This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer File: 3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer (raw, json) Hash identifier: DFySwZFxEPu7UV3aLJpDsyFWPvLrexQVK2syafbnK0I= Subject key identifier: BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C20DB82ECA135433040BDBE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Dec 2025 09:42:48 +0000 Certificate not after: Mon 13 Mar 2028 08:42:48 +0000 Subordinate resources: IP: 23.150.188.0/24 IP: 2602:f4af::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:20:db:82:ec:a1:35:43:30:40:bd:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 9 09:42:48 2025 GMT Not After : Mar 13 08:42:48 2028 GMT Subject: CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:26:fd:6e:c9:38:39:c7:fb:e1:a1:84:6e: 55:aa:4f:3f:b1:71:c8:39:a7:8c:b4:41:a9:e7:de: 3f:32:a6:eb:51:e1:db:4b:0c:61:5f:03:45:c0:77: 0a:b7:38:ac:42:02:50:0f:e3:bf:bb:59:54:e2:14: 3f:d7:4d:4d:6e:3b:88:26:89:1b:97:d7:cd:c1:f1: 9b:00:8d:04:f6:9f:a6:f5:7c:4e:eb:29:a6:ae:22: 52:61:98:df:74:fd:e8:cd:7c:cd:79:c9:b1:eb:6d: d8:4d:8a:3e:26:00:1a:1b:6e:a4:1d:54:7c:1e:7d: 49:bc:eb:7f:94:13:33:ff:03:79:3b:6a:69:52:a7: 69:0e:a5:0b:71:87:e9:ef:e5:82:89:d4:a2:73:36: 03:6c:9d:a1:13:74:c6:30:a7:89:7c:50:ce:b0:c6: 35:a9:10:f2:26:bb:93:43:28:05:1d:b0:02:34:fc: 5a:e8:a7:f8:d6:4c:23:d7:5f:f4:cf:96:e8:20:6a: 35:7b:3b:cc:d6:9c:ec:57:de:b1:f1:35:25:dd:eb: 5f:01:05:45:c9:ce:25:53:95:56:cd:77:30:f8:3d: 24:2a:44:a5:79:1e:7e:3c:f6:70:f2:60:a4:73:30: 65:02:06:73:ac:36:06:ba:16:85:af:0e:e9:2c:83: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.188.0/24 IPv6: 2602:f4af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:75:9f:64:e4:00:f5:2c:34:7e:1f:20:db:d5:d7:51:55:2f: fe:a7:85:6f:53:40:e5:c4:91:d3:18:d1:2a:22:bc:09:db:82: 1b:c1:02:58:3a:10:26:76:2a:4b:d9:c7:4a:b4:44:75:48:d9: eb:5c:b1:2d:1b:0a:50:a6:47:02:a2:f4:62:79:73:e2:c8:ae: 4f:4b:ab:87:a2:b4:b8:6e:ee:39:a2:21:58:55:7b:e4:20:3b: 9e:e6:5e:bd:84:45:e7:c4:da:1a:e9:a9:b5:42:cd:2f:ed:95: df:c2:31:bb:8a:8a:45:96:cd:c0:30:10:ce:f9:b9:8e:02:83: be:e0:e8:6d:3d:1c:e7:2d:ba:6e:da:9c:9c:2c:28:da:ae:8d: 3a:66:6e:4c:46:7d:c1:e1:43:54:43:1c:9e:f5:89:e3:00:4d: 5b:11:c8:63:4d:b9:e8:71:7e:2e:c2:8d:11:30:f3:d1:c5:30: 2e:00:d0:8d:ab:0e:8b:e3:ca:3c:98:a2:a4:60:89:5c:df:56: 0d:72:bf:43:a7:c4:c1:c1:97:b0:da:7e:5f:53:50:b6:e4:bb: 48:da:be:a7:7c:82:b2:0b:fe:7b:ff:19:53:c1:69:fa:72:f3: 67:59:de:1a:03:3c:35:e9:25:a5:1f:21:d3:38:6a:96:f6:3a: 4e:a1:c1:27 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEwg24LsoTVDMEC9voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwOTA5NDI0OFoXDTI4MDMxMzA4NDI0OFowLzEtMCsGA1UEAxMk M2I4YjMzZTAtNTE3ZS00MWNiLWIzZTMtMDBhZjNkZWZjOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKwm/W7JODnH++GhhG5Vqk8/sXHIOaeMtEGp 594/MqbrUeHbSwxhXwNFwHcKtzisQgJQD+O/u1lU4hQ/101NbjuIJokbl9fNwfGb AI0E9p+m9XxO6ymmriJSYZjfdP3ozXzNecmx623YTYo+JgAaG26kHVR8Hn1JvOt/ lBMz/wN5O2ppUqdpDqULcYfp7+WCidSiczYDbJ2hE3TGMKeJfFDOsMY1qRDyJruT QygFHbACNPxa6Kf41kwj11/0z5boIGo1ezvM1pzsV96x8TUl3etfAQVFyc4lU5VW zXcw+D0kKkSleR5+PPZw8mCkczBlAgZzrDYGuhaFrw7pLINlRwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLwyKgJs60OcQ6/BJWKfrMo4G9jJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z YjhiMzNlMC01MTdlLTQxY2ItYjNlMy0wMGFmM2RlZmM5MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNiOGIzM2UwLTUxN2UtNDFjYi1i M2UzLTAwYWYzZGVmYzkwYi8zYjhiMzNlMC01MTdlLTQxY2ItYjNlMy0wMGFmM2Rl ZmM5MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlrwwDgQCAAIwCAMGACYC9K8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AH91n2TkAPUsNH4fINvV11FVL/6nhW9TQOXEkdMY0SoivAnbghvBAlg6ECZ2KkvZ x0q0RHVI2etcsS0bClCmRwKi9GJ5c+LIrk9Lq4eitLhu7jmiIVhVe+QgO57mXr2E RefE2hrpqbVCzS/tld/CMbuKikWWzcAwEM75uY4Cg77g6G09HOctum7anJwsKNqu jTpmbkxGfcHhQ1RDHJ71ieMATVsRyGNNuehxfi7CjREw89HFMC4A0I2rDovjyjyY oqRgiVzfVg1yv0OnxMHBl7Dafl9TULbku0javqd8grIL/nv/GVPBafpy82dZ3hoD PDXpJaUfIdM4apb2Ok6hwSc= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:18 2025 by rpki-client