This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer File: 3ba39ba7-a768-4a44-aad9-880db8565967.cer (raw, json) Hash identifier: ISt3ApMAp1/5wV0RLFg3LmDsya06TcANxlW9M4wgt+U= Subject key identifier: 85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C0E0E169141BE8D48DC9BAF34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Dec 2025 16:04:20 +0000 Certificate not after: Mon 06 Mar 2028 16:04:20 +0000 Subordinate resources: AS: 10956 IP: 198.235.128.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0e:0e:16:91:41:be:8d:48:dc:9b:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 2 16:04:20 2025 GMT Not After : Mar 6 16:04:20 2028 GMT Subject: CN=3ba39ba7-a768-4a44-aad9-880db8565967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:74:ef:54:1d:a7:65:5f:16:6d:91:bf:44: 13:ed:4a:3d:2f:74:ed:1e:e2:dd:2c:c2:c0:2d:2a: 52:2a:8c:ae:31:e4:b4:d4:db:f7:7d:8c:ea:86:df: ba:a5:30:6c:bf:df:57:e5:3f:e9:7c:16:7e:cb:36: fb:8e:24:ca:02:80:7c:11:c2:c1:d0:fa:f1:f9:d2: 59:84:6f:4d:74:64:9d:26:b5:5e:6e:44:38:1e:e4: 61:35:39:91:3a:f0:70:4f:f4:81:f7:df:e2:55:80: 2a:e1:90:53:55:8a:0e:1e:d3:3e:2f:64:4a:a0:aa: f9:63:e9:7a:28:f5:2a:2b:7a:b1:d1:67:b5:e5:f4: 5f:38:09:d9:36:02:be:5b:08:0a:94:02:0b:b5:d1: 9f:38:ea:11:81:f2:20:1e:1a:ca:1f:34:37:29:af: a4:8a:9e:d6:07:ea:04:89:05:53:6c:ae:9f:95:05: d2:af:15:70:f5:38:f5:1a:ba:3a:8b:a1:0f:8c:c3: cb:a0:1f:88:2a:68:af:ec:08:71:8f:0d:76:e2:ed: dd:d4:8e:9f:2e:d6:50:82:ef:e9:9f:c0:63:ed:78: 58:a4:73:b6:4a:ea:10:22:96:2c:47:a3:37:1c:a2: 72:81:06:a9:c3:81:ed:71:46:97:70:e4:94:59:07: 16:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.235.128.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:00:db:2f:89:9a:65:58:eb:07:c6:e2:68:e0:ee:df:88:dd: 78:3c:7f:7d:a7:0e:ec:aa:4b:5e:2f:d4:03:fa:c3:5b:8d:bd: 64:6b:07:02:99:63:27:58:07:16:2e:f4:b0:b8:5b:c3:ab:05: 36:3e:92:d7:0a:5a:f2:19:87:f3:26:5d:b7:f3:d4:bc:76:86: 11:64:83:e9:69:ba:22:ca:76:0d:ac:c3:7f:d0:be:bf:65:d5: bc:f3:e8:48:59:0c:8e:8e:9f:cc:aa:8c:e6:2a:92:3b:fa:47: 7d:de:0e:16:ac:da:72:87:02:1f:ad:30:a1:b9:f5:08:2a:d7: bc:3d:4f:c4:24:60:91:95:bf:58:26:fe:45:14:a3:58:50:1f: 75:95:23:8e:71:c8:7e:03:c4:03:52:ef:5a:98:46:fa:eb:66: 71:60:c2:62:64:b6:2a:55:99:68:d1:6d:0e:bd:97:79:36:5d: ad:6a:78:e8:23:21:33:27:32:5d:21:fd:79:98:18:38:79:fc: cd:a5:01:ed:25:02:7a:fd:1e:be:fb:f5:71:f5:49:e7:6e:6c: 2e:30:ed:3d:aa:87:f8:0d:d5:50:ac:f2:8d:96:49:bd:88:42: d0:21:a1:09:cc:04:e5:b4:b8:03:93:ad:7e:3e:91:5c:0a:b7: f5:e6:80:1f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEwODhaRQb6NSNybrzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwMjE2MDQyMFoXDTI4MDMwNjE2MDQyMFowLzEtMCsGA1UEAxMk M2JhMzliYTctYTc2OC00YTQ0LWFhZDktODgwZGI4NTY1OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OV071Qdp2VfFm2Rv0QT7Uo9L3TtHuLdLMLA LSpSKoyuMeS01Nv3fYzqht+6pTBsv99X5T/pfBZ+yzb7jiTKAoB8EcLB0Prx+dJZ hG9NdGSdJrVebkQ4HuRhNTmROvBwT/SB99/iVYAq4ZBTVYoOHtM+L2RKoKr5Y+l6 KPUqK3qx0We15fRfOAnZNgK+WwgKlAILtdGfOOoRgfIgHhrKHzQ3Ka+kip7WB+oE iQVTbK6flQXSrxVw9Tj1Gro6i6EPjMPLoB+IKmiv7Ahxjw124u3d1I6fLtZQgu/p n8Bj7XhYpHO2SuoQIpYsR6M3HKJygQapw4HtcUaXcOSUWQcWpwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIUueFF7EZ2UFG7zocRjVOeZqDJgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z YmEzOWJhNy1hNzY4LTRhNDQtYWFkOS04ODBkYjg1NjU5NjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNiYTM5YmE3LWE3NjgtNGE0NC1h YWQ5LTg4MGRiODU2NTk2Ny8zYmEzOWJhNy1hNzY4LTRhNDQtYWFkOS04ODBkYjg1 NjU5NjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADG64AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC KswwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARgDbL4maZVjrB8biaODu34jdeDx/facO7KpLXi/UA/rDW429 ZGsHApljJ1gHFi70sLhbw6sFNj6S1wpa8hmH8yZdt/PUvHaGEWSD6Wm6Isp2DazD f9C+v2XVvPPoSFkMjo6fzKqM5iqSO/pHfd4OFqzacocCH60wobn1CCrXvD1PxCRg kZW/WCb+RRSjWFAfdZUjjnHIfgPEA1LvWphG+utmcWDCYmS2KlWZaNFtDr2XeTZd rWp46CMhMycyXSH9eZgYOHn8zaUB7SUCev0evvv1cfVJ525sLjDtPaqH+A3VUKzy jZZJvYhC0CGhCcwE5bS4A5Otfj6RXAq39eaAHw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:35 2025 by rpki-client