This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
File:                     eea0cb92-050e-479f-bff4-dddd68eb4e04.cer (raw, json)
Hash identifier:          7o8ZGLkF5nKi6C9mytLm4nMNlNMJ/4vOB0QZD/cPYl0=
Subject key identifier:   F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C2718E724F5DB5A8909182C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 15:21:20 +0000
Certificate not after:    Wed 09 Feb 2028 15:36:09 +0000
Subordinate resources:    AS: 40806
                          IP: 23.149.124.0/23
                          IP: 2602:f4d9::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:27:18:e7:24:f5:db:5a:89:09:18:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec 11 15:21:20 2025 GMT
            Not After : Feb  9 15:36:09 2028 GMT
        Subject: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:fc:27:fb:d3:39:07:33:d9:fe:05:8f:6e:
                    69:ad:a1:09:8c:29:e2:8e:ae:b4:25:c2:c4:43:3b:
                    88:ed:68:e5:ca:b7:ca:2a:de:f6:83:7d:ae:14:c6:
                    c3:c7:48:37:72:ae:07:70:90:99:89:94:5a:09:6b:
                    46:ca:c7:fd:cc:19:a9:93:7d:f7:25:87:43:a2:08:
                    d5:3c:68:7a:9e:41:b3:f2:1e:75:c6:db:fd:b3:79:
                    49:7b:54:63:68:50:cf:31:fe:0c:6f:73:cf:54:9f:
                    d5:ea:e6:88:56:52:5b:bb:cc:5d:a5:8f:70:15:1c:
                    ea:2a:ee:d2:34:d2:4e:6e:8b:da:03:97:10:1b:70:
                    5d:24:8a:19:90:ca:02:9d:39:48:90:f1:5a:38:0a:
                    13:01:37:d9:e4:19:72:be:09:d7:86:c3:5d:f6:59:
                    d6:4e:d2:bc:35:fe:49:1c:fb:86:74:aa:3c:b1:b8:
                    54:f7:48:c4:e6:e4:bf:e6:02:9f:97:9f:dd:58:13:
                    c2:6b:fc:60:38:5d:69:01:ed:7f:2e:61:ad:98:4b:
                    ee:76:12:75:94:c0:22:53:1c:36:96:9f:f6:d1:ad:
                    a9:62:1d:3d:c8:0c:eb:02:bd:bb:ab:fe:d0:72:dd:
                    36:9f:e3:c7:cf:70:90:d7:8e:a4:9c:eb:0d:ae:81:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.124.0/23
                IPv6:
                  2602:f4d9::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40806

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:89:ce:cd:e0:17:a6:17:7e:c0:49:9a:35:0e:79:c4:b6:55:
         94:b4:57:1a:31:b2:39:bd:51:5c:b5:94:ce:ac:85:74:77:d5:
         06:6f:f7:eb:62:29:89:33:a3:fa:61:14:85:3e:dc:05:62:30:
         20:71:e1:b1:82:8b:6d:1b:bb:78:ec:66:5f:e2:3b:0e:77:52:
         87:38:c6:c1:86:11:7e:79:62:a7:95:5b:ab:02:dd:09:15:4b:
         06:ba:21:9f:d4:ea:4f:56:29:99:e1:82:4a:36:6c:60:22:da:
         9a:43:6c:81:c2:fe:3e:8f:68:1c:4b:30:15:dc:5a:57:45:6a:
         8e:c1:6b:c3:8d:ac:a2:1e:5b:42:ed:1e:53:58:0e:a4:fc:93:
         8e:2b:df:c7:c7:28:3b:c8:ee:59:ed:cc:73:54:aa:f8:b4:6e:
         c9:3e:40:e3:ba:9b:2b:96:ea:b6:b4:e8:b5:43:73:1c:f1:54:
         b9:51:7c:0f:e4:aa:30:82:31:86:34:d9:e6:5c:77:fe:7e:2f:
         bf:e2:83:d7:55:d5:eb:6d:2a:49:ae:63:08:11:9b:e9:4d:b9:
         eb:a7:99:22:e1:a7:02:e7:7b:87:e7:f1:89:16:06:83:af:91:
         c1:aa:30:8c:ab:d2:81:bb:1c:bb:1a:bb:3d:47:39:77:56:24:
         10:9d:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:07:33 2025 by rpki-client