This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer
File:                     b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer (raw, json)
Hash identifier:          ueMjryIwzrYSTKa23erimTBRKeW8zlIV3A2QGmI+gHQ=
Subject key identifier:   35:3C:B8:E4:9F:44:C9:C9:BD:56:B2:1F:0B:DC:81:55:48:DD:01:E6
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BEAE8EB740CD1289AB4CC70C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Nov 2025 01:56:09 +0000
Certificate not after:    Wed 23 Feb 2028 01:56:09 +0000
Subordinate resources:    IP: 130.12.4.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ea:e8:eb:74:0c:d1:28:9a:b4:cc:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 20 01:56:09 2025 GMT
            Not After : Feb 23 01:56:09 2028 GMT
        Subject: CN=b9fac4f6-e4ac-4623-b29e-def6eb599d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:c1:ca:34:7b:7f:1b:07:9d:e1:43:0c:b3:
                    57:d8:57:91:bb:c0:7d:4d:e6:a5:9c:33:e1:d9:11:
                    9f:25:41:55:c0:0b:b0:b1:38:54:3a:ea:df:36:6a:
                    80:dd:76:9b:df:b3:aa:10:88:fa:cf:23:3b:5f:2f:
                    ac:0f:87:73:33:a9:7a:e5:49:f7:f1:f5:3c:90:e9:
                    3e:a8:ec:7d:fc:31:20:4b:19:85:eb:74:b9:87:4d:
                    ca:0c:53:13:d3:38:27:79:af:b7:0c:a7:bd:d3:af:
                    17:af:25:99:18:da:00:9b:ca:f0:3a:44:3e:0c:86:
                    be:e2:72:cb:c1:91:b1:af:66:dd:48:1b:49:73:b5:
                    61:06:ee:8d:ea:a8:f0:c5:dd:41:16:27:f2:dc:3a:
                    63:59:74:3b:d7:96:64:83:86:65:30:d9:b5:20:46:
                    80:87:74:02:bc:fb:b2:5f:c3:b3:57:92:ea:e1:b7:
                    45:37:23:0f:7f:57:fd:af:10:30:8c:88:93:33:d2:
                    76:e1:a2:7a:ea:a0:cb:13:dc:14:be:3c:fa:b0:53:
                    bd:22:46:b1:f8:6a:5e:3c:bd:be:a9:be:75:07:e5:
                    a1:79:46:51:77:2f:05:d2:83:b6:42:99:0c:9c:25:
                    d0:53:05:17:f8:15:e4:69:69:be:9b:dd:23:b6:74:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3C:B8:E4:9F:44:C9:C9:BD:56:B2:1F:0B:DC:81:55:48:DD:01:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:43:77:97:10:88:6a:2b:21:c2:5c:21:32:5a:ed:e6:18:1d:
         ce:3e:38:e3:4f:cf:02:77:be:a5:4c:ce:c5:44:d7:ea:88:ac:
         4c:bf:04:ac:26:5c:c3:00:0d:13:d6:b7:2d:6f:33:09:79:58:
         c1:7e:5f:43:73:32:9e:7a:1c:1d:ff:b0:05:99:2c:60:6f:8b:
         2b:00:3e:22:95:3b:fe:cd:10:16:0f:66:94:5e:29:2e:fd:aa:
         40:e1:89:2b:76:47:8d:ff:31:23:58:91:66:29:60:ce:6e:cf:
         67:0b:7e:19:b7:f7:8e:5f:6e:3f:1e:d5:10:c9:9a:a7:e1:80:
         90:00:1a:b2:c4:b5:73:e3:0a:a8:69:dd:05:05:29:55:c1:0f:
         22:e8:70:a7:54:01:85:6e:f3:8e:1f:54:40:ef:1f:e6:27:83:
         a2:c9:08:24:6a:dd:ab:d0:21:1d:b3:f0:c6:c4:57:5e:b8:d9:
         c8:14:db:e7:a1:17:20:db:9b:fe:9e:85:b2:17:8f:68:6d:01:
         f0:ba:82:9b:7e:29:d3:1d:85:30:23:08:c1:64:76:53:0b:0e:
         9e:98:11:7b:fc:20:fb:c7:12:d2:64:12:c9:f9:91:2e:c2:a3:
         bf:b5:8e:24:8d:df:32:b3:ee:34:79:ea:95:48:4a:00:25:10:
         96:1f:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----