:b6:28:a6:d1:c0:a9:46:d5:fa:c7:8e:ab:7e:ee:
         84:c9:e0:23:39:51:4d:ac:b0:71:5e:2d:00:02:a0:ba:8a:45:
         ce:09:70:81:0f:49:d1:a4:8c:27:c8:4c:15:44:23:de:04:bc:
         51:8c:81:5f:c0:d5:71:4c:14:a4:30:5f:2c:69:8c:27:6a:a9:
         48:83:3a:55:59:d6:ca:4b:28:eb:ba:24:c6:11:05:3a:94:f3:
         26:eb:a3:d1:f9:03:ae:c8:71:74:01:45:6f:46:4d:64:b8:f6:
         38:7d:3e:b6:ab:fa:26:d7:a5:d7:bc:14:4d:bd:5b:9c:c1:e7:
         f3:02:ed:b0:a7:6e:3b:6f:51:1f:34:61:2c:dd:30:00:ea:c6:
         06:e6:f0:26:2c:c0:ab:9a:31:cc:ab:9e:fe:d2:e7:71:60:2a:
         eb:a9:cb:b0:d1:0d:56:bd:da:66:27:b4:38:bc:d3:e7:99:3d:
         45:c2:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----