This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer
File:                     e0dd35b2-9124-461e-adea-17906cb49705.cer (raw, json)
Hash identifier:          7BHvdS3OIcTuwQBU0U81lTOKPpxjarc5QEvySBAURfY=
Subject key identifier:   42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C47E1E28A2F010469D4EC5DF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Dec 2025 09:12:10 +0000
Certificate not after:    Mon 27 Mar 2028 08:12:10 +0000
Subordinate resources:    AS: 36741
                          IP: 23.157.32.0/24
                          IP: 131.143.156.0/22
                          IP: 192.86.81.0/24
                          IP: 2620:12e:4000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:e1:e2:8a:2f:01:04:69:d4:ec:5d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 23 09:12:10 2025 GMT
            Not After : Mar 27 08:12:10 2028 GMT
        Subject: CN=e0dd35b2-9124-461e-adea-17906cb49705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:9b:c9:01:94:44:b0:d5:45:9f:d1:58:be:
                    cd:83:cb:82:ae:c1:fd:65:c5:27:8e:c9:54:f6:9e:
                    5c:24:d9:15:74:47:93:61:a6:80:04:f9:cd:be:c6:
                    fe:00:cc:13:6e:71:84:58:a8:d9:92:95:30:53:ef:
                    a9:7c:ed:6b:0e:af:5e:82:6e:a0:2c:e7:e5:d3:82:
                    08:26:94:e7:c1:88:82:d6:75:57:1c:4b:5c:b7:7f:
                    12:e3:42:55:9a:bc:77:a4:32:9f:13:f5:3b:08:e6:
                    7c:5c:27:af:b1:3e:45:1e:b5:5b:ce:d0:2e:97:8b:
                    5c:48:51:75:65:99:25:7e:cc:dd:5c:cd:ce:a1:73:
                    c0:b9:b8:91:16:47:46:37:44:30:04:5c:1d:45:8f:
                    a9:5d:23:5f:84:6f:58:1a:d2:ff:be:a2:c2:4b:25:
                    fc:33:2a:3a:d9:57:8d:f2:49:28:aa:f3:f9:c1:9e:
                    ed:18:d8:8f:c7:bd:28:67:df:30:2b:62:93:b1:f1:
                    08:5a:2b:e8:b3:76:f6:5a:4f:61:0c:99:7b:e6:60:
                    8c:e6:95:a7:56:e5:2a:72:71:e3:7f:69:2f:f0:f5:
                    74:64:04:fa:8e:6f:20:ce:9c:da:1c:88:44:2c:bf:
                    ee:3c:c2:17:36:ab:60:18:91:da:c2:a0:98:9d:46:
                    3b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.32.0/24
                  131.143.156.0/22
                  192.86.81.0/24
                IPv6:
                  2620:12e:4000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36741

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:67:b6:81:8b:06:60:2f:b5:65:fd:a4:c0:aa:b6:37:7e:45:
         9b:4f:b5:27:99:67:31:5c:c0:ff:a0:21:f1:9e:49:9f:b4:68:
         75:5f:5e:7a:b4:99:9c:a5:db:89:75:d0:f1:28:11:06:c3:15:
         e4:22:54:96:c6:e4:01:8f:ca:ca:c9:57:96:e0:55:33:42:51:
         51:84:6a:7a:17:98:f1:a9:80:8d:41:76:27:6d:01:7c:71:ba:
         33:cc:c0:27:f6:7b:bb:d1:b7:87:2e:fe:80:db:2a:5b:aa:35:
         9e:78:55:6c:7f:13:47:98:19:d4:9f:ff:17:6e:c5:13:da:0a:
         25:35:20:01:62:fb:96:75:a6:85:b5:15:79:bb:a1:da:a5:67:
         cf:32:2a:d9:ca:d8:aa:11:b3:66:e5:a5:11:55:b6:17:f5:aa:
         66:33:2b:f0:2b:1f:e2:a0:c5:c0:83:ae:c0:91:28:43:88:ed:
         c5:b5:ae:c5:ca:eb:64:30:88:4d:4b:73:0e:3c:ea:c1:b3:86:
         62:eb:78:29:99:05:dc:d8:ed:7e:ab:e6:c6:1e:7a:df:6f:3c:
         34:b8:83:ad:9a:73:eb:b2:11:72:07:59:19:b6:29:63:19:d3:
         19:d1:c5:f0:09:42:87:26:b3:60:fe:aa:ec:bf:4c:ab:fd:1f:
         a4:6d:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:51:58 2025 by rpki-client