This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer File: 02df9026-5ea2-4718-a55c-d46da7505348.cer (raw, json) Hash identifier: UPTmyED0PM/2wI7Mnnxr/omRhkcIXk/jL1ZnYkR91DY= Subject key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C34FE105554DBE8D1A138C400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Dec 2025 14:48:35 +0000 Certificate not after: Mon 20 Mar 2028 13:48:35 +0000 Subordinate resources: AS: 14291 IP: 24.49.32.0/19 IP: 24.89.0.0/19 IP: 24.153.112.0/20 IP: 24.170.224.0/19 IP: 24.235.80.0/20 IP: 64.7.40.0/21 IP: 69.88.32.0/20 IP: 131.226.16.0/21 IP: 139.60.208.0/23 IP: 139.180.20.0/22 IP: 147.185.104.0/23 IP: 147.185.192.0/23 IP: 159.26.192.0/19 IP: 162.210.236.0/22 IP: 167.94.216.0/22 IP: 192.16.120.0/23 IP: 199.45.244.0/22 IP: 199.73.28.0/22 IP: 204.80.100.0/22 IP: 206.198.248.0/21 IP: 208.93.196.0/22 IP: 216.245.84.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:fe:10:55:54:db:e8:d1:a1:38:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 16 14:48:35 2025 GMT Not After : Mar 20 13:48:35 2028 GMT Subject: CN=02df9026-5ea2-4718-a55c-d46da7505348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:34:7b:43:70:4b:81:50:6e:da:54:5e:73: 8d:88:13:9e:bc:e2:fc:9b:95:8c:d4:ac:50:d2:8d: d7:ae:eb:a7:a2:49:89:cc:5e:7f:de:a2:fc:f2:b3: aa:4a:c1:24:a4:a7:92:3c:1f:e6:dd:04:0f:6d:a6: 29:52:11:57:27:33:0f:f6:c3:99:ca:dc:dc:45:98: 6b:a4:0f:fc:27:39:84:ea:81:01:23:32:13:17:ad: 92:ba:96:19:f3:bb:2d:4c:5c:00:7d:ac:26:88:a9: 21:fc:7c:58:36:98:2c:35:9a:72:ac:c4:a4:e9:9f: 90:ee:55:86:7f:92:01:58:0c:00:ed:a9:7d:b1:74: 76:c3:bf:01:43:b2:99:d5:9c:b1:0a:93:47:94:df: e9:64:4e:68:0b:d9:6e:88:82:9b:99:4a:00:df:f1: 94:d6:c5:75:7c:ea:33:de:c4:7b:92:df:9b:80:5c: 43:7a:dc:4f:3a:91:f8:1e:36:85:e8:d1:ec:1d:3c: 75:52:94:5b:e3:34:c5:15:7e:b1:f3:b8:c7:95:78: 0d:f3:f0:e2:08:53:b2:a3:59:21:e2:50:af:ce:f3: 6a:3f:83:00:34:a3:9e:eb:39:b7:a3:e3:a5:3c:28: 68:75:7e:b7:96:93:be:b3:e9:19:05:4f:95:4b:79: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 24.49.32.0/19 24.89.0.0/19 24.153.112.0/20 24.170.224.0/19 24.235.80.0/20 64.7.40.0/21 69.88.32.0/20 131.226.16.0/21 139.60.208.0/23 139.180.20.0/22 147.185.104.0/23 147.185.192.0/23 159.26.192.0/19 162.210.236.0/22 167.94.216.0/22 192.16.120.0/23 199.45.244.0/22 199.73.28.0/22 204.80.100.0/22 206.198.248.0/21 208.93.196.0/22 216.245.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14291 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:04:12:11:56:82:c7:bc:87:ed:06:55:23:7a:88:f2:e8:3e: f3:7d:bd:91:5a:4e:82:c6:01:f6:6d:1c:6e:cd:d2:a8:50:af: ab:a2:6f:d6:b3:a3:5c:d2:e7:31:82:37:16:49:2e:ea:29:31: 51:3e:65:d5:ce:2b:db:f5:cc:62:2f:34:47:27:64:06:d8:94: 30:1f:d8:e0:a4:c2:7e:4b:06:a6:df:04:52:ad:2c:40:ce:a2: c3:14:d8:60:bf:ac:ed:9c:bb:6d:86:c4:7b:d2:f7:93:a3:e2: b7:e9:6f:cf:33:c2:b5:de:14:b6:ac:bb:0f:85:7c:7f:f9:7e: 94:51:b8:a7:82:fb:f4:7b:98:30:85:ab:84:32:68:21:06:7d: 80:b9:ec:13:d3:ba:93:83:49:b8:2f:a0:6a:3c:51:40:46:12: 33:cc:fc:60:69:d8:b5:c9:86:79:7e:8f:95:84:92:dd:90:ef: e5:72:7f:f8:31:db:ef:16:52:09:b8:32:ad:58:59:52:b0:1b: 5f:06:c0:20:a4:a0:33:35:2c:02:24:c1:cb:23:fa:09:4a:8f: 3a:e8:da:a0:8c:a7:3b:e4:68:a2:34:f1:2e:38:d5:6d:40:a5: 20:f6:e7:dd:15:ac:33:e2:79:dc:62:a3:00:80:05:8a:cc:df: 7f:ec:2b:a4 -----BEGIN CERTIFICATE----- MIIHizCCBnOgAwIBAgIUAQ0Mn0MoWEw0/hBVVNvo0aE4xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxNjE0NDgzNVoXDTI4MDMyMDEzNDgzNVowLzEtMCsGA1UEAxMk MDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1MzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOo0e0NwS4FQbtpUXnONiBOevOL8m5WM1KxQ 0o3XruunokmJzF5/3qL88rOqSsEkpKeSPB/m3QQPbaYpUhFXJzMP9sOZytzcRZhr pA/8JzmE6oEBIzITF62SupYZ87stTFwAfawmiKkh/HxYNpgsNZpyrMSk6Z+Q7lWG f5IBWAwA7al9sXR2w78BQ7KZ1ZyxCpNHlN/pZE5oC9luiIKbmUoA3/GU1sV1fOoz 3sR7kt+bgFxDetxPOpH4HjaF6NHsHTx1UpRb4zTFFX6x87jHlXgN8/DiCFOyo1kh 4lCvzvNqP4MANKOe6zm3o+OlPChodX63lpO+s+kZBU+VS3lwXQIDAQABo4IEnTCC BJkwHQYDVR0OBBYEFMgbdjpepTN+ABrY2fmQ2vbNZF6lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w MmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzAyZGY5MDI2LTVlYTItNDcxOC1h NTVjLWQ0NmRhNzUwNTM0OC8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1 MDUzNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwgaEGCCsGAQUF BwEHAQH/BIGRMIGOMIGLBAIAATCBhAMEBRgxIAMEBRhZAAMEBBiZcAMEBRiq4AME BBjrUAMEA0AHKAMEBEVYIAMEA4PiEAMEAYs80AMEAou0FAMEAZO5aAMEAZO5wAME BZ8awAMEAqLS7AMEAqde2AMEAcAQeAMEAsct9AMEAsdJHAMEAsxQZAMEA87G+AME AtBdxAMEAtj1VDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI30zBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/ BBIRVoLHvIftBlUjeojy6D7zfb2RWk6CxgH2bRxuzdKoUK+rom/Ws6Nc0ucxgjcW SS7qKTFRPmXVzivb9cxiLzRHJ2QG2JQwH9jgpMJ+Swam3wRSrSxAzqLDFNhgv6zt nLtthsR70veTo+K36W/PM8K13hS2rLsPhXx/+X6UUbingvv0e5gwhauEMmghBn2A uewT07qTg0m4L6BqPFFARhIzzPxgadi1yYZ5fo+VhJLdkO/lcn/4MdvvFlIJuDKt WFlSsBtfBsAgpKAzNSwCJMHLI/oJSo866NqgjKc75GiiNPEuONVtQKUg9ufdFawz 4nncYqMAgAWKzN9/7Cuk -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:21 2025 by rpki-client