This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer File: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer (raw, json) Hash identifier: qLnQBl3Pk2y7EOCTdJti4jDaIXqyTi9rDcslqOqxonM= Subject key identifier: 47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3C2089716181949F65E3C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:08:42 +0000 Certificate not after: Thu 23 Mar 2028 03:08:42 +0000 Subordinate resources: IP: 23.150.212.0/24 IP: 2602:f4a6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3c:20:89:71:61:81:94:9f:65:e3:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 19 04:08:42 2025 GMT Not After : Mar 23 03:08:42 2028 GMT Subject: CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:5d:b4:2f:c7:de:28:1f:d5:31:c5:ee:08: 4e:ca:eb:2e:fa:f8:30:d6:67:94:33:5c:8c:f7:e3: 22:50:e7:33:5e:b9:14:48:29:ea:06:49:ac:32:25: 18:f4:90:93:34:a2:46:47:8e:5f:cf:44:3b:74:f6: 23:3e:9d:34:b7:55:ce:73:53:cc:aa:13:3e:2e:87: e5:81:72:c8:31:74:f7:16:4b:a7:34:88:7b:d9:ca: f5:f3:11:58:7e:3d:93:5d:9d:53:ab:b9:09:f0:ac: b9:26:6b:27:62:5a:d7:bf:2a:7b:3a:bd:e0:15:2d: 49:a4:0a:17:b4:ab:2b:5b:f5:37:7c:61:a4:a3:bc: 48:4e:7a:44:3c:ef:82:e1:1c:17:61:37:43:cf:fd: da:25:f5:59:7f:40:3a:1f:17:b6:bc:98:a8:4c:70: 68:17:d2:4e:95:c8:ff:96:b6:ab:f7:d1:cd:9f:93: ab:e8:d9:fa:84:ca:73:b6:c6:5c:dd:8c:78:77:36: c9:cc:c7:7c:5f:a3:99:37:d7:28:f8:2a:d6:97:cd: ef:4e:d9:76:76:85:b9:7b:6a:10:bd:fa:8d:3a:0b: 98:b5:d4:1a:ab:78:61:a3:2a:e6:ff:e2:d8:3b:42: 98:4b:d2:6b:c9:e4:b5:44:c3:46:f9:19:8c:14:7f: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.212.0/24 IPv6: 2602:f4a6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2a:29:b4:4b:22:21:34:2c:bb:6d:f9:27:54:15:9a:4e:20: a7:6f:0f:cb:ed:c6:e5:e8:a8:40:7b:01:10:cd:4b:3b:cd:e4: 3d:61:43:15:6e:a1:75:89:ea:22:a8:89:4a:b8:6a:83:1f:c1: 46:1e:56:d5:ce:10:f2:ba:aa:5d:ee:ec:7a:85:39:ee:fe:38: f2:af:ad:32:6b:ed:3c:01:7b:29:3d:9e:a0:0c:15:e7:a7:23: 35:ac:84:52:1a:59:ce:0a:ac:c4:6c:cd:14:d1:57:67:c9:fe: 00:4b:9c:9a:35:2a:f8:61:52:7e:1d:9d:ab:53:12:cd:1d:c7: 7f:19:f5:1b:16:db:f4:f7:fc:fa:c2:8d:32:66:f5:76:7e:34: 1e:be:79:e1:04:a3:9f:6b:b0:4a:11:77:de:1e:92:16:b9:47: e4:ca:ba:ff:de:74:ef:c2:1f:66:00:f2:90:49:12:91:64:f9: fb:5a:0d:59:b8:99:75:d1:37:eb:35:f4:7a:2f:27:84:80:a2: 98:f4:50:a6:9e:8a:ff:3e:8c:02:0a:98:83:c8:c1:25:36:1c: 68:c5:bb:44:be:80:96:2a:fc:26:7a:88:1e:ed:64:53:d5:04: 31:99:7e:13:e3:44:51:56:30:3b:6c:e0:c5:8c:7f:ec:a3:72: 2f:17:6d:1c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEw8IIlxYYGUn2XjwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxOTA0MDg0MloXDTI4MDMyMzAzMDg0MlowLzEtMCsGA1UEAxMk MzNmYmQ4NWQtYmM2NS00MmE2LThjNzgtYzNmMDVkYTk5MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/FdtC/H3igf1THF7ghOyusu+vgw1meUM1yM 9+MiUOczXrkUSCnqBkmsMiUY9JCTNKJGR45fz0Q7dPYjPp00t1XOc1PMqhM+Lofl gXLIMXT3FkunNIh72cr18xFYfj2TXZ1Tq7kJ8Ky5JmsnYlrXvyp7Or3gFS1JpAoX tKsrW/U3fGGko7xITnpEPO+C4RwXYTdDz/3aJfVZf0A6Hxe2vJioTHBoF9JOlcj/ lrar99HNn5Or6Nn6hMpztsZc3Yx4dzbJzMd8X6OZN9co+CrWl83vTtl2doW5e2oQ vfqNOguYtdQaq3hhoyrm/+LYO0KYS9JryeS1RMNG+RmMFH+rxwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEcU1qQcz1T268+gAvq2sWBLnlaWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z M2ZiZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2YwNWRhOTkwMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzMzZmJkODVkLWJjNjUtNDJhNi04 Yzc4LWMzZjA1ZGE5OTAxYi8zM2ZiZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2YwNWRh OTkwMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXltQwDgQCAAIwCAMGACYC9KYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHIqKbRLIiE0LLtt+SdUFZpOIKdvD8vtxuXoqEB7ARDNSzvN5D1hQxVuoXWJ6iKo iUq4aoMfwUYeVtXOEPK6ql3u7HqFOe7+OPKvrTJr7TwBeyk9nqAMFeenIzWshFIa Wc4KrMRszRTRV2fJ/gBLnJo1KvhhUn4dnatTEs0dx38Z9RsW2/T3/PrCjTJm9XZ+ NB6+eeEEo59rsEoRd94ekha5R+TKuv/edO/CH2YA8pBJEpFk+ftaDVm4mXXRN+s1 9HovJ4SAopj0UKaeiv8+jAIKmIPIwSU2HGjFu0S+gJYq/CZ6iB7tZFPVBDGZfhPj RFFWMDts4MWMf+yjci8XbRw= -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:34 2025 by rpki-client