This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer
File:                     fac97b3d-4c08-472b-89c2-d580150a0c8e.cer (raw, json)
Hash identifier:          4EhYwkvPi2jKoWTgIRLjYCgx1LVl68Lw6j9e7Q9D3aI=
Subject key identifier:   50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BE3C6FFF84E3157548353A480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Nov 2025 12:37:09 +0000
Certificate not after:    Sun 20 Feb 2028 12:37:09 +0000
Subordinate resources:    AS: 36797
                          IP: 199.87.196.0/22
                          IP: 208.76.200.0/22
                          IP: 2607:f0c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e3:c6:ff:f8:4e:31:57:54:83:53:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 17 12:37:09 2025 GMT
            Not After : Feb 20 12:37:09 2028 GMT
        Subject: CN=fac97b3d-4c08-472b-89c2-d580150a0c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:82:e2:7d:b1:e7:49:1f:16:f3:01:87:a7:
                    ef:ad:94:22:e4:5e:00:bb:3c:05:27:9a:08:17:2c:
                    41:bd:f9:de:9a:c1:78:f7:36:83:57:7a:3a:83:5c:
                    81:1c:a0:a2:fd:2e:97:55:1a:76:e3:5b:7c:f3:bc:
                    96:1b:dd:0c:fd:8e:5b:f5:bd:bb:00:eb:16:29:62:
                    d5:4d:a6:75:8c:21:33:02:ab:db:c7:4b:08:bb:7c:
                    2d:80:da:20:39:a2:bd:28:09:d9:32:0d:5a:28:8f:
                    d9:0f:87:5e:42:8a:9f:80:60:8e:c0:d9:84:fd:3b:
                    be:25:5e:11:23:05:75:08:f7:92:3c:0e:ab:1a:04:
                    22:23:00:e0:7e:91:e8:d1:56:ff:84:44:1f:da:1b:
                    35:75:af:04:8c:44:6c:f8:0b:a9:ae:91:4e:44:4d:
                    63:f1:78:f4:e5:23:c2:2c:f1:48:66:a0:7e:8f:2d:
                    68:ec:08:37:c7:21:88:6c:61:13:c0:c2:e0:42:6b:
                    b4:8a:81:ea:86:61:bd:6e:2d:49:b7:ca:f5:05:ab:
                    d8:e3:03:9f:93:1e:d3:5f:f8:1e:01:25:96:1f:75:
                    cf:58:ca:5e:1f:f4:c2:0d:bf:d8:a7:37:1e:67:dd:
                    c2:37:e7:5f:c0:14:4e:b8:13:30:e6:f8:64:26:90:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.196.0/22
                  208.76.200.0/22
                IPv6:
                  2607:f0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36797

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:75:81:4e:f9:38:3d:1e:e9:bb:95:05:b1:b6:e9:75:94:ac:
         5d:8e:5c:50:19:d0:b7:b1:7e:55:3b:ec:27:d2:7c:29:8b:9b:
         99:6c:4a:98:9e:51:9f:63:c5:e1:6b:b6:4f:bb:cf:16:5b:f8:
         77:15:4e:1f:c4:57:fc:fc:4f:86:22:52:28:13:6c:61:be:20:
         be:7b:c2:64:24:c4:6f:e4:09:93:32:3a:4a:f9:f4:89:c3:a8:
         fb:30:f0:fc:78:82:81:e8:6f:43:ff:7f:f7:32:a7:f8:0d:67:
         96:6e:4b:2f:d1:32:45:c2:46:50:53:cd:39:f5:c9:b1:43:96:
         20:48:38:9b:59:8c:f0:05:58:97:a5:07:fb:4e:1a:4f:82:92:
         15:05:7e:dd:ba:4e:c3:76:c0:18:c3:da:59:ef:95:d8:a6:65:
         5d:c5:23:83:37:55:37:74:60:f5:09:b7:1f:68:ed:79:ed:df:
         1b:db:1c:0b:02:a6:45:08:33:71:a7:10:1d:de:3b:75:6d:a8:
         bd:ca:a8:55:d5:05:b6:fa:7f:a9:2b:db:89:df:56:7f:1d:a1:
         33:20:4d:22:9f:a1:fb:83:2e:88:c7:e4:5f:4c:0f:c0:82:f7:
         79:ac:c1:13:30:67:c3:e0:90:07:80:10:40:8d:eb:fa:0f:64:
         f8:46:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:13:38 2025 by rpki-client