This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
File:                     503d278e-3d64-45f0-9c99-0926a5eec14c.cer (raw, json)
Hash identifier:          V+YBF3ynE5PiB+c+/6olE0Xu9PY3L8Uw0/PEBb/GaEU=
Subject key identifier:   3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C112375DA1D5F7A2E55794BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Dec 2025 18:34:50 +0000
Certificate not after:    Tue 07 Mar 2028 18:34:50 +0000
Subordinate resources:    AS: 33338
                          IP: 204.63.232.0/21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:11:23:75:da:1d:5f:7a:2e:55:79:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Dec  3 18:34:50 2025 GMT
            Not After : Mar  7 18:34:50 2028 GMT
        Subject: CN=503d278e-3d64-45f0-9c99-0926a5eec14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:ea:40:43:9e:0b:d6:e3:0c:c8:9f:8c:f6:
                    5f:0e:47:ae:0f:b3:95:87:03:bc:50:71:8b:57:96:
                    b6:8d:ce:41:3c:39:e2:12:8b:d5:e8:20:7b:d7:71:
                    4c:98:ba:d0:69:1b:5d:43:de:95:2f:10:34:21:4b:
                    99:de:15:21:fe:c1:2a:da:e1:c5:16:79:da:2c:63:
                    ab:3f:7b:55:5e:0b:ae:0c:f2:3a:3c:ee:cc:5e:89:
                    c7:21:fc:03:b9:6c:fe:6b:a6:ee:76:d6:a5:41:25:
                    af:1d:9d:8d:bf:e0:67:50:b9:d9:ff:39:58:7d:93:
                    51:28:80:c5:2a:cb:88:c1:11:43:c4:1c:7f:61:f7:
                    dc:fd:69:e0:70:4d:2d:d8:f1:27:f8:6c:f4:ad:ec:
                    23:8d:06:81:60:fe:dd:25:80:a1:c1:4b:6c:8f:c9:
                    0d:40:8d:d4:d1:ef:fc:17:38:ac:2a:8c:7c:04:9b:
                    3e:0a:06:e3:25:29:48:2b:6f:42:1a:4a:8f:0f:31:
                    1f:38:47:28:8f:bb:64:e8:64:da:19:d1:6a:45:6a:
                    1d:37:dc:48:9a:d9:11:b9:ad:a3:35:bc:34:05:04:
                    d2:1d:a9:36:78:33:cb:ec:e3:5d:34:f7:1a:30:0b:
                    c0:e6:b4:9e:e0:5c:75:73:6d:7c:ad:b5:0e:3f:e7:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.232.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33338

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e7:7c:2f:4f:d8:c3:ae:48:ec:53:f3:76:5e:7e:b1:4d:64:
         3b:f5:51:67:59:e8:bf:57:3c:b2:ca:d3:d2:23:c0:e2:d8:b0:
         47:ac:7b:df:1a:ad:cf:b6:26:6d:bc:04:c7:c2:de:c9:51:fb:
         b8:7e:bf:97:13:ab:3c:00:bc:17:cb:64:60:62:21:5c:35:22:
         97:51:1a:da:ed:f0:e6:58:ac:90:b3:4d:8e:5e:9d:9a:5c:87:
         ef:d1:0a:5a:2d:c0:a7:d8:00:48:bf:6d:7c:23:87:88:46:7e:
         f2:9b:84:4b:20:d9:60:04:18:a8:98:bf:dd:5d:76:cd:95:b5:
         f6:53:63:dd:71:28:1c:8f:91:68:97:4a:95:4c:0c:15:cf:77:
         97:c6:3b:60:7b:66:0d:be:7c:71:14:19:bf:48:6c:6f:84:e0:
         1d:92:63:6f:9a:7c:be:d6:b0:8b:a6:0e:6f:d9:1f:72:58:8d:
         8a:9c:36:da:42:23:cc:b4:45:1b:d4:24:6c:7d:af:03:30:cd:
         5c:2a:7c:8e:c3:17:87:68:8d:60:39:65:34:c9:e6:ca:ae:41:
         9c:f2:1d:9b:c4:b4:e3:65:8b:a8:a6:97:0c:17:7d:7b:05:52:
         c5:e5:1b:c1:2a:b7:94:88:c3:17:c1:db:19:b1:a1:44:81:86:
         e6:98:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----