This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer
File:                     60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer (raw, json)
Hash identifier:          k64k9fF3SZB9zmbV+JD5yNwOW4t/5s/Fx2C2Lb4Haf4=
Subject key identifier:   42:08:21:29:9F:A6:CB:AE:CB:C7:5D:9D:66:63:10:18:8F:68:FD:F4
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C27B935A978268AE9D9FE8700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 20:44:20 +0000
Certificate not after:    Wed 15 Mar 2028 19:44:20 +0000
Subordinate resources:    AS: 31945
                          IP: 2602:f49a::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:27:b9:35:a9:78:26:8a:e9:d9:fe:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 11 20:44:20 2025 GMT
            Not After : Mar 15 19:44:20 2028 GMT
        Subject: CN=60cf5ad8-4c66-4ed9-8456-123c69bdd612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:e3:21:36:09:06:a5:41:e7:45:63:f9:26:
                    c9:64:42:24:68:0f:44:ed:ef:74:39:9a:8b:ae:23:
                    b1:d8:58:8e:95:0a:cd:7c:3f:7f:3e:ea:94:e8:97:
                    0b:3f:1a:c9:f5:0f:0f:42:f9:f2:5e:37:cc:84:d7:
                    48:1e:e1:68:42:71:fb:97:ce:d5:fa:d7:67:f2:46:
                    6e:0b:81:49:eb:c0:42:aa:9c:60:fe:c6:15:0d:1a:
                    de:17:76:d0:ac:39:8d:10:7a:06:52:05:8d:69:7b:
                    7d:1d:22:ba:9a:eb:78:e4:2e:aa:14:0e:d7:15:b4:
                    1f:3d:bc:09:96:1b:a3:ee:5e:8b:57:62:e2:d6:b3:
                    78:61:f5:18:c5:e3:44:52:58:1c:63:f6:00:89:7f:
                    4e:40:ca:0e:a1:45:97:44:01:81:74:d6:26:71:6b:
                    98:71:6c:6e:44:7b:e5:18:65:c3:da:a5:18:57:6f:
                    f4:27:43:f1:68:09:0e:c7:1e:bb:54:65:7c:2d:93:
                    13:08:f7:a2:43:bf:0d:5d:65:85:c5:80:40:c1:31:
                    88:35:5d:de:f7:0d:99:52:ce:1d:4b:38:5f:f6:53:
                    07:a4:c9:7f:b6:14:30:bf:de:dc:d6:1a:44:31:ad:
                    19:65:57:70:26:f4:96:fc:43:4f:48:c5:ee:6e:fa:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:08:21:29:9F:A6:CB:AE:CB:C7:5D:9D:66:63:10:18:8F:68:FD:F4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f49a::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31945

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ac:c9:8c:0e:ff:d2:22:ca:e5:65:82:f4:2f:80:20:f8:c6:
         4f:30:1e:81:91:b1:00:3a:a0:0d:2e:5f:1d:8c:8f:69:15:bf:
         e8:b1:50:cc:15:91:c0:81:ad:8d:fa:e9:b8:03:b5:4b:90:5a:
         99:9e:9a:e5:5a:38:e9:d0:b9:90:5d:d9:00:d5:b0:1d:6d:48:
         19:7d:da:43:e7:c7:2e:93:57:d7:a9:dd:2b:cd:e4:8e:5f:8a:
         c6:82:23:2a:9a:6a:8f:e3:c1:ce:77:57:52:94:b2:bc:1f:6a:
         67:60:eb:bc:3c:23:14:0c:b6:99:65:50:1d:b9:bc:05:7b:f9:
         20:8f:af:cc:28:7b:52:0e:ce:5c:47:95:51:e6:72:04:6c:2a:
         aa:a0:2a:a8:a4:f6:b2:6a:03:d4:06:d7:8f:d2:6b:e4:52:85:
         8e:2f:ed:ee:de:58:d4:87:32:3c:01:21:4c:e6:65:db:66:fe:
         f8:4d:75:4d:6a:f7:45:bd:ab:b6:55:ec:16:43:7a:c7:d3:0b:
         a6:e9:8e:39:27:1e:2c:24:d0:08:66:5c:0d:83:74:a0:ad:5a:
         31:aa:c6:95:41:c6:2c:2d:13:fc:7f:c9:32:be:b1:ea:5f:ac:
         1d:46:00:cd:4f:b1:5c:57:29:74:22:73:69:68:10:7c:93:be:
         a0:f8:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----