This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d.cer
File:                     e02d1107-7b77-4403-a74d-0fd403cbc10d.cer (raw, json)
Hash identifier:          dqRQKM3f3Qu1YtM6KK4SGraEP+uPXj7BMCMbOxAqSqw=
Subject key identifier:   0B:CF:11:D4:63:FA:F1:08:4C:DF:54:19:DF:EF:7C:10:9C:2A:71:47
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BC29891E5FE97838F84E27400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/e02d1107-7b77-4403-a74d-0fd403cbc10d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Nov 2025 15:21:56 +0000
Certificate not after:    Tue 08 Feb 2028 15:21:56 +0000
Subordinate resources:    AS: 19964
                          IP: 199.114.204.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:98:91:e5:fe:97:83:8f:84:e2:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov  5 15:21:56 2025 GMT
            Not After : Feb  8 15:21:56 2028 GMT
        Subject: CN=e02d1107-7b77-4403-a74d-0fd403cbc10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:9f:ec:47:d4:7d:3b:91:64:f0:a2:a7:15:
                    03:13:ca:bd:15:af:ff:24:06:74:88:fd:23:54:ce:
                    26:9a:e5:52:4f:06:74:9f:bf:9c:96:06:85:e3:80:
                    32:11:ee:ac:fb:37:70:ac:3d:59:2a:c1:5a:d8:29:
                    60:b0:92:3e:5f:61:71:ac:9a:16:ca:ce:4b:32:97:
                    9d:03:73:3f:63:85:3a:eb:14:dd:e7:ec:16:ba:92:
                    3f:9a:7b:bd:cc:8a:59:68:bb:b4:26:af:89:ca:f7:
                    80:a2:79:4c:83:8d:1f:b1:19:ec:49:8b:12:3d:f0:
                    29:31:d3:67:50:a9:76:61:ec:eb:f7:d0:d1:50:b1:
                    d4:25:e2:2e:86:7b:3c:79:48:95:2b:82:ee:79:0b:
                    26:92:e6:94:d9:58:57:d3:18:54:0a:27:73:00:b7:
                    49:43:42:53:bc:54:45:bd:65:26:72:d7:d4:d9:81:
                    05:49:be:33:b3:25:1d:88:7d:0a:5a:69:ac:a0:e1:
                    21:ef:d4:1b:49:3c:a3:e4:00:b9:f0:0c:50:e1:03:
                    b1:1c:39:f1:16:d3:31:be:29:ae:3c:2e:fa:3b:c9:
                    80:93:a3:54:6e:24:f7:9f:5b:65:4b:1e:b0:a7:2a:
                    9a:e0:a4:50:68:ea:af:2b:42:ae:10:a7:17:c8:21:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:11:D4:63:FA:F1:08:4C:DF:54:19:DF:EF:7C:10:9C:2A:71:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/e02d1107-7b77-4403-a74d-0fd403cbc10d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.114.204.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19964

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:d4:7e:c0:fd:fd:a9:69:8a:43:95:7e:ed:71:a4:9d:3d:
         7f:07:c1:bd:2b:65:b2:df:23:6f:5e:93:5d:8f:01:db:b7:c4:
         6e:cd:91:95:a4:f8:cf:88:3d:f3:b9:31:cb:e2:75:b4:e3:57:
         a9:fc:d9:50:8f:2e:61:0c:c1:35:3a:e8:42:6e:6d:31:69:32:
         20:4b:69:67:c7:83:d8:64:07:d0:e0:d7:3f:b3:4c:5b:c4:f8:
         2c:bf:18:15:8d:05:32:77:69:e3:59:02:d0:a1:fc:c9:6d:92:
         5c:49:8f:15:bf:ba:68:27:92:ff:20:a4:0e:fc:44:5b:23:2a:
         dd:c7:b5:ed:ff:c0:18:6c:f6:cf:e0:bd:5b:bd:6f:68:cf:ff:
         c9:c6:8a:04:62:70:46:d2:8e:1d:7f:46:78:ed:07:c1:2a:01:
         df:f7:f1:5e:3b:60:00:d4:52:17:78:10:25:ac:30:69:bb:64:
         e5:11:78:09:c4:df:8c:ea:3a:59:44:b7:25:fa:54:5b:50:23:
         34:93:c5:5c:b4:34:25:08:e7:d8:5c:56:b6:0f:e0:04:cc:21:
         6c:82:67:08:1f:de:d1:62:61:e7:e6:15:89:6b:78:1a:d9:26:
         9d:a0:58:70:29:07:3b:a5:8e:d9:a9:23:bf:3b:41:6e:a1:05:
         61:6d:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:44 2025 by rpki-client