This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ae639d-df4d-41a8-91fe-9df2164d7dde.cer
File:                     e8ae639d-df4d-41a8-91fe-9df2164d7dde.cer (raw, json)
Hash identifier:          zb+saXHN+Ld72renKDGIL4zB8j63guULCxO+9s/OmlE=
Subject key identifier:   B1:84:A2:28:58:C5:5F:C4:12:2D:09:84:53:6C:18:84:3D:FB:91:94
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BC6C95257184F24195B7456E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ae639d-df4d-41a8-91fe-9df2164d7dde/e8ae639d-df4d-41a8-91fe-9df2164d7dde.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ae639d-df4d-41a8-91fe-9df2164d7dde/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Nov 2025 03:23:23 +0000
Certificate not after:    Thu 10 Feb 2028 03:23:23 +0000
Subordinate resources:    IP: 23.149.4.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c6:c9:52:57:18:4f:24:19:5b:74:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov  7 03:23:23 2025 GMT
            Not After : Feb 10 03:23:23 2028 GMT
        Subject: CN=e8ae639d-df4d-41a8-91fe-9df2164d7dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:2e:63:79:91:ae:ca:2a:01:c2:f1:cb:c5:
                    dd:93:17:f1:a5:eb:9b:9f:16:b7:93:f5:cf:e7:61:
                    b2:da:d8:89:3d:d2:81:df:6e:00:e8:cb:3b:69:e4:
                    bd:22:64:4a:60:75:1d:4f:81:cd:ef:c5:0a:3f:3e:
                    92:f5:27:b2:e7:33:b4:ec:7b:e3:ba:46:5b:e3:3b:
                    88:e0:ac:67:0c:cb:70:e4:b8:6f:f6:f9:12:e7:65:
                    54:42:0f:79:14:fd:8b:af:ee:66:b2:ad:66:29:b0:
                    c0:99:42:6c:d5:a4:8d:5b:7d:6d:8b:4f:0d:79:a4:
                    10:d0:b0:ad:54:1d:19:dd:a7:5f:56:9f:c1:56:49:
                    62:1c:9c:70:1c:fa:67:11:51:88:9c:7a:70:6d:c5:
                    d7:52:8b:44:15:e4:05:1f:20:b4:00:e7:19:f9:a0:
                    50:a0:f1:d0:90:ea:e9:61:14:d3:7d:bf:26:79:a0:
                    89:73:fa:dd:c2:46:9b:03:1f:57:6f:97:e9:c8:9c:
                    1e:3c:90:e0:87:64:24:66:54:dc:60:02:5a:71:99:
                    c7:91:0e:cb:5d:20:cb:52:11:c8:be:ea:df:f4:49:
                    e2:12:b6:47:c4:74:7b:1e:1d:96:84:e3:41:07:dc:
                    c3:28:1c:ce:da:69:d9:d8:b1:94:f6:48:9a:91:17:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:84:A2:28:58:C5:5F:C4:12:2D:09:84:53:6C:18:84:3D:FB:91:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ae639d-df4d-41a8-91fe-9df2164d7dde/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ae639d-df4d-41a8-91fe-9df2164d7dde/e8ae639d-df4d-41a8-91fe-9df2164d7dde.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:71:dc:b7:7d:f7:12:a9:42:f3:dc:f8:6c:9d:1e:fe:56:f1:
         e6:66:a9:60:93:ff:7f:51:c4:bf:5d:ec:c1:87:c8:b3:6d:df:
         6e:5d:b2:2c:f0:7a:7b:ed:b9:29:e7:65:6d:67:cb:30:fa:98:
         19:7c:91:d7:16:48:9f:80:e1:de:d2:df:53:42:59:99:51:18:
         db:dd:3a:ec:09:93:8d:4b:c6:22:00:7a:39:b6:08:ab:66:dd:
         0f:3e:c5:29:96:a4:46:d6:0b:40:da:13:06:dc:e9:ba:80:82:
         fb:b5:80:7f:7f:91:8d:37:d8:18:7a:c7:db:1b:7e:45:d8:4a:
         af:4d:e9:b5:03:ae:72:6a:60:c0:d7:4a:e2:70:d4:6a:51:5c:
         2e:71:37:2a:16:4c:d1:d3:2c:52:3f:18:08:a6:f4:60:53:d2:
         74:5d:b2:3d:0c:05:d6:c7:54:00:49:93:99:d1:4d:c5:c2:8c:
         1a:3f:63:70:e0:64:fb:43:da:d4:96:1a:af:2d:93:4c:b7:eb:
         a9:b9:02:78:92:64:73:b3:b0:10:75:6a:2d:fc:23:dd:7e:05:
         93:03:94:46:34:71:55:83:f2:7f:98:1a:80:8f:98:7a:48:b6:
         2a:1a:cf:81:dc:80:71:f2:40:4c:dd:d6:94:f7:47:e3:44:3f:
         c1:38:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:47 2025 by rpki-client