This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9.cer File: 01f9e442-d27b-4932-b99a-25bcfd81a9f9.cer (raw, json) Hash identifier: iKvn66QfvqZituocsLd0P1Yb2HNA4BAyfoTEDoQ4Jfg= Subject key identifier: 39:95:42:E5:7E:D5:82:49:65:74:1B:93:AC:7F:62:E5:2B:DD:B4:E4 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3A8F1F5EA3F0CF123B7B4140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/01f9e442-d27b-4932-b99a-25bcfd81a9f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Dec 2025 14:39:54 +0000 Certificate not after: Wed 22 Mar 2028 13:39:54 +0000 Subordinate resources: AS: 401757 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:8f:1f:5e:a3:f0:cf:12:3b:7b:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 18 14:39:54 2025 GMT Not After : Mar 22 13:39:54 2028 GMT Subject: CN=01f9e442-d27b-4932-b99a-25bcfd81a9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:01:2d:9f:48:98:92:ff:61:02:8f:27:f6: af:ea:bd:48:a4:88:db:e6:c5:1c:e6:8e:1d:be:7a: 3a:90:31:58:c6:e2:49:cc:56:33:cf:fe:e4:7e:03: 16:ab:e7:f5:dd:d5:af:ad:dd:8d:67:d8:4c:ec:55: 6c:99:ab:bf:63:aa:96:4d:e1:0e:fe:40:13:80:70: 78:2a:b5:c5:88:26:33:5f:bb:0f:65:df:9c:7f:b9: 34:4b:3a:fc:6a:13:72:fc:c8:35:8e:48:a0:0a:77: 14:81:22:0c:d3:40:3e:aa:34:85:45:83:8f:fa:df: 9f:e7:ca:c4:19:17:5d:26:ed:16:dc:18:a9:0c:a7: f4:5b:59:98:50:b0:1c:2d:50:6f:65:d0:45:e8:d8: ed:9c:6a:88:08:53:85:d3:60:9e:22:af:11:1c:02: e9:83:be:86:d5:50:bf:26:2f:e6:3c:a2:cd:8b:97: 3f:bb:0c:64:69:0e:91:e4:05:33:6a:8d:ae:20:45: 54:9c:64:36:e1:f9:fc:db:13:0e:66:62:12:7c:4b: 72:5b:78:7b:6c:ce:12:8f:8e:02:04:c0:ad:42:2a: ca:c3:38:31:6f:a9:1a:cc:ca:66:77:26:31:54:3e: a3:ff:b8:5d:b3:04:b5:08:c6:ca:bf:1c:88:31:56: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:95:42:E5:7E:D5:82:49:65:74:1B:93:AC:7F:62:E5:2B:DD:B4:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/01f9e442-d27b-4932-b99a-25bcfd81a9f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cc:99:f1:a1:ab:4f:4a:41:22:51:48:e4:a6:dc:2d:70:bb: 1b:65:da:02:4d:15:ac:ca:64:c6:3b:3a:20:b8:36:6a:33:70: 56:0b:cc:14:6e:18:09:24:05:8a:81:ac:3a:7e:bd:4c:34:47: 89:b9:82:57:e4:c2:cc:8a:b8:97:37:7a:8c:b8:d9:58:ce:56: 89:09:61:14:d7:30:aa:71:e5:4b:92:bb:8e:68:a0:3d:40:07: ef:a9:0a:d5:36:9d:56:5b:b6:a0:e2:8b:23:c3:00:ff:61:9c: 57:66:c3:9f:d6:19:ab:0d:33:8e:d6:3f:1c:ff:50:80:a9:ec: bd:9c:be:c3:0f:79:21:f1:ab:2b:16:1d:ef:5d:8e:40:f8:5e: 3c:1e:20:d3:a3:d5:2c:72:a8:ee:40:e6:56:7b:c4:58:0c:ed: b7:f9:08:f5:a9:a1:cf:a1:33:0f:fd:8a:b0:83:37:3a:71:c4: be:96:93:34:90:2c:e4:02:27:cf:44:b2:e8:be:64:b8:e3:06: 60:0d:b5:71:5f:87:72:9a:32:a7:88:e2:b6:e4:58:89:b7:25: 0e:ea:be:ab:00:4f:12:fb:c0:0d:bd:06:aa:f7:08:be:88:5a: be:2c:c0:a3:cb:7b:b7:38:72:9d:78:e3:41:cd:a4:be:9a:ee: a1:f1:c5:43 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEw6jx9eo/DPEjt7QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxODE0Mzk1NFoXDTI4MDMyMjEzMzk1NFowLzEtMCsGA1UEAxMk MDFmOWU0NDItZDI3Yi00OTMyLWI5OWEtMjViY2ZkODFhOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn8BLZ9ImJL/YQKPJ/av6r1IpIjb5sUc5o4d vno6kDFYxuJJzFYzz/7kfgMWq+f13dWvrd2NZ9hM7FVsmau/Y6qWTeEO/kATgHB4 KrXFiCYzX7sPZd+cf7k0Szr8ahNy/Mg1jkigCncUgSIM00A+qjSFRYOP+t+f58rE GRddJu0W3BipDKf0W1mYULAcLVBvZdBF6NjtnGqICFOF02CeIq8RHALpg76G1VC/ Ji/mPKLNi5c/uwxkaQ6R5AUzao2uIEVUnGQ24fn82xMOZmISfEtyW3h7bM4Sj44C BMCtQirKwzgxb6kazMpmdyYxVD6j/7hdswS1CMbKvxyIMVYXtQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDmVQuV+1YJJZXQbk6x/YuUr3bTkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w MWY5ZTQ0Mi1kMjdiLTQ5MzItYjk5YS0yNWJjZmQ4MWE5ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzAxZjllNDQyLWQyN2ItNDkzMi1i OTlhLTI1YmNmZDgxYTlmOS8wMWY5ZTQ0Mi1kMjdiLTQ5MzItYjk5YS0yNWJjZmQ4 MWE5ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiFdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEPMmfGhq09KQSJRSOSm3C1wuxtl 2gJNFazKZMY7OiC4NmozcFYLzBRuGAkkBYqBrDp+vUw0R4m5glfkwsyKuJc3eoy4 2VjOVokJYRTXMKpx5UuSu45ooD1AB++pCtU2nVZbtqDiiyPDAP9hnFdmw5/WGasN M47WPxz/UICp7L2cvsMPeSHxqysWHe9djkD4XjweINOj1SxyqO5A5lZ7xFgM7bf5 CPWpoc+hMw/9irCDNzpxxL6WkzSQLOQCJ89Esui+ZLjjBmANtXFfh3KaMqeI4rbk WIm3JQ7qvqsATxL7wA29Bqr3CL6IWr4swKPLe7c4cp1440HNpL6a7qHxxUM= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:19 2025 by rpki-client