This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838.cer
File:                     c173b81a-8a70-4ca8-8517-24722a315838.cer (raw, json)
Hash identifier:          1uvR3MPpkVFUp+CwXF5iY13akSkGKxhGsw8fE2bHJCI=
Subject key identifier:   CB:64:8F:4C:77:80:6B:12:99:88:84:6E:07:3A:64:17:BF:FA:8B:C2
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BA60CF287AB876EF8C126B400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/c173b81a-8a70-4ca8-8517-24722a315838.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Oct 2025 09:57:58 +0000
Certificate not after:    Sat 29 Jan 2028 10:57:58 +0000
Subordinate resources:    AS: 26377
                          IP: 192.67.222.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:0c:f2:87:ab:87:6e:f8:c1:26:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 26 09:57:58 2025 GMT
            Not After : Jan 29 10:57:58 2028 GMT
        Subject: CN=c173b81a-8a70-4ca8-8517-24722a315838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:74:b4:2d:c6:a8:49:02:74:ae:52:c2:e8:
                    73:04:e6:4a:ae:85:d1:56:4c:97:50:ef:36:31:93:
                    ff:55:32:28:19:fd:15:c0:3c:3b:9a:6e:b1:0e:b6:
                    96:19:fd:6c:95:0d:4d:b9:db:93:2b:c7:1b:08:b6:
                    71:e5:d6:e1:07:20:ab:3f:72:5c:f4:fe:06:bc:33:
                    ff:5a:a4:9f:70:fc:7a:b3:53:5d:85:fa:3a:90:6a:
                    1f:e1:e1:19:97:a2:2a:3b:0f:f4:69:d1:01:8f:c9:
                    70:72:d0:b2:7d:45:33:6e:df:72:78:cb:f2:f2:3d:
                    49:8f:ea:65:f8:31:52:f7:9c:51:a4:ca:f4:71:63:
                    a0:ea:11:e8:f4:65:b1:0c:a4:bc:ae:ea:cb:01:b1:
                    1c:6a:7c:a7:b3:0a:0b:f3:0e:c6:d5:d6:d3:22:e1:
                    04:8b:b9:a3:ce:93:ce:59:32:c2:d1:4b:d9:93:dd:
                    08:e9:ce:97:85:b7:2a:01:0f:89:9f:1e:2d:db:ba:
                    5b:4b:d3:06:71:9a:1e:9b:52:48:18:12:32:9f:50:
                    c7:23:9d:36:18:12:a2:63:3d:ad:c8:63:26:3e:d8:
                    ec:20:30:98:14:8f:f3:54:52:12:2e:14:34:0a:13:
                    13:ca:fb:79:20:2f:97:67:f8:e9:de:77:e5:fc:a2:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:8F:4C:77:80:6B:12:99:88:84:6E:07:3A:64:17:BF:FA:8B:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/c173b81a-8a70-4ca8-8517-24722a315838.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.222.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26377

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:33:a0:99:c8:e3:16:48:25:ed:9a:39:88:1a:27:a3:2a:e0:
         e1:ac:c4:8e:8b:31:96:ae:4e:9e:37:64:72:4a:b1:fb:05:27:
         26:e7:9d:69:a4:7e:c3:3a:b5:f0:92:fe:4d:48:67:d2:d4:58:
         77:2d:1d:40:0d:b6:20:ac:2b:c4:04:97:24:89:fb:01:43:d2:
         bf:43:5c:6d:4c:e8:dc:a8:1c:80:89:67:bd:08:86:fd:c3:73:
         ba:60:e1:8c:24:8a:21:6e:e7:54:b4:ff:56:a3:43:b1:ec:4d:
         4b:8f:1a:72:9b:21:5f:b5:00:29:8d:10:e0:f2:11:67:55:72:
         1a:ed:15:fc:e8:fe:52:e9:45:3a:82:d3:26:de:1c:27:92:76:
         01:92:6e:79:cc:cc:c4:a0:df:cd:81:44:80:be:53:91:e7:37:
         83:a1:a4:22:eb:f1:7b:c0:a0:15:5a:cd:0a:93:57:5b:1f:57:
         c7:65:95:42:b7:ad:89:e6:ff:5e:97:09:7a:a9:13:85:60:aa:
         35:d9:5d:b9:90:e0:db:ee:94:02:ad:95:8e:80:17:eb:3b:43:
         ed:8f:fa:3f:95:f3:50:85:c2:8d:b6:cb:a4:c5:eb:27:15:a3:
         8b:5d:47:fa:49:f3:ee:c4:ec:96:f4:22:d3:fb:47:74:bc:b7:
         c9:93:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:11 2025 by rpki-client