This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer
File:                     fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer (raw, json)
Hash identifier:          XIwi7uXAIdLrQYWMgsNws/TMQwyw7HhE6gXuGvnrcGw=
Subject key identifier:   E1:78:80:9D:DE:AA:90:2F:87:4C:E1:7E:AD:35:49:38:01:CF:68:A9
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BD695474436D939D49E9E1F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 19:11:28 +0000
Certificate not after:    Tue 15 Feb 2028 19:11:28 +0000
Subordinate resources:    AS: 402067
                          IP: 23.147.252.0/24
                          IP: 2602:f509::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:95:47:44:36:d9:39:d4:9e:9e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov 12 19:11:28 2025 GMT
            Not After : Feb 15 19:11:28 2028 GMT
        Subject: CN=fc36d1ae-ceb3-4fab-9df1-071c2c65feec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:ad:73:d7:92:d4:39:4b:b3:f6:a6:5d:30:
                    a6:bd:1e:01:2a:9d:23:87:bf:c1:e8:1d:45:47:f8:
                    9c:12:0a:aa:ec:81:79:1c:71:af:3f:7a:a9:c9:71:
                    7c:60:69:ca:65:41:b4:37:20:40:28:3e:66:a8:ff:
                    83:86:bf:fc:e7:a5:f1:90:26:15:0b:97:e0:d4:f3:
                    28:27:df:1b:4f:b2:08:dd:cb:ed:97:aa:e5:ec:ff:
                    37:22:b2:8e:c6:10:b1:1f:33:a7:a7:7d:56:f1:72:
                    cb:81:ee:e6:92:c2:71:5d:99:96:7b:e4:e7:7d:19:
                    69:91:8e:cb:7d:56:69:07:2b:6e:9b:4e:a5:c1:c5:
                    13:e3:c7:23:02:89:fa:7f:03:0a:91:39:89:4a:ed:
                    45:7d:62:6e:d3:6f:68:4a:91:e0:08:ca:61:e4:06:
                    ec:1b:75:3d:ef:2e:b9:60:d3:b3:93:99:19:b9:b5:
                    26:43:9e:61:af:fe:fa:13:8e:6c:9f:97:84:b1:89:
                    03:e6:5d:28:d7:88:f5:5f:d9:b7:c8:8c:62:81:6e:
                    98:75:3d:1a:62:b4:c2:a9:34:dd:9d:b8:53:2d:89:
                    11:d9:72:73:24:8d:19:2a:16:f9:00:63:6f:6b:16:
                    63:fd:fb:af:4d:82:f9:39:df:8a:4d:34:13:6f:2f:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:80:9D:DE:AA:90:2F:87:4C:E1:7E:AD:35:49:38:01:CF:68:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.252.0/24
                IPv6:
                  2602:f509::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402067

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:ea:09:6e:14:1e:3a:36:7e:05:f1:ec:6b:0e:68:c1:05:
         7a:30:37:dc:8a:5f:81:a5:8a:fe:a4:e1:b9:5e:98:ec:09:8d:
         2b:82:37:e1:29:7d:d5:b9:bd:ac:ba:66:d0:0f:6c:85:5b:8d:
         a0:c0:3c:c0:71:e5:6d:20:c5:69:56:e6:ee:df:fe:bf:7d:3a:
         be:fa:4b:66:88:18:8a:3b:05:c3:bd:10:4a:15:8f:6e:33:b3:
         08:85:9d:00:2e:74:cb:cd:04:93:55:94:93:ed:32:29:06:88:
         c5:7d:5c:ec:10:3a:d1:17:a3:4b:82:74:89:e1:f1:6f:fc:06:
         da:74:e5:e5:03:5a:57:96:88:af:a8:a6:45:12:9e:45:87:6e:
         86:b8:88:f5:9d:29:a2:d2:63:58:bc:e0:a0:fd:b7:1d:13:12:
         20:24:00:e4:79:74:5a:5c:ca:c8:5d:c0:2a:85:c5:b9:d8:8b:
         37:9e:90:52:cc:2f:8e:8d:a9:c7:e5:1d:96:0a:2a:b2:9a:f1:
         ae:81:7d:4a:d8:7b:de:85:c6:13:d6:50:fb:e8:70:87:63:5c:
         ba:bf:07:19:a1:a1:e2:a5:8a:29:b5:9b:ae:1b:2f:8d:20:aa:
         68:44:f8:6a:fb:ea:b5:9c:6c:af:cf:02:69:ed:40:b4:ec:e7:
         38:d7:c8:65
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvWlUdENtk51J6eH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTExMjE5MTEyOFoXDTI4MDIxNTE5MTEyOFowLzEtMCsGA1UEAxMk
ZmMzNmQxYWUtY2ViMy00ZmFiLTlkZjEtMDcxYzJjNjVmZWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkytc9eS1DlLs/amXTCmvR4BKp0jh7/B6B1F
R/icEgqq7IF5HHGvP3qpyXF8YGnKZUG0NyBAKD5mqP+Dhr/856XxkCYVC5fg1PMo
J98bT7II3cvtl6rl7P83IrKOxhCxHzOnp31W8XLLge7mksJxXZmWe+TnfRlpkY7L
fVZpBytum06lwcUT48cjAon6fwMKkTmJSu1FfWJu029oSpHgCMph5AbsG3U97y65
YNOzk5kZubUmQ55hr/76E45sn5eEsYkD5l0o14j1X9m3yIxigW6YdT0aYrTCqTTd
nbhTLYkR2XJzJI0ZKhb5AGNvaxZj/fuvTYL5Od+KTTQTby+H7wIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFOF4gJ3eqpAvh0zhfq01STgBz2ipMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m
YzM2ZDFhZS1jZWIzLTRmYWItOWRmMS0wNzFjMmM2NWZlZWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2ZjMzZkMWFlLWNlYjMtNGZhYi05
ZGYxLTA3MWMyYzY1ZmVlYy9mYzM2ZDFhZS1jZWIzLTRmYWItOWRmMS0wNzFjMmM2
NWZlZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXk/wwDgQCAAIwCAMGACYC9QkAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYikzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvH+oJbhQeOjZ+BfHsaw5owQV6
MDfcil+BpYr+pOG5XpjsCY0rgjfhKX3Vub2sumbQD2yFW42gwDzAceVtIMVpVubu
3/6/fTq++ktmiBiKOwXDvRBKFY9uM7MIhZ0ALnTLzQSTVZST7TIpBojFfVzsEDrR
F6NLgnSJ4fFv/AbadOXlA1pXloivqKZFEp5Fh26GuIj1nSmi0mNYvOCg/bcdExIg
JADkeXRaXMrIXcAqhcW52Is3npBSzC+OjanH5R2WCiqymvGugX1K2HvehcYT1lD7
6HCHY1y6vwcZoaHipYoptZuuGy+NIKpoRPhq++q1nGyvzwJp7UC07Oc418hl
-----END CERTIFICATE-----
Generated at Fri Nov 28 06:10:51 2025 by rpki-client