This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c230c181-53aa-475d-9c37-cf19b4c1f1d7.cer
File:                     c230c181-53aa-475d-9c37-cf19b4c1f1d7.cer (raw, json)
Hash identifier:          zg+4ZKtkJk8UlYGZZ6eR7P0XOfxEbV4KmeMBlT4cecg=
Subject key identifier:   95:16:74:0B:1C:D4:DC:6D:03:21:4E:08:44:FE:DE:36:29:70:F4:42
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C3DC639CFE31D64EB74983D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c230c181-53aa-475d-9c37-cf19b4c1f1d7/c230c181-53aa-475d-9c37-cf19b4c1f1d7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c230c181-53aa-475d-9c37-cf19b4c1f1d7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Dec 2025 18:18:21 +0000
Certificate not after:    Thu 23 Mar 2028 13:41:20 +0000
Subordinate resources:    AS: 393219
                          IP: 23.151.164.0/24
                          IP: 2602:f48c::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:c6:39:cf:e3:1d:64:eb:74:98:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 19 18:18:21 2025 GMT
            Not After : Mar 23 13:41:20 2028 GMT
        Subject: CN=c230c181-53aa-475d-9c37-cf19b4c1f1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:ef:ca:2d:fd:dc:f8:b4:84:8f:0a:49:f6:
                    55:3b:f4:1b:85:df:03:67:f2:91:73:13:e9:58:37:
                    69:05:89:19:d7:3c:4c:8d:ca:0d:ce:4d:39:7e:7d:
                    ee:dd:f8:eb:f6:01:94:64:51:32:74:d4:17:8e:d0:
                    1c:d9:a4:70:93:5b:a1:67:09:85:09:89:37:c9:17:
                    18:ee:ad:cb:85:71:41:3c:76:19:59:de:5b:7c:95:
                    2d:41:90:cd:8a:40:99:a3:72:47:6c:42:04:73:27:
                    fe:79:cb:86:cb:a7:d6:78:7e:1d:bc:a7:71:22:62:
                    27:e8:33:42:0c:75:e7:d6:43:9e:b3:20:df:05:6d:
                    65:bd:c9:76:ca:ee:2c:33:6b:73:df:51:40:c1:86:
                    ec:13:b0:de:4f:8d:ed:37:1c:63:5a:aa:3e:ae:4f:
                    92:9c:a6:d6:3a:b2:cf:c9:b5:e1:e1:86:eb:fd:5f:
                    f4:96:46:8b:d0:86:71:2b:b7:b4:b0:8e:89:35:32:
                    b7:05:28:14:4a:79:9d:43:33:14:21:dc:89:ec:2b:
                    d7:11:46:71:f9:ca:35:73:65:d1:e4:08:35:f8:21:
                    0e:e6:1d:11:c5:91:bb:33:35:dc:ce:79:77:48:83:
                    95:d5:41:f4:96:c4:2f:f8:5a:a5:8e:ca:5b:86:c1:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:16:74:0B:1C:D4:DC:6D:03:21:4E:08:44:FE:DE:36:29:70:F4:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c230c181-53aa-475d-9c37-cf19b4c1f1d7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c230c181-53aa-475d-9c37-cf19b4c1f1d7/c230c181-53aa-475d-9c37-cf19b4c1f1d7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.164.0/24
                IPv6:
                  2602:f48c::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393219

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:29:7d:64:31:94:17:2f:07:5d:4c:86:e9:d5:71:84:71:84:
         f6:98:fc:d0:dc:31:fd:f9:9e:8b:2f:18:00:c6:5f:26:e8:56:
         0e:41:bb:b5:83:e5:fd:18:93:aa:ef:d9:cb:70:1f:9e:71:2f:
         83:a6:16:61:03:67:70:04:a9:02:bd:2b:41:d8:6e:e5:78:06:
         11:36:aa:9c:f5:ae:a9:50:d3:19:28:94:2b:b0:ac:96:1b:a9:
         96:f3:6d:f1:bc:c7:0b:ba:4d:99:11:93:b9:42:22:9e:a2:17:
         88:a0:ae:78:7e:42:9f:9b:60:3e:eb:2d:66:5e:5b:04:d0:73:
         42:99:5b:61:f6:6e:31:29:ec:b4:17:75:22:37:11:8a:5b:59:
         ab:1d:cd:32:34:31:26:5f:cb:25:73:4f:82:37:4d:2c:cd:f1:
         4d:fd:7e:5b:45:0e:41:b0:10:00:94:0a:70:d5:e9:e9:48:36:
         14:3f:2e:7b:43:c1:f5:f0:3b:73:31:d5:e2:a0:d6:0d:d5:76:
         7f:c1:eb:d9:d1:43:f8:c3:11:ef:fc:30:f6:f2:d1:4c:2f:4b:
         e1:7f:22:d4:6d:52:45:6f:54:44:2e:96:b3:c5:db:9c:9c:c8:
         00:69:cb:a3:20:6d:37:73:36:0e:54:bc:e1:ce:95:31:9c:c5:
         cf:63:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:16:47 2025 by rpki-client