This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343.cer
File:                     38582e71-36ac-4b58-9873-71368cfb9343.cer (raw, json)
Hash identifier:          8IMz8y/T3HfdaT0j2U2Wc6PePT7bXIcOzm6vBn8kSW4=
Subject key identifier:   8B:E3:2A:6B:29:40:65:E3:BB:DE:F9:A4:D2:F5:57:42:B1:C2:F4:B3
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C72C7BA8A614EF5FDB07BA398
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/38582e71-36ac-4b58-9873-71368cfb9343.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Jan 2026 17:59:13 +0000
Certificate not after:    Tue 11 Apr 2028 16:59:13 +0000
Subordinate resources:    AS: 40226
                          IP: 208.69.196.0/22
                          IP: 2620:12e:7000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:72:c7:ba:8a:61:4e:f5:fd:b0:7b:a3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan  7 17:59:13 2026 GMT
            Not After : Apr 11 16:59:13 2028 GMT
        Subject: CN=38582e71-36ac-4b58-9873-71368cfb9343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:5a:7f:23:10:7b:22:29:1c:07:74:76:6c:
                    55:09:a7:b0:0e:06:f7:a8:15:59:54:96:b5:02:fb:
                    0a:49:bc:4a:59:92:58:f0:51:09:f9:58:a3:4c:bb:
                    f5:c8:b0:c3:17:0a:0d:f3:7a:a1:01:ce:4d:dc:1b:
                    90:5f:c5:4c:84:f1:11:10:56:d3:fe:6e:18:1a:1f:
                    1c:c4:05:88:8f:3e:c3:7b:68:5e:9f:0b:30:c0:ea:
                    82:ee:14:9f:e7:ad:9e:21:b4:31:57:34:81:2e:da:
                    3a:ef:0f:a0:1b:51:95:52:f6:24:0b:73:42:a7:58:
                    f6:67:5d:a8:a3:23:78:d3:3a:c8:a6:11:12:37:b3:
                    22:31:df:49:8e:cf:21:3c:33:89:cd:26:cb:9a:5f:
                    71:5a:78:9d:19:5a:e0:17:61:24:73:36:2e:34:d2:
                    83:4d:68:d7:fd:37:88:3f:5b:d1:0c:2c:31:3c:a3:
                    af:7b:eb:2c:d4:00:a3:3f:0d:9f:ae:18:d1:5c:95:
                    24:93:2a:f2:32:06:e6:28:98:28:fa:49:f5:65:fa:
                    a2:31:c0:cb:12:ae:03:36:4d:4c:bf:44:dc:34:cf:
                    56:36:11:34:ff:3d:22:0f:0b:77:04:e6:02:ee:36:
                    4a:33:85:6e:1d:34:fa:08:8c:42:9d:a5:79:b8:97:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:2A:6B:29:40:65:E3:BB:DE:F9:A4:D2:F5:57:42:B1:C2:F4:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/38582e71-36ac-4b58-9873-71368cfb9343.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.196.0/22
                IPv6:
                  2620:12e:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40226

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:af:7c:f3:f6:87:c8:83:b0:86:92:2c:c7:8c:35:c3:cf:
         96:b2:29:b0:6b:ec:8f:91:bb:f5:69:43:96:7e:92:e3:1a:55:
         50:74:dd:23:dc:10:e3:2f:39:3c:f8:c3:6d:14:90:65:36:d6:
         bf:cc:30:50:36:f8:09:ff:8b:e5:c5:98:12:52:76:7e:48:29:
         00:ba:e4:e9:0e:eb:08:58:f0:a7:8b:5c:14:fe:c6:91:14:3e:
         9f:e6:af:d2:bf:15:14:67:44:41:9a:e3:9f:c0:65:d7:c4:3d:
         75:7f:19:a7:d6:7e:15:de:38:e7:c1:46:fb:a7:f3:db:14:37:
         6d:ec:67:3f:28:36:18:52:0e:36:18:c2:dd:22:90:9b:f7:bd:
         91:d9:2c:f9:6f:25:9a:69:98:23:30:3b:13:16:cc:a9:12:d8:
         a8:77:41:5a:27:07:bb:92:9a:0e:3a:b7:50:ff:9e:5c:7a:1b:
         e5:e7:9c:1b:58:8d:22:ab:e1:bf:ac:41:9c:b6:0d:16:90:99:
         c2:74:18:96:98:69:49:67:11:d9:d6:18:16:98:29:b3:94:38:
         b1:3a:e6:82:81:6c:55:ec:e4:e1:a4:7b:12:01:cf:98:58:60:
         72:18:db:58:51:67:e4:15:42:47:84:de:f3:b0:5f:66:1a:66:
         22:1b:a2:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----