This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer
File:                     a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer (raw, json)
Hash identifier:          38a7/qlPTNK4su4lwnzTVWKfs+E8JrZX1n8hjG3dS9A=
Subject key identifier:   B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BBD76C0D461E7E0004F23A380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Nov 2025 19:14:45 +0000
Certificate not after:    Sun 06 Feb 2028 19:14:45 +0000
Subordinate resources:    AS: 54057
                          IP: 107.161.192.0/20
                          IP: 2604:1de0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bd:76:c0:d4:61:e7:e0:00:4f:23:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov  3 19:14:45 2025 GMT
            Not After : Feb  6 19:14:45 2028 GMT
        Subject: CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:1a:ac:1f:88:c8:60:79:79:f3:8f:95:68:
                    7f:d8:ae:66:6b:2b:91:3b:6b:92:f7:f3:4c:f8:6d:
                    56:f2:1b:7e:bf:60:a0:1d:b3:49:47:f6:d9:14:85:
                    c1:ed:ad:3a:42:bf:f5:a0:c5:81:bb:72:d0:4b:61:
                    fc:89:4c:f9:f2:76:48:fc:2d:25:eb:a1:a5:c7:ed:
                    eb:f4:06:85:04:ac:c6:75:9d:f7:2c:33:71:25:1a:
                    d1:9c:bf:a0:bc:5c:d0:cf:f1:13:85:77:61:d0:8b:
                    d6:03:84:cb:57:63:4e:58:7f:ca:04:74:ae:27:08:
                    79:84:b1:33:cf:e3:f2:b1:6c:39:40:b3:73:9a:7f:
                    78:33:95:56:6f:38:cf:c1:9b:bf:e3:57:be:06:dc:
                    02:ff:79:c6:e1:d8:53:78:2f:fb:c8:7b:62:19:12:
                    20:e3:a8:97:18:93:1f:26:dc:3f:d8:b0:f9:f2:3c:
                    fa:c7:67:69:b2:54:c6:0e:ad:57:01:0a:3c:a1:00:
                    ca:e2:57:40:f2:3e:27:29:2e:5a:c8:e3:4c:4b:b2:
                    2a:88:f0:3c:b4:58:c9:ac:68:dc:35:b5:91:59:86:
                    8d:d9:f9:4b:d0:c7:d3:2a:f4:a2:2b:ca:50:86:63:
                    ec:09:95:73:f0:9d:cc:54:c2:cc:86:14:87:e3:6f:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.192.0/20
                IPv6:
                  2604:1de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54057

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c6:b1:17:3f:47:d3:56:53:ef:f4:f8:5f:84:3b:b1:fa:0e:
         1b:f2:59:81:5d:5b:24:30:09:36:77:47:32:c3:3a:56:d6:f8:
         7d:a5:63:75:80:6b:6b:bf:e2:9d:42:f5:fa:80:f7:db:65:c5:
         eb:37:c8:60:1e:80:d0:86:5b:17:b4:40:8b:97:7e:a7:1a:2a:
         7e:ea:d6:2a:f3:20:15:2b:85:bb:97:83:e7:8e:9c:57:56:11:
         75:7c:3e:8f:46:a8:16:01:a4:6b:92:3c:ba:4c:64:c9:29:c4:
         9b:db:21:cd:f5:4f:17:ed:97:8e:ae:f2:37:0c:82:78:38:0d:
         85:24:63:36:4b:a7:9a:66:7f:bf:29:32:77:3c:b0:3c:97:05:
         b5:29:a1:85:5d:59:f5:bd:34:b8:bb:5f:5a:10:99:02:59:01:
         4c:2f:d6:ff:2a:a0:2e:ca:88:80:a7:04:d6:9e:52:58:15:9b:
         58:dd:88:d1:96:60:fd:c2:f8:84:bc:ca:fe:a1:2f:05:72:d0:
         a2:07:dd:5e:d0:56:e5:35:ed:86:5a:35:d0:68:4d:b9:c3:a6:
         00:7e:b5:e2:8d:2a:44:d7:9a:4c:88:c0:d2:5a:2b:51:b9:1b:
         08:29:17:a6:f9:4c:ac:a2:7b:e6:d8:32:f8:a1:78:46:7c:22:
         25:7e:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:10 2025 by rpki-client