This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer
File:                     1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer (raw, json)
Hash identifier:          5aEdnFKibKYl2W3zeR3HuJTkAAtQKY5aEOFULZxt2Hw=
Subject key identifier:   91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C37E1F3874D546C93426246CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 15:39:22 +0000
Certificate not after:    Mon 20 Mar 2028 22:03:01 +0000
Subordinate resources:    AS: 20382
                          IP: 2604:2da0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:37:e1:f3:87:4d:54:6c:93:42:62:46:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 17 15:39:22 2025 GMT
            Not After : Mar 20 22:03:01 2028 GMT
        Subject: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:ac:a1:08:2d:a1:e0:e8:3e:14:fd:39:15:
                    f4:d7:1c:b2:4f:d6:82:28:df:b0:35:f9:09:dd:49:
                    46:2a:5c:f5:3d:0d:46:ed:98:c3:c5:76:65:03:7c:
                    d5:be:67:87:3b:10:ef:20:65:7a:8a:05:ce:49:e0:
                    b1:0e:27:0f:7a:81:1d:c7:7b:3e:4c:e9:b8:05:7a:
                    b3:6b:39:12:de:fd:44:5a:3c:bc:05:1e:08:a3:1d:
                    46:77:8e:ec:e7:8d:6f:b9:b7:e3:b3:f5:f6:e0:85:
                    80:82:b8:a1:eb:44:43:c6:0e:bf:8f:68:e1:3e:53:
                    45:97:d6:b1:0f:3d:d4:f5:3b:25:5e:a4:06:3f:63:
                    50:52:ff:9b:ed:f1:86:14:43:fb:19:bf:28:58:be:
                    37:91:c8:47:cb:22:a9:f4:57:6e:dd:34:2f:8b:36:
                    6f:56:89:03:98:a8:cc:1f:c1:87:92:30:56:6e:0e:
                    7c:36:b1:f8:6a:77:e6:5c:8e:72:bb:58:82:0a:3f:
                    82:c9:2e:11:9d:87:0f:20:8d:40:b0:77:0c:db:f7:
                    03:c6:ae:51:be:06:1d:23:74:7a:19:82:64:1b:9e:
                    a0:74:cd:8b:a9:27:51:b1:a5:45:a6:78:a5:a3:33:
                    66:57:1b:eb:5b:8d:5d:0a:00:8b:1e:10:ae:6f:af:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20382

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:a4:f5:ea:5e:c9:ef:c1:8a:cb:89:c1:f7:e8:7f:32:d3:
         d2:9f:4d:77:86:28:d4:51:d5:e3:74:f0:bf:03:c4:18:8e:ca:
         4c:b2:61:9c:99:78:74:a1:71:cb:21:1a:1f:12:28:da:e8:a5:
         57:61:85:a2:4c:85:2f:9b:1e:ea:59:af:30:0c:6c:4d:b4:c8:
         4a:19:7b:de:2a:13:21:e6:75:4c:15:9e:35:b8:bd:dc:67:e4:
         aa:1b:62:05:56:68:79:d8:fc:37:f6:aa:b3:a1:ec:48:50:9d:
         34:fd:c8:44:36:62:2a:2f:c1:54:ab:fc:41:88:56:01:72:f0:
         73:3f:b6:87:86:c6:e6:55:c4:81:ef:a9:67:1c:45:f8:6f:86:
         7e:2c:ad:bc:99:e4:b2:94:21:86:44:db:df:23:ae:0b:48:d9:
         17:c6:fe:ba:ce:75:bf:0b:27:1b:9f:03:74:b2:03:06:94:d0:
         f4:65:c7:b3:7c:0e:09:d8:66:58:01:d4:cf:61:04:07:9d:60:
         c1:fb:19:c5:12:04:7f:e7:03:e3:d2:1a:d0:23:77:ed:35:ed:
         25:dc:d4:23:a4:b8:27:c2:28:4f:0a:6d:11:35:13:19:83:8a:
         34:9a:60:85:fe:9e:ba:5c:52:22:c1:21:13:a1:18:b2:43:31:
         8a:74:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----