This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f897e53b-28d8-44bc-8da0-13598d9bad5f.cer
File:                     f897e53b-28d8-44bc-8da0-13598d9bad5f.cer (raw, json)
Hash identifier:          6XaXWaBQTVFDFEMix9K5XfmHI8fWrRSJkIMlky+Z2os=
Subject key identifier:   F6:80:ED:66:99:F6:04:A5:A4:FE:4B:D0:26:DB:32:FB:56:FC:5F:D7
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BFC6B1A4CC636AC8D8A287980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f897e53b-28d8-44bc-8da0-13598d9bad5f/f897e53b-28d8-44bc-8da0-13598d9bad5f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f897e53b-28d8-44bc-8da0-13598d9bad5f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Nov 2025 08:27:12 +0000
Certificate not after:    Tue 29 Feb 2028 08:27:12 +0000
Subordinate resources:    IP: 23.150.36.0/24
                          IP: 2602:f4ba::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fc:6b:1a:4c:c6:36:ac:8d:8a:28:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 26 08:27:12 2025 GMT
            Not After : Feb 29 08:27:12 2028 GMT
        Subject: CN=f897e53b-28d8-44bc-8da0-13598d9bad5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:af:dd:ff:b5:83:ed:32:d6:a3:45:19:84:
                    3d:e3:6d:ec:e1:1d:b3:3a:08:65:d2:d6:f7:df:22:
                    6f:15:48:6c:c0:64:ee:cc:02:0b:de:31:39:fc:8f:
                    7e:8e:05:f6:f0:3b:9a:3a:e5:b5:d4:3d:0f:ad:99:
                    d5:2f:3f:a9:4b:2e:1e:49:a7:44:66:1a:47:ef:60:
                    d0:fa:56:97:e9:58:d4:23:bb:13:1b:f5:c2:7e:89:
                    3e:6f:5f:00:a1:5e:80:0f:90:e3:20:9a:d8:68:4d:
                    2e:a3:b0:ca:92:9a:9d:6f:bb:c7:cf:69:5a:56:eb:
                    b1:ae:36:6b:a6:67:57:05:62:b1:ef:d6:3a:b8:6e:
                    57:d1:05:19:d0:cb:aa:f6:b8:6e:1f:91:f0:08:9e:
                    60:55:d7:df:3a:b1:cf:dd:18:ca:b0:c9:13:21:d0:
                    7c:20:9e:e0:cf:09:36:57:ef:1e:0e:c0:ca:ea:8a:
                    02:59:62:9b:d3:9a:e3:97:6e:61:2e:e0:dc:45:4a:
                    13:ce:9d:f1:f0:2e:55:d6:64:0f:56:1c:cb:5f:3b:
                    93:d3:19:30:c1:cd:45:f1:85:85:8d:f4:a7:13:74:
                    3e:b7:cd:a6:9c:8a:eb:59:4a:70:84:a2:29:fe:b3:
                    3b:89:5d:b0:ef:3f:4e:95:12:2e:d3:23:ae:4b:84:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:ED:66:99:F6:04:A5:A4:FE:4B:D0:26:DB:32:FB:56:FC:5F:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f897e53b-28d8-44bc-8da0-13598d9bad5f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f897e53b-28d8-44bc-8da0-13598d9bad5f/f897e53b-28d8-44bc-8da0-13598d9bad5f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.36.0/24
                IPv6:
                  2602:f4ba::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:12:5d:69:1d:56:3a:4d:74:be:42:42:2a:48:64:ac:35:6c:
         6e:a4:73:62:b0:1d:70:59:54:cb:69:ef:a5:16:8a:c7:01:4c:
         49:32:31:c5:42:1a:cb:41:76:c9:54:b1:95:7f:28:fc:80:5e:
         45:fb:32:67:76:83:6f:a4:59:9d:69:0c:89:2b:06:06:3a:fb:
         9d:c2:2b:99:72:d9:b7:da:ef:b0:96:4c:d5:87:6a:30:80:4a:
         bd:b8:e3:04:c1:74:3f:b9:0d:45:43:a5:e7:36:a8:6a:a3:7c:
         11:5b:2f:52:50:f5:29:9d:53:87:5f:c9:48:e9:98:81:31:ba:
         68:c3:d2:20:50:40:7c:07:ff:e7:3b:fd:ac:2e:b0:65:ee:55:
         46:17:c1:d4:fb:65:36:81:b2:ca:09:1f:9e:2a:7c:57:09:4b:
         fe:db:28:55:78:d9:af:4b:a9:31:c7:d1:b4:89:34:40:29:b6:
         ad:27:6b:3f:dd:bb:28:ce:5b:74:96:10:82:60:0c:a1:d9:f0:
         42:68:13:18:8e:6f:b8:cb:65:43:a4:3e:a5:16:af:d4:da:bd:
         ac:52:27:76:18:9f:54:d8:f4:67:ea:f2:7f:24:86:35:04:6b:
         3f:ae:54:08:6c:09:24:e3:ec:16:24:b6:9b:da:31:1d:92:7f:
         51:7d:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:12:01 2025 by rpki-client