This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer
File:                     cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer (raw, json)
Hash identifier:          S3VVaQekyPAx+vlq3YWOhKiPH8cFt3nIOBPkmOi8iuY=
Subject key identifier:   7B:33:36:6E:9B:42:D2:9C:8B:54:17:2D:11:EA:A7:97:F2:70:5D:85
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C00A89985FB1ED09968E7CD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Nov 2025 20:54:21 +0000
Certificate not after:    Wed 01 Mar 2028 20:54:21 +0000
Subordinate resources:    IP: 205.237.210.0 -- 205.237.219.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:00:a8:99:85:fb:1e:d0:99:68:e7:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 27 20:54:21 2025 GMT
            Not After : Mar  1 20:54:21 2028 GMT
        Subject: CN=cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:b1:25:c1:58:34:50:b9:c7:9d:42:e8:8f:
                    59:a9:b4:26:b4:e5:4f:54:45:ee:de:b9:9f:c4:51:
                    fe:da:14:40:6e:bb:fe:89:c5:84:66:d0:86:f4:d3:
                    fd:d1:51:7b:ca:3a:59:c4:35:3f:fe:80:7a:5f:01:
                    8c:b7:9b:b2:62:4b:e8:ef:6d:3a:44:23:76:be:79:
                    a6:43:d9:ad:1f:66:0e:28:6d:f0:c5:c4:ca:61:7f:
                    3e:37:49:01:47:50:06:f6:74:cd:81:7c:d5:da:73:
                    62:0f:4c:11:8f:b0:eb:34:c9:12:f0:5a:a2:b5:d4:
                    01:46:6b:bb:34:c6:38:b0:c3:4c:a2:bb:d4:d6:b9:
                    22:fd:96:0e:e1:72:c0:8a:8e:a7:5c:27:e7:1c:f4:
                    6a:9a:7b:4a:50:13:53:d1:70:a5:33:5e:16:ba:eb:
                    cc:05:67:21:a6:8e:50:54:6b:00:49:9b:8b:55:53:
                    93:06:c9:eb:de:e1:34:e3:b0:2b:98:1a:12:a3:d6:
                    75:12:bd:ee:7b:83:77:0e:7f:35:3f:ab:3f:91:0a:
                    eb:13:03:1f:92:1a:fb:cb:50:73:f0:68:ea:58:40:
                    cf:91:3e:e4:a1:c9:d5:81:a4:e3:ee:24:46:e0:84:
                    e2:7f:56:7c:9b:a5:bf:1a:44:1d:c6:7f:06:73:d4:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:36:6E:9B:42:D2:9C:8B:54:17:2D:11:EA:A7:97:F2:70:5D:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.210.0-205.237.219.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:97:bf:c3:84:d1:ac:f6:7c:63:11:b3:41:2c:7b:5f:71:
         43:dd:95:94:da:79:f3:23:57:40:70:29:06:e2:06:df:fb:f3:
         a5:c5:52:2d:8c:36:47:ca:0c:91:b3:db:50:d8:d2:df:d1:f1:
         28:b1:b4:d4:ca:c9:c7:c9:bc:bd:a9:80:84:70:00:d6:41:f5:
         54:ee:e1:21:4d:bf:94:72:14:22:b2:c8:4d:4d:75:a4:a0:eb:
         08:fd:c8:18:8c:b3:7d:89:57:b1:b0:2a:58:12:ae:d4:e2:ad:
         36:fd:c8:ee:b9:c3:43:be:32:2c:a5:98:65:40:47:b0:0f:97:
         c9:57:44:e2:bd:50:a5:cc:bc:5a:10:76:b1:2e:ed:3e:d3:c7:
         d1:0a:fa:f6:83:ce:4a:35:f0:95:52:18:aa:86:49:50:63:13:
         e7:1a:ec:84:32:6f:a9:91:d2:4c:35:31:6c:7a:68:be:13:43:
         5f:7a:0d:61:ad:c9:23:3a:a6:7e:bf:63:da:0c:f5:1e:6f:4a:
         9a:02:74:b2:39:a0:31:41:47:db:3d:5e:52:89:6a:0e:bb:6c:
         69:bb:c6:45:e5:37:73:fc:e4:33:9d:c0:80:d8:3b:36:be:9e:
         8c:98:d1:6f:07:4a:8c:fb:09:22:78:90:99:22:22:b4:0c:64:
         65:1a:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:00 2025 by rpki-client