This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
File:                     c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer (raw, json)
Hash identifier:          zenooDZqC9nFxXyPm92LLEXRcghGIL2ArQNvLe10XeY=
Subject key identifier:   EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BD697B96B30563FA0ADA03200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 19:16:24 +0000
Certificate not after:    Tue 15 Feb 2028 19:16:24 +0000
Subordinate resources:    IP: 170.46.0.0/16
                          IP: 198.135.250.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:97:b9:6b:30:56:3f:a0:ad:a0:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 12 19:16:24 2025 GMT
            Not After : Feb 15 19:16:24 2028 GMT
        Subject: CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:cb:87:3f:26:05:51:3a:09:4d:bc:b1:39:
                    cc:3b:4c:1a:18:64:d3:0b:ed:df:b7:f6:6e:40:07:
                    27:6f:90:76:52:61:d6:f0:12:89:2a:cc:0b:42:6e:
                    7b:ea:87:55:7a:39:37:fc:1e:0d:8a:b1:8f:a3:45:
                    f2:e6:ea:2e:0a:e9:10:82:23:d4:91:55:74:17:93:
                    7b:bc:a6:86:09:6b:e0:43:39:7a:0b:e8:62:4e:f6:
                    7a:4a:d2:36:9c:38:a7:9e:b7:99:a4:e3:2b:3f:56:
                    90:6a:2f:df:57:30:67:17:10:a0:69:cd:a0:9c:fe:
                    7e:83:14:54:60:c2:e0:26:7e:c7:4a:f3:a0:f3:78:
                    0d:15:40:d0:8d:25:e1:f9:ad:6c:fa:59:a8:ba:aa:
                    50:ef:56:c0:21:5f:ee:55:f3:b0:af:26:84:8b:ed:
                    f2:a6:7e:85:ee:87:31:79:c9:e9:0f:37:25:07:67:
                    ca:b6:8a:0d:ae:c7:f2:70:8a:ed:4c:10:7c:c8:f4:
                    a9:66:72:85:e2:74:62:c8:fc:ca:bf:4b:09:88:93:
                    2f:af:26:41:a6:ec:47:8f:7b:d3:f2:45:0d:2a:2f:
                    77:4f:76:b4:a3:c8:e3:89:85:8a:98:70:95:df:e5:
                    e7:70:f4:6d:3a:81:84:14:5a:10:71:f9:a0:b1:d1:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.46.0.0/16
                  198.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:16:72:38:64:53:e0:fa:96:19:40:cf:09:42:0c:dc:da:
         1d:d7:c6:07:ce:12:24:09:0c:05:32:8a:60:8b:9b:a5:60:be:
         b8:66:42:17:8a:43:d3:78:1b:cd:90:de:29:b7:ec:a1:25:37:
         56:7f:d6:05:20:4c:2c:1b:4d:b4:8a:3b:0e:44:1f:fc:f5:3a:
         b3:08:63:93:3f:4e:3b:f2:7d:41:f4:88:65:85:1f:be:0e:9b:
         6d:4a:97:39:29:c3:3f:d4:25:0a:b6:7f:c1:f9:72:bf:f8:9d:
         6a:18:24:56:52:63:66:bd:50:68:98:be:d3:d7:e9:b2:71:58:
         23:f3:a8:5b:37:c2:19:0b:c1:8a:55:74:e8:98:94:8a:e9:2b:
         59:96:43:2d:7e:1a:75:2e:f8:da:a2:32:58:4b:91:5c:38:10:
         dc:4e:0e:df:2a:35:c2:36:c1:ce:aa:1a:ab:81:fa:22:4e:4c:
         5f:e4:03:3b:f0:f0:9b:56:13:1f:61:3b:63:cf:5b:22:b7:28:
         19:ad:73:09:7d:da:6f:8c:8f:fd:3d:09:e5:27:04:ce:80:f0:
         ef:70:31:52:1b:9d:5c:9b:95:05:d2:e1:01:22:f3:6f:e1:c2:
         7f:de:a3:56:19:5e:8a:a2:6d:22:9b:da:d2:a2:e6:72:2c:17:
         70:f1:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:43 2025 by rpki-client