This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118.cer
File:                     d2bffcbb-8f35-4dc3-8559-2ac426005118.cer (raw, json)
Hash identifier:          OR4CmAkfJ0CSKC6HdAeW5eWt0fH+v+0BkKNnPFNuDfQ=
Subject key identifier:   A0:F7:9B:4F:E8:A6:41:5D:EF:10:9B:46:B3:48:73:6F:77:34:78:FC
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BC0F5F36070AEFC704CCE2F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/d2bffcbb-8f35-4dc3-8559-2ac426005118.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Nov 2025 01:18:28 +0000
Certificate not after:    Tue 08 Feb 2028 01:18:28 +0000
Subordinate resources:    AS: 46859
                          IP: 45.59.164.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c0:f5:f3:60:70:ae:fc:70:4c:ce:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov  5 01:18:28 2025 GMT
            Not After : Feb  8 01:18:28 2028 GMT
        Subject: CN=d2bffcbb-8f35-4dc3-8559-2ac426005118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:0b:f0:95:f2:7d:54:70:23:32:1d:aa:65:
                    6e:d1:58:72:84:20:a8:67:e7:9a:94:2a:89:2c:fc:
                    76:7b:22:b9:cd:da:10:09:88:ff:13:8d:f0:a1:a6:
                    a7:38:52:6d:c3:53:61:0d:67:e5:2e:ac:03:fa:93:
                    3c:e4:91:bc:26:7b:75:71:20:7d:49:12:f9:55:23:
                    58:54:16:b1:63:6c:eb:3b:8a:37:e8:e4:ea:e8:da:
                    e4:40:d1:f7:d2:13:5a:1b:3e:69:cb:05:df:d4:97:
                    72:fc:42:ad:6d:ac:85:0c:71:da:82:b8:ff:c7:30:
                    32:94:7e:da:95:2a:af:9f:d0:96:67:fc:5c:b1:e0:
                    9b:e5:00:90:09:0a:92:b9:10:02:d4:2f:3b:23:02:
                    dc:26:7b:2c:ed:ef:e9:ab:09:e2:67:3a:79:2d:42:
                    7d:fd:b9:cb:6a:4e:37:bf:3b:4c:7a:5b:61:8c:3c:
                    9c:2f:32:14:79:df:06:95:6f:54:7e:59:13:95:c3:
                    97:e0:c4:61:93:21:58:35:5d:e8:10:89:a4:d2:59:
                    15:87:ce:95:c1:55:34:e9:12:6a:90:cd:c0:c4:0d:
                    72:b7:a1:94:7c:73:37:13:38:8f:0c:b6:97:3d:48:
                    43:08:b7:ed:3c:3a:74:54:6b:23:c9:2b:9d:26:46:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:9B:4F:E8:A6:41:5D:EF:10:9B:46:B3:48:73:6F:77:34:78:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/d2bffcbb-8f35-4dc3-8559-2ac426005118.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.164.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46859

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:9a:14:6b:c5:d3:ae:88:e1:8e:db:e3:52:e0:2c:20:39:
         9a:4b:cc:37:ee:ef:0c:e0:47:2d:fa:37:35:bf:69:4b:04:b1:
         44:8d:2f:23:79:ad:06:dc:85:51:27:a1:0b:c9:45:f0:6a:40:
         b4:74:fe:b2:a6:f3:23:50:70:60:2c:2f:30:e1:37:3d:70:7f:
         5d:4c:68:df:00:b7:09:19:b0:f8:5f:2f:b4:9b:cd:99:51:73:
         71:a8:81:18:0a:67:02:9a:c3:e7:68:c0:6e:65:80:f7:aa:f9:
         d5:1f:07:6c:9e:b4:59:26:28:e1:33:85:4e:ec:ea:89:15:f3:
         7e:1f:d4:7c:d8:e8:a0:46:ef:dc:cd:d1:68:07:63:8d:eb:54:
         c0:19:23:c3:3b:b2:be:68:23:e8:f9:9d:75:3d:e4:7e:13:8a:
         e9:45:28:30:ce:f6:66:88:fd:f9:04:54:1c:8b:26:d6:bb:9e:
         a1:55:de:7e:16:e1:dc:32:97:91:16:52:2e:c1:2e:9d:af:41:
         45:c2:c3:14:69:60:65:d9:45:21:b1:4d:31:a7:ec:88:c8:5d:
         96:e2:d3:ef:61:96:e8:e9:9b:ee:72:be:e3:17:8e:a1:2d:cb:
         8b:80:8a:8e:7e:56:9a:b2:bc:31:6d:cf:60:b5:a4:e5:ab:89:
         34:60:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:09 2025 by rpki-client