This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer
File:                     d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer (raw, json)
Hash identifier:          U/Bas0Jo0vstiAHF3ZuN8twiEP7rFARJW7Q17a74EVU=
Subject key identifier:   11:76:27:91:FC:EF:4D:4E:3F:73:83:14:90:3B:CC:2E:F5:5D:00:B3
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C0EF63ED3ACF8A4F18EEF9A18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Dec 2025 23:52:06 +0000
Certificate not after:    Mon 06 Mar 2028 23:52:06 +0000
Subordinate resources:    AS: 10558
                          IP: 199.19.144.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:0e:f6:3e:d3:ac:f8:a4:f1:8e:ef:9a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec  2 23:52:06 2025 GMT
            Not After : Mar  6 23:52:06 2028 GMT
        Subject: CN=d04b3221-0f02-460e-b2ff-6c56b0392ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:83:16:39:02:63:eb:c6:b6:13:dd:19:4f:
                    35:44:76:e8:06:d2:04:61:24:f7:43:4b:f7:93:56:
                    5d:f1:31:d6:d2:88:1a:7c:c5:67:d2:0d:a4:76:c7:
                    11:e2:04:66:98:51:c6:5d:ac:8e:6d:f1:04:ef:70:
                    d2:01:2e:5f:17:10:08:d7:5e:2e:0c:e0:7b:03:9b:
                    6b:c8:9c:e4:1d:86:9a:b0:ea:fb:61:5a:7b:a1:42:
                    62:95:d7:0d:3c:ff:4f:25:e0:ae:89:f8:fd:97:c4:
                    73:eb:b6:f5:d9:8a:8a:8c:2d:f9:c5:99:8d:aa:09:
                    18:9f:c2:4e:d4:2d:8b:59:42:a4:0e:b0:cd:c9:50:
                    a3:86:08:78:7d:5a:3c:73:9f:30:a7:55:be:8d:fd:
                    b3:d9:7b:d2:2e:c5:78:d4:cc:34:9a:10:57:62:f5:
                    37:8f:c8:e7:26:9c:99:56:2e:77:9f:d0:a0:8f:5e:
                    dc:0a:e0:5e:27:18:65:da:e1:17:43:da:1e:69:a3:
                    ef:82:0c:5c:c0:68:65:81:cc:88:ef:3c:67:e0:f6:
                    f3:ab:62:e9:86:5f:2b:f1:a3:89:01:9f:36:55:e7:
                    41:c8:7c:97:77:55:48:a2:38:85:48:6c:bb:75:ed:
                    d1:db:19:bd:0a:21:8e:b0:15:bb:54:77:d9:57:6c:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:76:27:91:FC:EF:4D:4E:3F:73:83:14:90:3B:CC:2E:F5:5D:00:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.144.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10558

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ad:18:59:3c:23:54:bb:df:a1:0f:ba:51:04:05:90:e4:ca:
         e9:6c:b3:33:1b:ef:c3:dc:48:39:3a:37:88:da:12:ab:cd:0f:
         e7:cb:e4:36:2f:d9:4e:6f:a7:d9:5b:7f:5b:7d:50:56:a7:90:
         19:8c:8b:bb:59:4b:d6:fa:9b:68:36:63:76:b3:c3:21:71:c7:
         6d:4b:95:f1:f2:3f:cb:3a:d5:82:fe:e3:dc:5d:5f:ed:68:6c:
         5e:6d:a5:9b:35:b8:0a:a7:f4:70:02:d8:81:01:3a:ae:b7:4f:
         10:66:17:c6:aa:06:6a:4e:1d:d7:a5:74:1e:8d:2f:ae:b1:9e:
         ec:0b:45:ff:bf:ab:90:d7:a5:8e:ea:9a:de:d0:ff:35:0f:bd:
         c8:a4:56:08:25:c0:5c:3a:de:b9:6d:6c:bb:c2:85:79:24:ce:
         2f:9c:55:e7:04:28:7e:45:91:87:51:29:92:2c:88:3b:28:37:
         a6:73:5a:95:53:4f:2a:f8:b0:04:da:c7:81:f6:46:e1:47:67:
         87:e4:93:32:6a:9d:15:27:53:df:0d:9f:38:b5:7b:d6:7b:06:
         78:d7:c5:e9:c0:91:35:c0:f8:06:00:5c:54:f9:28:a8:37:4e:
         8a:70:c6:7a:a7:16:d5:42:4c:66:b0:b7:fc:fa:e2:4b:0f:fa:
         d9:6c:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:07:47 2025 by rpki-client