This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer
File:                     d1cc8500-bae2-45fc-bc07-4020eda9134a.cer (raw, json)
Hash identifier:          t7uaOqknK4VAqYbbioxsGv7y7/J8AmruU9NF05GCQNI=
Subject key identifier:   53:07:AF:B1:C1:33:61:14:2C:DB:99:A0:A1:01:38:C1:6A:5D:C9:53
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BD637EBC1E8E9D41C5FD12A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 16:03:22 +0000
Certificate not after:    Tue 15 Feb 2028 16:03:22 +0000
Subordinate resources:    AS: 19058
                          IP: 66.51.176.0/20
                          IP: 68.69.32.0/20
                          IP: 192.196.224.0/20
                          IP: 2605:d640::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:37:eb:c1:e8:e9:d4:1c:5f:d1:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 12 16:03:22 2025 GMT
            Not After : Feb 15 16:03:22 2028 GMT
        Subject: CN=d1cc8500-bae2-45fc-bc07-4020eda9134a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:da:31:b4:15:ff:db:2d:c1:24:b0:ce:04:13:
                    80:f1:f8:bc:15:d5:fc:e4:6f:d2:d7:b7:41:c4:8f:
                    7a:19:6b:70:39:13:2c:ee:73:9a:79:e9:3d:95:de:
                    1a:6a:76:4e:75:27:06:03:38:12:0f:b3:2d:b1:40:
                    a1:16:6e:04:6c:a3:5a:60:b1:0d:86:7f:cb:93:85:
                    09:63:e2:0a:23:84:dc:c3:75:4e:8b:ee:75:cf:79:
                    c2:6f:9e:ca:09:89:c1:29:b1:a8:b3:dc:26:df:7b:
                    d4:95:72:c4:32:3d:06:a2:75:4e:44:3e:00:a3:fb:
                    98:2b:37:03:4a:17:70:2d:fb:4d:ed:04:b1:b4:13:
                    38:e9:6f:bb:0b:2a:ed:a5:ba:d2:74:77:13:e9:ed:
                    fa:9a:60:f3:d8:28:d9:75:92:79:4e:91:fc:97:84:
                    8a:94:58:02:d3:1e:dd:a9:15:28:63:25:4f:3e:76:
                    ed:8f:60:d7:ae:31:6d:5f:79:64:8c:06:77:f3:34:
                    47:f7:21:f0:46:ad:c5:18:e1:de:ec:a9:e2:7b:5b:
                    e3:58:08:b6:1d:2d:30:47:28:f6:2b:53:37:66:07:
                    c1:a6:ef:4c:c4:3b:6d:7c:60:b0:66:5b:95:81:7b:
                    e5:25:6c:dd:85:14:fa:7c:10:7e:db:b5:c3:6a:f2:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:AF:B1:C1:33:61:14:2C:DB:99:A0:A1:01:38:C1:6A:5D:C9:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.176.0/20
                  68.69.32.0/20
                  192.196.224.0/20
                IPv6:
                  2605:d640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19058

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:b4:db:20:be:b3:70:34:d8:41:cb:72:41:57:17:8c:73:
         82:41:78:6a:bc:be:07:8f:b0:f3:d5:1d:8d:1c:8b:75:4c:2b:
         59:e2:23:65:59:79:78:62:a9:2a:0a:77:ae:21:20:fa:0e:f3:
         c3:9d:95:a1:40:8e:f1:fb:c0:2e:4b:8b:e9:65:fb:59:4e:b6:
         50:d6:e6:b0:8e:e3:04:0c:6b:c9:7c:70:bf:d1:2e:36:59:18:
         30:e6:d8:dc:9e:33:ee:b7:2e:7c:39:b3:ed:bf:3d:3c:bd:96:
         c6:65:2a:af:b9:c4:a2:a3:91:9c:8f:9a:08:7f:d5:58:c4:68:
         72:6e:23:87:f6:04:3a:cf:ef:6c:46:9e:a1:05:aa:ff:32:1d:
         f4:1e:6f:8c:7a:4e:e3:64:c4:fb:8b:25:08:49:a3:f4:09:9e:
         43:54:f5:cb:a4:54:bb:84:57:1c:02:7a:be:78:4e:85:03:90:
         e7:b0:ba:ad:85:1d:63:48:99:89:81:0e:b6:de:fa:98:05:5b:
         39:54:c4:38:38:51:8b:13:3a:6a:6c:5b:4a:b7:4d:05:3f:c7:
         b8:01:1c:f9:82:4e:8a:af:61:1f:17:7c:ce:a1:16:ad:bf:c3:
         9d:7c:43:ee:5a:71:54:bb:77:61:95:33:22:fc:83:93:c3:4f:
         d9:4d:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:51 2025 by rpki-client