This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02d92580-e184-45d9-83d1-038a9fbb183a.cer
File:                     02d92580-e184-45d9-83d1-038a9fbb183a.cer (raw, json)
Hash identifier:          zI97pvWhf0B+7QvoW0hFoxIGm2CSTsTaYxkEhGkKi5E=
Subject key identifier:   0A:75:D3:0B:A5:98:EC:91:C1:5F:13:A1:96:F4:C5:B8:32:B1:31:C8
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C1FAC9DF42448069452708ED0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02d92580-e184-45d9-83d1-038a9fbb183a/02d92580-e184-45d9-83d1-038a9fbb183a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02d92580-e184-45d9-83d1-038a9fbb183a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Dec 2025 23:32:30 +0000
Certificate not after:    Sun 12 Mar 2028 22:32:30 +0000
Subordinate resources:    AS: 14398
                          AS: 18716
                          AS: 22570
                          IP: 2601:6000::/28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1f:ac:9d:f4:24:48:06:94:52:70:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec  8 23:32:30 2025 GMT
            Not After : Mar 12 22:32:30 2028 GMT
        Subject: CN=02d92580-e184-45d9-83d1-038a9fbb183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:e9:76:75:c9:1a:5d:ad:3b:fd:f5:3a:de:
                    68:a3:6e:2b:ab:71:a9:d6:5d:b8:95:b7:dc:b3:6b:
                    e6:45:12:de:a0:6e:6a:d4:ea:00:5c:7b:11:bf:2c:
                    50:2b:a7:58:ff:57:e0:d0:6a:11:5d:b7:67:a9:ce:
                    a2:cf:01:ef:cb:5e:86:1d:37:9f:e2:1e:b3:2e:77:
                    33:ad:94:a7:51:44:29:ab:61:05:6d:81:7f:47:99:
                    d9:79:49:15:c4:88:77:65:bd:da:61:97:f6:20:87:
                    cb:33:70:cd:32:cc:a0:91:e2:d8:cf:73:cb:8d:a7:
                    86:c6:6f:05:d2:32:a3:98:21:2c:5d:c8:fb:51:5e:
                    e6:bb:ad:d4:75:9e:03:c8:65:7d:a7:30:8b:ff:b6:
                    db:e9:60:17:f5:66:97:70:c3:8c:f4:b0:3f:55:0c:
                    2a:91:25:37:2d:8d:c6:73:41:c5:e2:a0:44:d7:08:
                    99:e3:e2:1c:37:62:f9:cd:21:4e:d4:5a:85:50:01:
                    f5:99:2c:88:bf:ed:da:f4:17:80:97:cb:17:fe:73:
                    a3:ba:86:a9:bc:63:e1:c0:54:e6:f7:9b:41:98:06:
                    02:49:6e:78:63:cb:e1:af:65:b9:05:9e:e4:61:b3:
                    d1:9c:5b:2e:f1:29:d3:18:30:fe:4b:57:2a:45:14:
                    63:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:D3:0B:A5:98:EC:91:C1:5F:13:A1:96:F4:C5:B8:32:B1:31:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02d92580-e184-45d9-83d1-038a9fbb183a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02d92580-e184-45d9-83d1-038a9fbb183a/02d92580-e184-45d9-83d1-038a9fbb183a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:6000::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14398
                  18716
                  22570

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:b1:f5:ef:30:60:57:53:8a:46:ac:0a:d3:2a:6b:2d:36:
         0e:a9:a4:fd:f4:c5:5e:0a:f0:77:c3:97:e8:2d:b3:60:e0:c0:
         40:46:e1:19:89:b2:40:98:f6:a6:92:e7:c6:56:cc:cf:c5:a8:
         69:76:af:e8:73:4a:a3:0a:73:23:5c:28:e1:bd:a8:36:d3:6f:
         9f:56:60:27:84:30:80:b1:80:a4:d0:0d:68:b8:ca:17:e9:a0:
         8a:c8:5f:db:13:61:13:32:cb:53:1e:c2:fb:b2:66:56:c7:2f:
         9b:f2:d8:f2:50:4e:82:ba:c2:3a:2e:6d:c9:7b:ce:cf:1d:4c:
         2d:6b:74:28:3c:d4:21:79:d9:43:2b:18:8f:f7:31:16:eb:79:
         fc:30:2a:ce:81:63:2d:e3:db:81:5c:af:44:76:6e:ef:24:7e:
         63:73:3e:91:a8:9f:14:7a:f9:b0:d4:41:1b:c0:68:6b:5b:98:
         a3:7d:89:4f:db:c3:46:ce:50:e5:8c:3b:69:d4:4a:f2:45:1c:
         f0:24:b3:ca:0c:a4:f5:5c:8c:1e:2e:00:f4:33:63:e7:c4:e5:
         4f:fa:f0:de:1a:31:f1:bc:1a:db:99:3a:e6:89:88:91:a0:a8:
         84:19:43:58:9e:ec:bf:ab:f5:80:ad:37:68:41:1d:66:8e:0e:
         29:7e:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----