This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24b6ab30-0fc7-4ee5-9281-2952691f537c.cer File: 24b6ab30-0fc7-4ee5-9281-2952691f537c.cer (raw, json) Hash identifier: qqOMJHjokyIEfRK4ur75SiKWHl9eIjA9pNrZGnapNps= Subject key identifier: 44:B0:5E:09:4A:9A:F8:3D:DB:C7:70:95:D1:EA:F4:36:42:30:95:76 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3888B4B28F34573A12C6F200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24b6ab30-0fc7-4ee5-9281-2952691f537c/24b6ab30-0fc7-4ee5-9281-2952691f537c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24b6ab30-0fc7-4ee5-9281-2952691f537c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Dec 2025 21:15:21 +0000 Certificate not after: Thu 16 Mar 2028 18:26:18 +0000 Subordinate resources: AS: 33437 IP: 23.151.44.0/24 IP: 2602:f498::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:38:88:b4:b2:8f:34:57:3a:12:c6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 17 21:15:21 2025 GMT Not After : Mar 16 18:26:18 2028 GMT Subject: CN=24b6ab30-0fc7-4ee5-9281-2952691f537c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:d9:9e:e8:0c:28:ae:b8:2a:dd:1f:3b:5e: 0d:90:a2:86:8e:1b:e9:6b:a1:f9:42:a8:ad:9e:95: c2:5b:a6:83:e6:41:5e:79:f3:ea:22:ea:bd:2a:95: d3:58:86:94:f0:c1:7c:7f:ef:4b:bc:4a:a8:4f:1a: 26:1f:67:b4:b9:83:d3:a5:c3:c2:c0:77:de:25:a2: dd:18:46:a3:a1:44:a8:7e:65:da:2b:0d:09:c7:ce: c9:80:b8:72:ac:a6:d1:9f:20:9b:f0:0e:86:04:47: a2:25:ab:2d:06:f5:4b:9b:ed:b6:cf:2c:78:21:fd: 39:69:a0:0d:84:b2:7b:d5:3b:31:6b:23:f7:71:6e: ea:9e:b3:e4:df:36:e7:24:64:f8:46:d0:a4:73:be: 12:07:c5:c9:f9:a3:b6:24:a5:22:9b:c5:8d:03:1a: 58:bc:b8:5a:a6:0d:39:cb:83:84:f8:55:00:3d:72: 97:96:89:79:31:e9:83:81:d5:0f:e5:3c:94:95:ee: e2:ef:4e:eb:43:04:32:2d:a3:ec:ed:14:02:3e:7e: 14:2f:77:4d:1d:04:95:36:c8:87:a9:1e:21:a1:53: 26:72:70:b9:c1:5d:d0:90:9e:6e:03:17:29:97:cd: a0:83:47:75:4e:23:6d:3a:db:c8:79:e4:a2:05:50: 36:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B0:5E:09:4A:9A:F8:3D:DB:C7:70:95:D1:EA:F4:36:42:30:95:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24b6ab30-0fc7-4ee5-9281-2952691f537c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24b6ab30-0fc7-4ee5-9281-2952691f537c/24b6ab30-0fc7-4ee5-9281-2952691f537c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.44.0/24 IPv6: 2602:f498::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f4:0c:14:97:b3:3e:56:37:0f:01:57:41:50:43:84:5d:3a: f0:f8:ef:db:12:49:15:84:50:1b:40:a3:cb:a2:bb:dc:c1:93: 66:15:5f:76:5f:46:0d:32:ec:27:ad:e7:80:14:b0:74:b0:a8: 0f:a2:d9:44:d7:e7:21:80:de:b0:ab:2d:30:77:31:c6:d4:7f: 92:e6:3b:fa:f8:28:2a:77:82:7c:93:bb:bc:ed:88:16:c6:48: 8f:b9:60:30:bd:53:f7:42:ad:7f:e0:0f:6a:a8:c7:79:90:83: a3:75:0d:da:92:04:42:63:2b:d8:94:ac:a4:ee:24:69:12:e2: e0:63:a5:ef:12:cb:39:e2:3c:db:e4:e1:27:d5:d4:71:27:b2: bf:58:d3:04:99:15:ca:f5:c2:60:5b:4d:a1:20:62:31:fe:c8: 64:c8:b2:f8:4e:22:93:15:01:61:a9:61:6d:73:27:47:dc:6a: 27:9b:03:37:7d:34:94:88:6a:1e:a4:72:92:96:03:c4:f6:70: 9d:ad:fc:9b:ce:70:e6:f2:ce:5a:bf:d5:cb:41:a8:4c:51:b0: fd:f4:cb:e4:07:d5:c2:1e:fa:d0:5f:43:7b:0f:4c:1a:ba:de: 74:46:bc:7c:99:dc:a5:88:2e:0a:ac:31:4b:a9:2d:2d:f1:37: cf:68:2c:bd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEw4iLSyjzRXOhLG8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxNzIxMTUyMVoXDTI4MDMxNjE4MjYxOFowLzEtMCsGA1UEAxMk MjRiNmFiMzAtMGZjNy00ZWU1LTkyODEtMjk1MjY5MWY1MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy/ZnugMKK64Kt0fO14NkKKGjhvpa6H5Qqit npXCW6aD5kFeefPqIuq9KpXTWIaU8MF8f+9LvEqoTxomH2e0uYPTpcPCwHfeJaLd GEajoUSofmXaKw0Jx87JgLhyrKbRnyCb8A6GBEeiJastBvVLm+22zyx4If05aaAN hLJ71TsxayP3cW7qnrPk3zbnJGT4RtCkc74SB8XJ+aO2JKUim8WNAxpYvLhapg05 y4OE+FUAPXKXlol5MemDgdUP5TyUle7i707rQwQyLaPs7RQCPn4UL3dNHQSVNsiH qR4hoVMmcnC5wV3QkJ5uAxcpl82gg0d1TiNtOtvIeeSiBVA2OQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFESwXglKmvg928dwldHq9DZCMJV2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y NGI2YWIzMC0wZmM3LTRlZTUtOTI4MS0yOTUyNjkxZjUzN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzI0YjZhYjMwLTBmYzctNGVlNS05 MjgxLTI5NTI2OTFmNTM3Yy8yNGI2YWIzMC0wZmM3LTRlZTUtOTI4MS0yOTUyNjkx ZjUzN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlywwDgQCAAIwCAMGACYC9JgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCCnTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo9AwUl7M+VjcPAVdBUEOEXTrw +O/bEkkVhFAbQKPLorvcwZNmFV92X0YNMuwnreeAFLB0sKgPotlE1+chgN6wqy0w dzHG1H+S5jv6+Cgqd4J8k7u87YgWxkiPuWAwvVP3Qq1/4A9qqMd5kIOjdQ3akgRC YyvYlKyk7iRpEuLgY6XvEss54jzb5OEn1dRxJ7K/WNMEmRXK9cJgW02hIGIx/shk yLL4TiKTFQFhqWFtcydH3GonmwM3fTSUiGoepHKSlgPE9nCdrfybznDm8s5av9XL QahMUbD99MvkB9XCHvrQX0N7D0waut50Rrx8mdyliC4KrDFLqS0t8TfPaCy9 -----END CERTIFICATE-----Generated at Fri Dec 19 22:03:05 2025 by rpki-client