This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
File:                     eea0cb92-050e-479f-bff4-dddd68eb4e04.cer (raw, json)
Hash identifier:          WFh21DLk+408jEQc83OmsgFUYL2JaSRr+q1inEpeyuE=
Subject key identifier:   F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BD698B11FFE2950FCECB7BD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 19:18:21 +0000
Certificate not after:    Wed 09 Feb 2028 15:36:09 +0000
Subordinate resources:    AS: 40806
                          IP: 23.149.124.0/24
                          IP: 2602:f4d9::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:98:b1:1f:fe:29:50:fc:ec:b7:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 12 19:18:21 2025 GMT
            Not After : Feb  9 15:36:09 2028 GMT
        Subject: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:fc:27:fb:d3:39:07:33:d9:fe:05:8f:6e:
                    69:ad:a1:09:8c:29:e2:8e:ae:b4:25:c2:c4:43:3b:
                    88:ed:68:e5:ca:b7:ca:2a:de:f6:83:7d:ae:14:c6:
                    c3:c7:48:37:72:ae:07:70:90:99:89:94:5a:09:6b:
                    46:ca:c7:fd:cc:19:a9:93:7d:f7:25:87:43:a2:08:
                    d5:3c:68:7a:9e:41:b3:f2:1e:75:c6:db:fd:b3:79:
                    49:7b:54:63:68:50:cf:31:fe:0c:6f:73:cf:54:9f:
                    d5:ea:e6:88:56:52:5b:bb:cc:5d:a5:8f:70:15:1c:
                    ea:2a:ee:d2:34:d2:4e:6e:8b:da:03:97:10:1b:70:
                    5d:24:8a:19:90:ca:02:9d:39:48:90:f1:5a:38:0a:
                    13:01:37:d9:e4:19:72:be:09:d7:86:c3:5d:f6:59:
                    d6:4e:d2:bc:35:fe:49:1c:fb:86:74:aa:3c:b1:b8:
                    54:f7:48:c4:e6:e4:bf:e6:02:9f:97:9f:dd:58:13:
                    c2:6b:fc:60:38:5d:69:01:ed:7f:2e:61:ad:98:4b:
                    ee:76:12:75:94:c0:22:53:1c:36:96:9f:f6:d1:ad:
                    a9:62:1d:3d:c8:0c:eb:02:bd:bb:ab:fe:d0:72:dd:
                    36:9f:e3:c7:cf:70:90:d7:8e:a4:9c:eb:0d:ae:81:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.124.0/24
                IPv6:
                  2602:f4d9::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40806

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:31:51:33:3b:85:0e:2b:8b:47:ec:7d:4b:90:66:38:94:0f:
         cf:4a:b4:a4:69:6b:ee:8f:66:db:d0:92:35:72:1b:44:a3:4b:
         37:86:6d:70:7b:e2:0f:9b:c8:37:7f:55:af:4f:6b:50:dd:d6:
         4e:25:ff:50:cd:51:93:72:03:69:2b:f5:cf:6b:70:d5:06:6a:
         bd:45:e8:71:4f:eb:88:a9:60:17:c2:75:67:36:5c:de:d0:6c:
         44:d8:8c:3c:51:c4:e7:32:64:74:82:bc:87:74:44:c6:00:a9:
         30:d0:d7:14:0b:4c:b1:aa:f1:4c:59:6f:13:c5:46:59:c3:15:
         f4:88:f8:82:bc:20:00:7d:b9:33:32:31:56:5b:85:6e:39:5f:
         7a:ea:b6:ae:ae:f5:6e:19:60:a0:cf:8e:f6:99:68:20:4e:99:
         9c:26:fb:a1:e3:fb:1b:47:91:9b:37:70:ee:b7:8c:c5:3c:a0:
         46:57:37:d3:2a:18:2d:14:07:96:28:14:de:8a:bb:5d:75:35:
         6d:26:66:40:a4:56:6e:fb:ce:e5:c3:9b:71:72:1b:a7:29:aa:
         f7:da:74:f3:29:d7:d2:c3:d6:87:46:96:fd:bb:d4:2b:c2:4f:
         fa:68:5e:7a:6b:c0:77:14:22:09:01:91:26:7f:b4:83:b1:35:
         c5:2e:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:01 2025 by rpki-client