This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer File: 28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer (raw, json) Hash identifier: y2lrOwLYmxvW2Smvdu3SeYcGs1/DiuxS5e5m+0btCh8= Subject key identifier: 68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C1F98EC6E3C0A2922647888C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Dec 2025 22:52:49 +0000 Certificate not after: Sun 12 Mar 2028 21:52:49 +0000 Subordinate resources: AS: 31842 AS: 398479 IP: 66.118.8.0/22 IP: 162.253.208.0/22 IP: 199.46.120.0/22 IP: 2605:e3c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:98:ec:6e:3c:0a:29:22:64:78:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 8 22:52:49 2025 GMT Not After : Mar 12 21:52:49 2028 GMT Subject: CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:a0:5b:da:d7:93:54:59:66:c3:cf:bd:8f: ce:c7:3b:dc:f0:dd:9d:a0:14:bb:fb:04:cb:c7:85: 8b:b9:da:3e:6a:82:d6:42:0b:d5:85:f1:83:ed:89: d6:fc:41:2e:2e:e6:a5:c2:ff:18:31:15:be:44:b7: 77:1a:e4:f8:cd:ff:86:0b:b8:4b:5a:0a:8c:d0:23: eb:50:0c:81:21:8e:75:f6:04:b3:8a:59:c2:be:77: 1f:aa:73:cd:5f:84:50:95:cd:e6:05:c4:d1:0f:97: 2c:ff:04:b7:5b:bc:21:c1:9e:71:58:22:b4:0e:81: a2:71:c2:36:37:d0:f2:84:74:81:e7:1f:5b:71:4e: 47:e9:d8:80:7b:c1:24:17:c7:c3:15:63:ac:88:e6: d6:0b:9e:d6:97:bc:e0:43:53:56:80:dd:d9:65:63: 71:d5:a7:67:8d:cb:de:cd:4e:c3:95:15:60:6d:e3: 43:2f:81:49:23:62:13:5e:18:79:7c:4e:78:73:10: 78:59:a0:f9:55:39:c6:32:47:60:50:bc:f6:b7:7d: 46:ee:46:c6:d2:ad:1f:84:9d:03:7b:84:3d:93:2e: b2:a5:c6:fc:d8:6b:b6:9b:11:d0:27:8a:04:6a:0d: fc:07:35:2e:0d:cf:c9:29:58:97:4a:44:cc:78:85: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.118.8.0/22 162.253.208.0/22 199.46.120.0/22 IPv6: 2605:e3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31842 398479 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ff:b5:6f:a2:bd:48:bd:c3:b0:2e:06:bd:d3:36:a4:23:d4: fa:cf:4e:61:1e:56:e0:c2:47:d2:e2:4e:e0:8f:8c:48:72:23: 5c:7e:34:b0:11:9c:5f:a6:0b:8e:15:37:dd:74:d5:67:9d:1d: bb:4d:10:d5:1c:81:fe:2e:64:40:b7:2d:85:70:95:d6:b7:55: bd:a4:77:3f:38:ec:cc:50:a7:2d:7b:8d:28:5a:ab:9e:11:3a: 70:4b:41:d7:80:8a:b0:d8:ac:4d:e8:76:41:83:c7:74:ba:3f: 64:91:7c:9a:3f:59:69:6d:ab:a8:81:d0:2b:a9:a8:92:e8:2e: a6:ae:b5:2f:0d:4d:11:38:58:2a:d6:1d:34:a6:63:b1:10:e8: bd:17:68:ff:f0:dd:12:cc:7a:27:23:d4:75:ee:62:e8:d0:ee: b7:1a:47:be:38:50:b3:1b:77:27:d7:94:79:8d:8b:6f:a3:0a: 2a:38:3e:55:47:69:6b:b0:a5:b1:c6:d3:6e:d4:3e:b7:cf:eb: 04:61:59:fa:af:e2:18:2e:72:df:ca:ad:9e:79:33:fd:c0:7d: 3a:6c:cf:6d:50:14:29:f2:76:e3:d9:d3:cf:97:10:c1:e1:24: ea:31:31:f1:95:c5:d3:91:3f:dc:b4:eb:08:1a:da:9a:69:b6: dd:20:e2:59 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEwfmOxuPAopImR4iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwODIyNTI0OVoXDTI4MDMxMjIxNTI0OVowLzEtMCsGA1UEAxMk MjhkNGRlZDItZmIyZi00N2JjLWI5Y2QtYzQ1YzllMTIwZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiygW9rXk1RZZsPPvY/Oxzvc8N2doBS7+wTL x4WLudo+aoLWQgvVhfGD7YnW/EEuLualwv8YMRW+RLd3GuT4zf+GC7hLWgqM0CPr UAyBIY519gSzilnCvncfqnPNX4RQlc3mBcTRD5cs/wS3W7whwZ5xWCK0DoGiccI2 N9DyhHSB5x9bcU5H6diAe8EkF8fDFWOsiObWC57Wl7zgQ1NWgN3ZZWNx1adnjcve zU7DlRVgbeNDL4FJI2ITXhh5fE54cxB4WaD5VTnGMkdgULz2t31G7kbG0q0fhJ0D e4Q9ky6ypcb82Gu2mxHQJ4oEag38BzUuDc/JKViXSkTMeIXmMwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFGgMPmSYbFn8xvtPwmVIRy2hllRxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y OGQ0ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVjOWUxMjBmZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzI4ZDRkZWQyLWZiMmYtNDdiYy1i OWNkLWM0NWM5ZTEyMGZmMC8yOGQ0ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVjOWUx MjBmZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJCdggDBAKi/dADBALHLngwDQQCAAIwBwMFACYF 48AwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICfGICAwYUjzBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw/7Vv or1IvcOwLga90zakI9T6z05hHlbgwkfS4k7gj4xIciNcfjSwEZxfpguOFTfddNVn nR27TRDVHIH+LmRAty2FcJXWt1W9pHc/OOzMUKcte40oWqueETpwS0HXgIqw2KxN 6HZBg8d0uj9kkXyaP1lpbauogdArqaiS6C6mrrUvDU0ROFgq1h00pmOxEOi9F2j/ 8N0SzHonI9R17mLo0O63Gke+OFCzG3cn15R5jYtvowoqOD5VR2lrsKWxxtNu1D63 z+sEYVn6r+IYLnLfyq2eeTP9wH06bM9tUBQp8nbj2dPPlxDB4STqMTHxlcXTkT/c tOsIGtqaabbdIOJZ -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:19 2025 by rpki-client