This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677.cer File: 423bfb5d-16be-44f8-b1ec-dead1152a677.cer (raw, json) Hash identifier: Txs2S8qd3f0UJevRSj1CtaF/SDVycv05alioo4z5DJQ= Subject key identifier: A5:A6:4D:5C:AB:FD:D6:89:F5:0A:47:0F:1B:BC:66:5D:54:9F:43:07 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C1340B625748BE6D7E16E5680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Dec 2025 12:45:23 +0000 Certificate not after: Wed 23 Feb 2028 19:08:59 +0000 Subordinate resources: AS: 13403 AS: 399725 IP: 134.128.224.0/19 IP: 167.94.192.0/22 IP: 216.108.216.0/23 IP: 2604:2c60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:40:b6:25:74:8b:e6:d7:e1:6e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 4 12:45:23 2025 GMT Not After : Feb 23 19:08:59 2028 GMT Subject: CN=423bfb5d-16be-44f8-b1ec-dead1152a677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:f1:57:0b:ca:b4:45:54:0d:9c:74:e3:28: 7e:f9:6c:8f:79:4f:63:f0:9a:54:03:a8:d4:0f:fc: 96:d1:3c:e5:48:70:41:75:ce:e3:14:e2:8c:fe:6a: 31:d9:5e:b0:1f:82:e2:52:3f:88:35:8e:9b:dd:33: 7e:b2:96:41:50:28:57:de:8d:be:89:c0:91:85:a7: 19:fa:64:c4:e1:9e:db:e1:98:c7:fe:eb:e1:47:d7: dc:9a:a3:b1:6c:44:7b:1b:8b:2c:b2:31:50:92:2b: b7:c8:89:dd:fe:7b:61:ab:56:fb:73:f8:2c:0e:38: e5:10:7c:79:87:56:72:20:2b:b3:f4:9f:b5:90:12: 21:f9:b1:79:a4:ec:2e:eb:dd:4b:21:51:50:0f:58: 41:82:f9:31:29:5d:0e:ce:27:f8:bd:0f:f2:82:57: a0:32:ff:04:e8:63:49:bc:ee:f7:59:2d:e0:d1:8c: a5:9d:00:e5:0e:16:56:9c:4d:a4:f3:99:06:ea:a3: c5:23:d4:52:b2:56:b0:04:f1:5b:58:5b:d5:37:56: 85:28:bf:da:2d:e3:dc:7f:77:80:ed:7c:42:61:98: b9:0f:4b:69:d0:87:72:3e:9f:b1:c0:f4:d0:96:ad: 09:0d:88:dc:73:89:2c:29:5c:e6:9e:e1:c4:09:09: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:4D:5C:AB:FD:D6:89:F5:0A:47:0F:1B:BC:66:5D:54:9F:43:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 134.128.224.0/19 167.94.192.0/22 216.108.216.0/23 IPv6: 2604:2c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13403 399725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a2:32:5a:8a:8c:ef:6d:11:1d:d8:6c:5a:91:ed:fc:a0:72: 36:44:b4:87:32:aa:bf:2b:12:2e:27:d2:4e:55:5e:de:01:60: 2a:f5:b5:67:4f:aa:b8:8f:6a:d6:49:ac:c1:18:73:db:1e:19: 22:96:d5:a2:64:25:9f:85:c2:3c:01:08:82:c2:8a:48:cd:17: 52:88:95:43:d3:18:2d:da:2b:06:ea:c7:75:58:a5:ea:6d:33: c6:4d:ed:b4:39:7d:84:3f:d2:59:e7:dc:4a:d0:3f:ce:33:30: 03:e5:9d:b0:eb:aa:bd:b0:a7:90:f7:fa:04:58:84:67:8d:2d: 26:6a:09:01:36:25:97:f3:b4:9f:74:6f:c0:27:02:7c:d7:52: 4e:05:38:5b:f6:5c:d5:f8:c2:d5:84:cd:51:48:af:17:cd:42: 84:04:52:bd:1f:f0:84:e4:1c:a7:54:83:9d:bf:66:c8:5b:f2: 8c:c8:b4:71:1c:16:2a:d3:6e:83:06:89:22:cf:c4:0b:9f:c1: 52:1b:ce:1f:f0:9d:a9:da:ab:5d:a5:81:c7:44:57:a9:bc:5a: 1b:06:94:10:0a:e8:87:f6:a8:9c:11:6c:4d:fd:84:1a:52:23: 26:5d:e7:b2:45:13:35:82:71:f2:7a:70:71:79:db:cd:9c:d8: 29:b1:a9:8c -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEwTQLYldIvm1+FuVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwNDEyNDUyM1oXDTI4MDIyMzE5MDg1OVowLzEtMCsGA1UEAxMk NDIzYmZiNWQtMTZiZS00NGY4LWIxZWMtZGVhZDExNTJhNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg7xVwvKtEVUDZx04yh++WyPeU9j8JpUA6jU D/yW0TzlSHBBdc7jFOKM/mox2V6wH4LiUj+INY6b3TN+spZBUChX3o2+icCRhacZ +mTE4Z7b4ZjH/uvhR9fcmqOxbER7G4sssjFQkiu3yInd/nthq1b7c/gsDjjlEHx5 h1ZyICuz9J+1kBIh+bF5pOwu691LIVFQD1hBgvkxKV0Ozif4vQ/yglegMv8E6GNJ vO73WS3g0YylnQDlDhZWnE2k85kG6qPFI9RSslawBPFbWFvVN1aFKL/aLePcf3eA 7XxCYZi5D0tp0IdyPp+xwPTQlq0JDYjcc4ksKVzmnuHECQmZbwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFKWmTVyr/daJ9QpHDxu8Zl1Un0MHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 MjNiZmI1ZC0xNmJlLTQ0ZjgtYjFlYy1kZWFkMTE1MmE2NzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQyM2JmYjVkLTE2YmUtNDRmOC1i MWVjLWRlYWQxMTUyYTY3Ny80MjNiZmI1ZC0xNmJlLTQ0ZjgtYjFlYy1kZWFkMTE1 MmE2NzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAWGgOADBAKnXsADBAHYbNgwDQQCAAIwBwMFACYE LGAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICNFsCAwYZbTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrojJa iozvbREd2Gxake38oHI2RLSHMqq/KxIuJ9JOVV7eAWAq9bVnT6q4j2rWSazBGHPb HhkiltWiZCWfhcI8AQiCwopIzRdSiJVD0xgt2isG6sd1WKXqbTPGTe20OX2EP9JZ 59xK0D/OMzAD5Z2w66q9sKeQ9/oEWIRnjS0magkBNiWX87SfdG/AJwJ811JOBThb 9lzV+MLVhM1RSK8XzUKEBFK9H/CE5BynVIOdv2bIW/KMyLRxHBYq026DBokiz8QL n8FSG84f8J2p2qtdpYHHRFepvFobBpQQCuiH9qicEWxN/YQaUiMmXeeyRRM1gnHy enBxedvNnNgpsamM -----END CERTIFICATE-----Generated at Fri Dec 19 19:08:41 2025 by rpki-client