This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375.cer File: 520160ce-4acb-4f52-9fb7-d99a9ac74375.cer (raw, json) Hash identifier: WSKNScjNnlCrPB91TbFQIRX0xrhEZRTT9jtZeFskIPM= Subject key identifier: 2A:97:02:BF:BE:35:68:72:88:5D:F6:D7:22:FA:5A:F3:88:C4:40:FF Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C20DD5491679DE07B77BE1D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/520160ce-4acb-4f52-9fb7-d99a9ac74375.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Dec 2025 09:46:27 +0000 Certificate not after: Mon 13 Mar 2028 08:46:27 +0000 Subordinate resources: IP: 23.150.52.0/24 IP: 2602:f4bb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:20:dd:54:91:67:9d:e0:7b:77:be:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 9 09:46:27 2025 GMT Not After : Mar 13 08:46:27 2028 GMT Subject: CN=520160ce-4acb-4f52-9fb7-d99a9ac74375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:9b:5d:7a:54:23:39:ea:1d:41:73:df:cf: b1:de:8f:c3:8c:b6:52:81:23:7c:51:a7:17:e7:1e: 0d:06:e3:8a:85:05:a4:c3:c2:08:f4:d4:1c:5d:38: 67:f2:da:73:13:ab:1e:05:80:b2:a7:52:da:01:d6: 0b:58:14:af:db:9c:bf:77:5c:a8:1b:d1:db:90:36: 91:9f:a0:b6:7a:11:83:7e:13:27:41:d2:66:fa:05: 4f:f5:ea:ae:45:fa:3b:91:83:2a:22:09:b3:54:9f: 3a:50:5f:86:9a:b2:e5:2b:34:ed:77:7c:ed:25:7b: 4a:f7:33:21:33:d8:2a:c2:97:2e:60:08:f7:d5:b9: a4:33:44:39:52:cd:f2:7b:30:8b:7a:b5:2e:a2:29: 6a:60:54:5f:31:61:d4:6f:d1:59:0c:81:d8:ef:f5: 9b:05:3c:f1:1f:0f:b8:94:f7:18:d3:f9:83:31:1b: 12:71:ce:56:ac:ac:79:af:a3:ca:24:32:f0:4b:d3: 70:26:c4:ca:78:b2:71:2b:99:fe:93:0f:ca:86:85: bc:50:e4:e0:af:97:d1:d6:2c:3a:78:90:52:26:95: 1e:80:4b:d6:37:08:f8:91:41:c2:c7:0e:9e:51:75: 41:9f:0d:b0:16:9e:e6:91:d1:4a:31:66:95:81:87: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:02:BF:BE:35:68:72:88:5D:F6:D7:22:FA:5A:F3:88:C4:40:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/520160ce-4acb-4f52-9fb7-d99a9ac74375.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.52.0/24 IPv6: 2602:f4bb::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8f:7a:e8:a0:93:ec:43:da:62:d2:ce:72:22:ac:43:4d:a7: 60:b1:35:25:60:c3:ba:2d:b6:c9:4a:e6:0d:3a:9a:eb:8e:5f: ba:7e:c6:05:fd:90:1d:f0:6f:2d:8f:bb:1d:d7:81:02:a7:94: 76:b4:2f:0f:04:e1:c3:50:2b:84:4b:f1:88:29:0c:e1:e9:5e: db:ac:2d:9e:71:9e:b8:08:40:c2:d0:09:9a:10:3a:20:38:ad: 49:43:ab:d2:c0:fe:85:79:7e:91:e2:3b:1a:d8:cc:07:3b:52: e8:9b:fc:01:eb:1b:a6:0f:3f:cc:65:f3:a4:44:78:35:5a:b9: ed:da:71:11:ab:bb:eb:5e:8b:b6:0b:e3:e9:16:bf:db:e5:c0: 43:d0:44:83:d3:d5:7c:7d:5a:ee:b5:0b:25:4a:fc:c7:f4:2f: 55:b5:83:1b:0e:65:4f:e4:6b:6e:ce:ac:79:af:50:56:bd:8c: fb:ba:26:f9:42:52:b1:7e:70:3e:9c:80:5e:1c:83:36:49:29: 45:b3:db:4b:fc:27:a8:7a:fd:11:5a:4b:7d:49:11:6d:8f:9c: d9:80:85:d9:0b:b5:75:30:0c:3b:a0:44:14:1e:f2:ee:34:28: 15:1b:cf:db:2a:b7:85:1c:f3:2d:4c:7a:4b:cf:ff:33:47:32: 8b:93:bd:82 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEwg3VSRZ53ge3e+HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwOTA5NDYyN1oXDTI4MDMxMzA4NDYyN1owLzEtMCsGA1UEAxMk NTIwMTYwY2UtNGFjYi00ZjUyLTlmYjctZDk5YTlhYzc0Mzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZGbXXpUIznqHUFz38+x3o/DjLZSgSN8UacX 5x4NBuOKhQWkw8II9NQcXThn8tpzE6seBYCyp1LaAdYLWBSv25y/d1yoG9HbkDaR n6C2ehGDfhMnQdJm+gVP9equRfo7kYMqIgmzVJ86UF+GmrLlKzTtd3ztJXtK9zMh M9gqwpcuYAj31bmkM0Q5Us3yezCLerUuoilqYFRfMWHUb9FZDIHY7/WbBTzxHw+4 lPcY0/mDMRsScc5WrKx5r6PKJDLwS9NwJsTKeLJxK5n+kw/KhoW8UOTgr5fR1iw6 eJBSJpUegEvWNwj4kUHCxw6eUXVBnw2wFp7mkdFKMWaVgYeknQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCqXAr++NWhyiF321yL6WvOIxED/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 MjAxNjBjZS00YWNiLTRmNTItOWZiNy1kOTlhOWFjNzQzNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzUyMDE2MGNlLTRhY2ItNGY1Mi05 ZmI3LWQ5OWE5YWM3NDM3NS81MjAxNjBjZS00YWNiLTRmNTItOWZiNy1kOTlhOWFj NzQzNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXljQwDgQCAAIwCAMGACYC9LsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGWPeuigk+xD2mLSznIirENNp2CxNSVgw7ottslK5g06muuOX7p+xgX9kB3wby2P ux3XgQKnlHa0Lw8E4cNQK4RL8YgpDOHpXtusLZ5xnrgIQMLQCZoQOiA4rUlDq9LA /oV5fpHiOxrYzAc7Uuib/AHrG6YPP8xl86REeDVaue3acRGru+tei7YL4+kWv9vl wEPQRIPT1Xx9Wu61CyVK/Mf0L1W1gxsOZU/ka27OrHmvUFa9jPu6JvlCUrF+cD6c gF4cgzZJKUWz20v8J6h6/RFaS31JEW2PnNmAhdkLtXUwDDugRBQe8u40KBUbz9sq t4Uc8y1MekvP/zNHMouTvYI= -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:50 2025 by rpki-client