This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0026609-c667-4c0b-9c8a-ba3ca9c74f05.cer
File:                     f0026609-c667-4c0b-9c8a-ba3ca9c74f05.cer (raw, json)
Hash identifier:          LO+5GP/iVmLnVzz2t92rf5zJ0Y1sU6aMTRJmrmq0KVw=
Subject key identifier:   50:1A:09:7E:14:48:C6:4E:2F:6F:C0:D6:3D:38:1F:3B:CF:D1:E1:31
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BFF5CCFDE8F8B18188F8DD080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0026609-c667-4c0b-9c8a-ba3ca9c74f05/f0026609-c667-4c0b-9c8a-ba3ca9c74f05.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0026609-c667-4c0b-9c8a-ba3ca9c74f05/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Nov 2025 09:45:50 +0000
Certificate not after:    Wed 01 Mar 2028 09:45:50 +0000
Subordinate resources:    IP: 23.150.116.0/24
                          IP: 2602:f4b6::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ff:5c:cf:de:8f:8b:18:18:8f:8d:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 27 09:45:50 2025 GMT
            Not After : Mar  1 09:45:50 2028 GMT
        Subject: CN=f0026609-c667-4c0b-9c8a-ba3ca9c74f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:17:49:90:6e:1b:49:34:fa:93:19:ba:a7:
                    d7:2c:19:1d:12:ae:9f:7e:83:01:bb:c0:b0:cd:65:
                    06:a6:80:47:b9:32:f3:b3:f7:3e:f2:09:02:ea:0a:
                    c4:38:ba:16:94:97:e5:b7:c2:47:30:14:f5:b6:b5:
                    a7:8e:fd:48:55:f5:25:83:73:38:49:88:a3:12:3b:
                    3c:74:61:a9:f3:84:49:b8:86:11:84:92:ca:29:43:
                    dd:2c:31:35:25:bb:4b:91:62:63:aa:ea:d6:3d:57:
                    8d:90:2d:8e:8e:b5:da:bc:6f:1c:97:b1:8f:63:64:
                    e3:69:5b:d9:78:93:60:4c:5a:50:e8:9d:07:18:b2:
                    97:6b:62:57:bc:6a:d6:d1:ac:b8:b1:88:c3:03:1e:
                    d8:c3:25:f2:06:71:b4:b9:3e:b7:48:26:42:00:5a:
                    ff:a5:4a:9c:02:79:74:7d:88:ed:92:50:c2:c8:e5:
                    c1:97:f6:06:45:67:3f:d4:8d:7b:2b:67:9d:37:4b:
                    5b:e1:88:92:f1:2b:98:26:2f:ed:e7:34:81:63:c2:
                    6c:a2:75:0c:e5:08:5e:77:3a:d9:c1:e1:52:b3:6b:
                    78:ea:96:99:4f:41:b0:2e:89:d2:cc:67:5f:2b:3d:
                    db:32:49:60:4f:38:75:14:66:d2:d5:19:f6:9d:03:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1A:09:7E:14:48:C6:4E:2F:6F:C0:D6:3D:38:1F:3B:CF:D1:E1:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0026609-c667-4c0b-9c8a-ba3ca9c74f05/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0026609-c667-4c0b-9c8a-ba3ca9c74f05/f0026609-c667-4c0b-9c8a-ba3ca9c74f05.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.116.0/24
                IPv6:
                  2602:f4b6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:4d:ca:a6:e9:03:1e:c2:25:e1:63:d5:93:8b:b4:f0:7a:
         90:95:a6:3b:b7:5e:29:ed:d6:93:66:ab:2a:47:d9:5c:2b:2b:
         96:2e:0c:a1:a9:d8:86:56:31:b9:95:f6:61:2a:b7:51:2c:f9:
         e8:4a:2a:ba:fb:d8:a2:5e:d0:a2:7a:9a:85:06:4c:12:58:e2:
         d5:15:d2:dc:71:ee:89:b7:92:28:f3:d7:c4:a1:80:09:01:68:
         03:11:4b:54:df:7f:d7:d6:bf:b3:d6:f5:82:b9:d8:73:1d:e6:
         09:b2:c8:37:ae:f8:bc:c5:db:ee:3f:dc:bd:b1:e1:5e:1b:35:
         3d:a3:a6:95:26:21:b6:6e:39:7b:56:62:90:9b:d8:94:fc:45:
         51:b7:a0:2d:0d:11:56:15:0b:ea:05:24:16:29:7a:e7:95:fc:
         a3:6d:75:ac:b7:79:71:b9:e4:bb:ec:18:c2:f8:17:fc:a3:43:
         92:30:4f:01:25:d7:75:e5:94:f2:32:2c:2f:56:eb:f8:c8:1c:
         08:3c:72:62:64:d4:1d:1d:10:9b:54:d5:94:3e:c0:94:1b:8a:
         15:2d:1e:e3:a5:7b:f1:1e:d7:69:74:18:51:5b:a8:e6:81:b0:
         28:02:16:78:17:8c:8a:b6:bb:a2:f1:32:35:b5:31:ef:0e:dc:
         47:3d:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:11:45 2025 by rpki-client