This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571.cer
File:                     ad859ed3-4b48-4f7f-8433-13233c0a7571.cer (raw, json)
Hash identifier:          65x1nQFDt6r9QRLUHN5ODG/AgZqN39hzwrJsExqyNx0=
Subject key identifier:   15:93:DE:6A:9B:08:2E:56:BD:BC:18:B3:BF:CE:A1:4C:AD:CD:CB:AB
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584C9FA456DC2AF3C56D9D638A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/ad859ed3-4b48-4f7f-8433-13233c0a7571.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Jan 2026 19:39:17 +0000
Certificate not after:    Wed 12 Apr 2028 21:12:52 +0000
Subordinate resources:    AS: 22915
                          IP: 206.109.197.0/24
                          IP: 2620:fe:c000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9f:a4:56:dc:2a:f3:c5:6d:9d:63:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan 23 19:39:17 2026 GMT
            Not After : Apr 12 21:12:52 2028 GMT
        Subject: CN=ad859ed3-4b48-4f7f-8433-13233c0a7571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:dd:ec:14:a7:73:eb:3d:bc:4d:aa:9a:9e:
                    e6:f7:8d:a1:03:a2:c3:09:28:d9:93:3f:8c:dc:61:
                    7b:cc:33:50:de:98:09:94:f7:21:54:19:a8:34:e2:
                    f3:3f:1d:6b:16:60:c1:6f:1d:b4:21:72:6d:35:e4:
                    89:14:a4:d0:e0:0c:b0:92:a3:a5:52:68:9a:8e:c9:
                    51:f2:15:90:63:4b:b5:d6:5a:ff:43:ed:2a:b7:69:
                    79:67:47:3b:b2:4e:21:17:cb:18:1c:c2:a8:d5:34:
                    5a:52:69:b1:f0:23:0b:1c:bd:32:2a:66:48:df:dc:
                    b0:e0:10:69:22:83:76:75:f5:85:76:01:6d:53:78:
                    68:47:cf:88:3e:1a:67:37:de:f3:df:d0:fb:a9:1f:
                    f2:8c:a5:bd:32:74:fa:41:44:39:a1:fd:6e:4a:3c:
                    8d:9d:6b:79:e0:d9:16:a3:7a:98:8b:17:99:ed:c5:
                    9a:89:71:5a:75:cb:5f:f9:b1:ed:56:45:fa:12:3a:
                    67:4a:b6:6e:22:3a:84:c1:61:ab:c7:08:06:cd:02:
                    5c:a2:b7:17:ee:07:ae:d8:9f:54:cc:b5:42:04:a5:
                    e7:37:a6:b9:91:2d:67:81:84:da:4f:be:c8:e5:ae:
                    09:69:c0:c4:f3:e5:85:52:f2:68:23:d6:50:8c:e2:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:DE:6A:9B:08:2E:56:BD:BC:18:B3:BF:CE:A1:4C:AD:CD:CB:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ad859ed3-4b48-4f7f-8433-13233c0a7571/ad859ed3-4b48-4f7f-8433-13233c0a7571.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.197.0/24
                IPv6:
                  2620:fe:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22915

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:67:b0:dd:2a:87:cd:80:a0:ea:45:90:e7:71:32:03:b2:
         1a:2a:e7:c1:cc:48:d9:d4:5e:dc:c5:19:95:6e:a1:d6:22:8e:
         e6:51:3e:18:25:b4:50:76:da:89:84:a5:ba:50:68:ab:56:87:
         a4:e5:99:13:fe:7c:be:a1:a8:a6:00:16:7d:84:e5:4d:f5:8f:
         51:f0:80:36:15:59:af:03:c2:96:df:18:3f:49:a3:f6:a2:0d:
         e1:10:b4:f9:80:de:b9:d5:99:55:97:1c:f0:26:eb:70:62:af:
         db:93:39:17:87:35:7c:bf:21:33:74:6b:d6:db:1a:bc:39:44:
         46:39:b8:4d:22:87:5d:67:8f:8f:8c:0f:c6:be:78:de:07:78:
         2f:d5:26:ad:9d:90:a7:e4:15:36:22:9f:3e:49:28:8d:6c:61:
         d8:6f:f5:17:bf:2f:72:e1:4c:51:0c:8e:47:b8:17:ad:7c:f1:
         6d:ce:4a:78:c5:e5:ac:c5:a7:91:68:b2:b7:28:43:7d:63:1c:
         60:ec:1b:69:94:c5:8a:97:56:f5:31:e4:79:47:9a:6f:10:95:
         6b:ae:bb:2c:ed:bc:c1:c4:bb:bc:29:20:42:d9:25:f8:8a:5a:
         12:9e:96:22:9a:4a:f5:6b:5f:82:a3:61:d5:2b:bf:71:0c:99:
         74:c6:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:08:32 2026 by rpki-client