This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer
File:                     becbd46f-127a-435b-9440-3a213828408a.cer (raw, json)
Hash identifier:          YLEqzviwgumiNvsrMyCo2iRBI3+gvkLvI6Q7/A0LoM4=
Subject key identifier:   64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C34DBADDE15E0546609A49D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Dec 2025 13:39:18 +0000
Certificate not after:    Mon 20 Mar 2028 12:39:18 +0000
Subordinate resources:    AS: 30166
                          IP: 199.68.28.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:34:db:ad:de:15:e0:54:66:09:a4:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 16 13:39:18 2025 GMT
            Not After : Mar 20 12:39:18 2028 GMT
        Subject: CN=becbd46f-127a-435b-9440-3a213828408a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:5a:c9:96:89:56:e5:08:a9:e5:0c:fb:87:
                    d3:ef:9f:87:90:16:d2:19:26:29:60:ca:76:6c:36:
                    d3:a0:f3:b2:2d:54:82:a9:3b:b9:2b:f5:23:b7:b4:
                    23:6b:47:40:2b:fb:4d:83:cd:3e:73:3d:2a:37:e5:
                    c3:f8:14:0a:28:2e:3e:ec:56:8e:6f:6c:03:3b:ae:
                    da:8f:00:37:b1:03:ea:5f:be:a3:3f:bf:a6:62:61:
                    6d:27:b1:00:b0:cc:83:5f:27:25:5c:ab:6b:29:53:
                    a6:92:13:3b:82:f0:f0:5e:81:e2:9f:51:d8:74:3d:
                    f0:0f:1b:28:cc:20:c3:79:79:36:06:26:6f:bc:e2:
                    82:00:60:16:5a:87:0a:63:ce:3b:05:69:bf:a0:08:
                    d5:d4:3c:fa:8b:3d:de:96:62:49:06:bf:93:5c:57:
                    85:3d:70:9b:50:2c:85:f9:b2:80:47:36:b9:40:f0:
                    cd:3b:3c:e5:c4:e2:6c:cd:9d:7c:08:a0:60:ae:a5:
                    e4:44:67:f9:90:a1:89:a3:6b:fc:9e:7f:26:c5:13:
                    ed:c1:94:40:65:cb:02:6d:70:0c:b1:35:67:2c:5c:
                    7e:17:af:d3:ca:4a:a3:5b:0c:93:3a:76:07:0f:76:
                    3e:44:5d:21:e9:c3:12:a0:dd:f8:03:a4:da:96:72:
                    84:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.28.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30166

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:84:30:e5:f5:4d:21:c9:66:82:9f:dc:e2:56:fa:2a:c0:32:
         82:68:46:67:31:58:28:cf:48:2e:1a:8d:d9:85:cc:c0:54:ae:
         3f:07:23:a1:3c:25:f3:ea:03:e7:ec:a2:b8:dd:fe:28:be:fa:
         aa:ba:0e:85:c0:55:06:d3:e7:76:d8:f7:ca:07:95:fc:48:81:
         24:e4:78:31:ce:d1:0f:8e:69:3f:ac:30:a2:c5:33:24:c7:1d:
         81:f7:92:6b:af:b0:0f:df:a8:97:af:f9:3f:a3:cd:38:39:22:
         45:17:94:30:9c:9e:9e:38:6b:f3:52:8e:b5:aa:1f:d9:fe:11:
         6e:de:9c:10:c3:9f:ee:bc:93:b6:a6:f0:69:99:53:a9:df:28:
         1b:d6:7c:a6:8b:db:bf:1d:fe:6b:d9:93:d9:f0:c5:5a:8f:4b:
         8e:d3:0d:21:27:43:95:74:ce:6e:9f:a9:52:f9:5b:a4:3e:40:
         85:f9:1e:f8:f6:da:6c:52:fd:6c:98:12:d3:ab:70:89:28:3d:
         dc:57:3e:74:a6:e7:8c:9f:e6:12:51:eb:6a:c2:81:7d:21:0f:
         71:26:62:c3:07:76:ec:33:f8:fc:59:68:39:2f:48:7b:72:7c:
         cf:39:fe:03:db:35:95:ef:fc:b2:95:09:c0:5a:1f:5a:90:ba:
         28:ff:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:51 2025 by rpki-client