This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a.cer
File:                     f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a.cer (raw, json)
Hash identifier:          6TnFFxlrwcSdRm54xJ/plfJJU1lARhF04bTqJPhfP/I=
Subject key identifier:   BA:DB:F6:D4:97:A4:CE:6A:4D:AC:9F:C4:C6:D0:5A:51:07:C3:C4:20
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C1AAFAAED23DA30440F97BD1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Dec 2025 04:39:36 +0000
Certificate not after:    Sat 11 Mar 2028 04:39:36 +0000
Subordinate resources:    AS: 15040
                          IP: 23.150.204.0/24
                          IP: 2602:f4a7::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1a:af:aa:ed:23:da:30:44:0f:97:bd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec  7 04:39:36 2025 GMT
            Not After : Mar 11 04:39:36 2028 GMT
        Subject: CN=f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:6b:70:c9:c3:e8:e5:41:5d:3c:0c:28:b9:
                    96:df:03:47:b3:ac:d9:20:3d:9c:90:d2:47:27:ed:
                    94:d0:ab:17:7a:af:bf:71:69:bf:d0:a3:30:db:9e:
                    f7:1a:d3:08:5d:53:63:92:5b:85:79:1c:11:25:fc:
                    82:aa:be:64:bd:73:6a:32:11:38:d1:29:04:63:2e:
                    a6:9c:aa:71:37:0e:fb:4f:89:b9:58:8b:2f:54:37:
                    93:61:80:41:b7:e9:1a:a5:6e:16:2b:0c:49:47:eb:
                    c4:c8:23:60:d0:5a:18:51:9d:47:dc:86:56:b1:18:
                    2d:3b:89:4d:27:2c:3d:83:77:fa:1f:8f:91:74:7e:
                    7e:ba:5c:6c:79:c5:88:77:30:5b:2e:7c:8a:ec:f5:
                    76:b2:65:62:1b:4c:90:b3:01:59:02:d5:c1:cc:9c:
                    4a:81:8d:c8:6c:48:ce:35:2f:dd:38:e5:6f:4b:94:
                    8d:c5:d2:b2:57:33:bf:e5:f3:92:2f:b1:15:84:a5:
                    89:38:e5:1b:d5:32:19:d4:9d:3c:de:80:43:2f:55:
                    f4:10:b2:18:83:de:49:55:5b:2e:1f:20:1d:d2:20:
                    1d:90:2d:65:d5:35:16:db:dd:2b:0f:fc:4b:6f:ea:
                    84:34:1c:8a:51:52:50:8c:d8:de:dd:4b:1f:59:c8:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:F6:D4:97:A4:CE:6A:4D:AC:9F:C4:C6:D0:5A:51:07:C3:C4:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a/f2815164-c2ec-4a3d-9bf1-e9e8e51d4c5a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.204.0/24
                IPv6:
                  2602:f4a7::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15040

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:fc:87:c0:a0:7f:ea:f7:06:56:e6:fe:c1:f4:7f:22:a8:
         75:ea:fb:b2:ff:d5:7c:d0:c0:63:fe:f2:61:5d:fd:0d:a4:c8:
         87:99:75:77:03:89:2d:c3:b2:50:81:32:b3:67:59:d1:5e:81:
         e4:5b:58:fe:74:75:d3:ed:d8:e2:dd:b8:70:57:60:8e:91:c8:
         dd:73:f1:c2:4b:c2:38:99:7a:f1:87:dc:d3:c9:c3:07:47:73:
         ba:c2:c5:ce:73:d6:33:0a:bb:30:5d:a1:e2:8c:5b:44:8f:38:
         ca:6e:12:dc:fa:8d:44:2e:f0:f4:60:1c:d2:12:fd:c1:68:ff:
         82:f1:16:bc:ab:90:f4:c0:7e:bf:9b:5e:5e:37:01:63:2b:7c:
         5b:f1:64:cf:72:a3:f0:de:74:01:04:f5:3e:85:45:7f:b4:df:
         b0:ac:68:f4:43:73:1a:3e:0d:9b:96:45:f1:10:7b:b9:62:39:
         87:9a:90:96:48:3a:52:32:6b:7d:2e:4d:aa:83:49:fb:6f:c4:
         13:f6:ab:d4:39:df:66:56:f4:af:e2:f5:15:c8:21:55:6b:f0:
         97:7d:40:09:ff:d8:21:26:97:12:87:01:22:3f:2b:33:0e:d6:
         b8:80:8f:5e:b5:8c:3d:9c:4e:6a:26:c9:22:bb:66:fa:29:18:
         18:6e:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:03:06 2025 by rpki-client