This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c149e39f-1a11-4f57-ace4-ee9c75fb92b9.cer
File:                     c149e39f-1a11-4f57-ace4-ee9c75fb92b9.cer (raw, json)
Hash identifier:          CtFLVginBPJzmLSt6MUqwGJtaFIhFSxyBc43AtROBnc=
Subject key identifier:   7F:69:18:F2:10:BF:57:A9:32:2D:61:90:57:21:F7:99:3C:0D:4F:C5
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BEC7C23976566FE5C3CB94A60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c149e39f-1a11-4f57-ace4-ee9c75fb92b9/c149e39f-1a11-4f57-ace4-ee9c75fb92b9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c149e39f-1a11-4f57-ace4-ee9c75fb92b9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Nov 2025 15:28:36 +0000
Certificate not after:    Wed 23 Feb 2028 15:28:36 +0000
Subordinate resources:    IP: 198.135.168.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ec:7c:23:97:65:66:fe:5c:3c:b9:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 20 15:28:36 2025 GMT
            Not After : Feb 23 15:28:36 2028 GMT
        Subject: CN=c149e39f-1a11-4f57-ace4-ee9c75fb92b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:6a:f6:39:53:eb:e9:82:6d:5c:3d:b5:3a:
                    48:1d:cb:a8:91:da:0e:dc:5d:bc:fa:40:71:a6:48:
                    a7:24:5c:f3:f8:93:b5:90:24:1c:f6:4c:ca:c2:b4:
                    c0:e7:c7:29:73:38:89:53:12:bb:06:3f:3c:d3:7b:
                    51:68:2b:83:c9:8b:d5:bf:27:f5:69:be:bc:46:85:
                    ef:1a:77:e2:d6:b1:13:43:f6:53:54:0e:4e:f0:7a:
                    2d:38:1c:40:fb:42:dc:91:3e:7b:b1:5d:8e:48:c7:
                    21:fb:54:5d:d7:0e:0b:83:87:61:e4:6e:6f:78:98:
                    ca:e6:19:a0:b0:99:d0:bd:6d:9d:d6:1e:73:02:99:
                    fe:27:70:37:85:8d:36:10:c3:ce:16:f7:45:a4:1e:
                    d4:ac:54:3c:6b:a6:d5:ec:27:1d:f5:02:19:25:d2:
                    36:e7:83:1b:14:da:50:04:7d:59:28:12:04:06:b3:
                    c0:61:aa:ec:45:96:10:2f:f9:0a:80:95:d9:9b:bc:
                    d6:61:4c:c1:35:04:5c:a2:5f:43:1e:07:87:79:41:
                    14:f9:aa:a7:da:e0:97:81:b1:fb:e4:32:86:af:f8:
                    2b:df:6e:1d:17:a5:71:aa:0b:93:51:bf:39:f3:52:
                    2c:60:7f:06:37:71:58:04:26:41:f8:b7:84:29:d1:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:69:18:F2:10:BF:57:A9:32:2D:61:90:57:21:F7:99:3C:0D:4F:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c149e39f-1a11-4f57-ace4-ee9c75fb92b9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c149e39f-1a11-4f57-ace4-ee9c75fb92b9/c149e39f-1a11-4f57-ace4-ee9c75fb92b9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:44:b3:d8:43:c5:7d:a9:22:88:4c:b1:f2:bf:d1:f1:ef:77:
         1f:53:ff:99:a1:1d:12:2e:b7:d0:3e:09:f7:a5:35:73:a9:d2:
         6c:48:06:9b:11:ee:a1:4c:d2:94:cf:ce:17:3a:8b:51:e3:e9:
         fa:06:d2:60:08:88:12:c0:48:5d:3f:34:01:8b:8b:1d:3c:17:
         46:e6:7c:b7:eb:0c:1b:c7:d4:dd:79:48:87:76:46:4f:c4:e3:
         bd:a4:82:96:99:a0:24:15:56:7c:5e:75:0e:f0:ce:b8:78:ea:
         3b:95:f9:e3:ef:a5:5a:a8:89:03:f3:a6:db:a9:97:9f:4c:5b:
         b1:e9:df:37:d6:4e:61:f9:9e:b6:49:ac:6d:a9:6a:29:97:f4:
         47:70:be:e4:bb:2c:19:05:05:58:fb:58:0b:48:d7:55:02:3a:
         47:32:7e:59:89:16:55:aa:94:40:8d:7d:11:d9:62:4c:86:84:
         2f:c9:7b:3b:15:4c:78:ba:d8:07:75:09:72:07:66:66:3d:18:
         c0:eb:44:64:fd:19:44:cd:d0:3e:57:52:65:fd:81:73:1c:50:
         a5:55:a5:7e:a2:03:c6:07:b2:10:ba:e1:ed:82:5e:05:4b:a2:
         4c:93:1e:4f:80:47:38:61:7b:ba:31:5e:69:d6:19:41:c6:0c:
         8f:53:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----