This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer
File:                     db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer (raw, json)
Hash identifier:          EVQySL5pDrYFobMBbNjKhiZ2sRzQHiQiJS/nYLknDkI=
Subject key identifier:   0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584B8257DAFB531BFC11853F3CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Oct 2025 14:59:48 +0000
Certificate not after:    Sun 16 Jan 2028 15:59:48 +0000
Subordinate resources:    AS: 46582
                          IP: 198.175.172.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:57:da:fb:53:1b:fc:11:85:3f:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 13 14:59:48 2025 GMT
            Not After : Jan 16 15:59:48 2028 GMT
        Subject: CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:b7:fc:47:e3:2b:28:37:e3:ab:3a:90:d0:
                    67:7d:79:21:a9:ac:f6:95:bf:b4:7d:da:cd:61:06:
                    09:01:a2:3e:ee:fd:9b:9a:33:f5:86:21:05:19:16:
                    5c:75:55:7b:ec:a8:a0:8c:18:7b:70:8a:0e:87:94:
                    56:00:4b:06:57:9f:ea:44:5f:1e:c8:4f:9f:b5:47:
                    46:39:b4:64:47:3b:9e:ad:40:28:fb:ec:db:9e:9e:
                    a2:d9:5b:04:aa:11:8a:b8:76:30:33:af:54:58:1a:
                    b6:f4:72:43:af:21:10:ed:4f:c6:3b:04:ec:61:21:
                    90:cb:c7:f6:95:af:6b:e4:4a:e6:e9:c5:c1:4e:1d:
                    83:ae:df:c4:ba:59:82:e5:85:16:7b:35:5e:c0:db:
                    71:d0:3e:35:40:63:96:b8:7b:cf:d2:b5:18:d8:09:
                    a9:2d:9f:c2:3a:89:67:4b:06:42:37:9d:5f:3e:33:
                    f0:4c:1e:70:f9:48:80:a4:df:b0:61:d5:48:81:73:
                    7d:38:b8:6d:3a:d3:a2:f3:9f:cb:38:75:37:00:12:
                    9a:34:c0:52:33:f2:1a:32:e8:45:f8:ce:8f:d6:eb:
                    ec:16:3c:08:c4:cc:2b:18:cd:6a:39:39:b5:29:3e:
                    6e:0e:9a:27:30:10:cd:33:cf:16:c8:be:00:09:72:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.172.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46582

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:fe:77:c8:90:40:ad:cb:74:56:2d:83:82:d8:f0:da:c7:
         c8:4f:fb:fa:54:2d:d1:4c:db:d5:7f:e5:8c:94:1b:a2:18:24:
         3e:ef:3d:6b:ef:b7:30:e2:99:c0:01:99:e7:b1:61:3f:23:52:
         4a:3f:75:ed:2a:41:a1:c8:a0:ba:7d:b0:2d:9b:ad:54:a4:f3:
         97:4b:9f:40:37:39:b1:e8:cb:44:1e:1f:cc:f2:cb:47:69:50:
         e1:d2:28:61:77:84:aa:fe:0a:48:cc:7e:9d:2f:8a:b3:4b:a5:
         d5:70:fb:cd:79:7f:74:bb:d1:38:62:7c:f9:df:d1:24:70:03:
         ef:e2:53:09:14:81:0b:28:8f:89:8d:a6:19:16:a2:51:9c:ad:
         45:0b:d5:cc:be:d3:0f:86:4d:db:53:15:bb:59:7a:cd:21:f1:
         df:a5:fa:f1:31:c2:b5:ae:65:9b:51:7c:51:77:5f:e0:c4:4e:
         22:7c:6d:0e:b9:43:87:e6:52:6e:da:77:e0:51:82:e3:b0:5f:
         7c:69:86:8b:ea:f1:8a:24:99:ae:06:3b:e4:c4:2b:c9:60:be:
         42:bc:e1:1b:45:f6:98:94:44:94:66:71:3f:24:b3:f6:70:23:
         12:66:cb:76:9f:63:a1:a0:88:78:b9:7f:82:4c:fc:23:ee:07:
         b6:43:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----