This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
File:                     2b41a59d-bac0-456f-82a5-a12979543eff.cer (raw, json)
Hash identifier:          zH0MS6cyWOGLy7AnA3yKnFqyljbKUpBkcPA5VuSR0/k=
Subject key identifier:   72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BA252AE825EE782C05462E5C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 25 Oct 2025 01:55:15 +0000
Certificate not after:    Fri 28 Jan 2028 02:55:15 +0000
Subordinate resources:    IP: 2602:f4fb::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:52:ae:82:5e:e7:82:c0:54:62:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Oct 25 01:55:15 2025 GMT
            Not After : Jan 28 02:55:15 2028 GMT
        Subject: CN=2b41a59d-bac0-456f-82a5-a12979543eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:27:2a:3a:b6:3e:d6:cc:ca:7a:bb:95:9f:
                    49:4a:f2:46:69:0f:c1:07:48:1e:d5:9f:cf:9e:2c:
                    cd:79:03:8a:df:ca:53:94:9b:a1:db:4e:63:5d:b8:
                    2b:f3:05:3b:5f:72:7c:f7:e5:f9:ca:3a:25:25:87:
                    b2:72:ee:cc:44:6c:5e:80:bb:7a:21:15:f8:e6:d9:
                    f2:bd:41:d5:7e:c4:d0:ea:3f:e0:37:07:8a:c0:37:
                    93:db:6a:17:1f:63:f5:9b:f7:dc:56:1b:04:cb:3c:
                    1c:02:98:ab:ac:6f:3f:30:30:5d:a3:f4:20:b1:19:
                    69:f5:6b:5e:00:71:1b:b2:73:ee:99:a8:ef:63:03:
                    03:f4:26:58:a8:d0:7f:14:7f:00:46:16:79:b7:12:
                    dd:5d:d9:8a:ab:0e:0d:21:0f:87:4f:71:f5:76:db:
                    10:60:0f:8f:32:8d:be:f2:e9:b6:a1:d5:6d:19:8b:
                    2f:e2:0d:8e:5b:a2:ca:c5:af:ec:33:48:36:f0:eb:
                    62:2d:19:88:18:cf:c4:e2:ed:d6:79:be:6a:56:83:
                    77:9a:fe:9b:10:6c:bc:d0:c0:a2:5d:98:9c:ff:44:
                    38:f3:64:95:54:98:f1:dd:df:fc:9a:08:1c:c2:6c:
                    ad:cb:c2:37:e8:66:42:a7:ac:ce:44:c4:60:ed:ae:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4fb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:33:77:59:5d:db:79:72:8d:4c:a2:91:df:b9:e3:f2:09:
         73:69:f6:2b:e4:23:95:43:41:6d:5b:07:96:dc:c1:a7:fc:64:
         ec:62:97:88:4f:27:bd:00:dc:05:88:2d:39:60:08:81:a7:ba:
         e2:d6:00:9c:d0:57:68:f3:ae:43:3b:7b:73:87:d1:ef:27:25:
         85:0c:0d:a4:4d:c6:78:c4:ef:4c:c7:b9:54:86:b6:98:20:6d:
         5a:8b:ca:f6:3e:1b:84:c3:e3:e7:c2:31:90:d2:8e:3b:5f:d4:
         05:41:5b:e2:21:f2:a9:b1:e3:2c:4d:da:90:c8:32:ac:30:c4:
         53:f8:2a:68:cb:d7:ba:ef:4f:e3:35:97:c2:04:58:52:24:0c:
         fb:ec:41:a1:f4:ba:c3:31:eb:2b:d6:f5:ff:58:a9:9f:19:98:
         32:cc:7f:6f:b3:dd:c8:90:be:f2:5e:a7:e1:8e:e8:34:60:cb:
         f9:21:5a:fa:3a:5b:70:cc:ac:3e:f9:ba:4a:1b:57:f0:4c:a0:
         b6:94:ea:77:fa:37:f1:34:29:b9:a7:e7:29:41:f2:e2:48:02:
         93:d2:67:c9:13:d4:e9:59:59:ca:46:cc:c6:98:fe:fd:72:a7:
         8a:4d:f4:63:eb:9c:fc:4b:6b:06:fb:fe:52:ef:ed:8c:49:55:
         19:5c:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----