This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/524b9b18-6fd6-4cdb-a433-a7ac533d4824.cer File: 524b9b18-6fd6-4cdb-a433-a7ac533d4824.cer (raw, json) Hash identifier: 4SNm8N12d1kwMrbYlnClJeNboe/bq0Xi76hFkhaqSlE= Subject key identifier: D9:D0:F3:07:00:A8:63:BB:B2:D0:84:13:90:A6:F9:06:7E:27:38:CE Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C21AEB8CE7C1211B8568D9300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/524b9b18-6fd6-4cdb-a433-a7ac533d4824/524b9b18-6fd6-4cdb-a433-a7ac533d4824.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/524b9b18-6fd6-4cdb-a433-a7ac533d4824/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Dec 2025 16:48:21 +0000 Certificate not after: Mon 13 Mar 2028 08:45:36 +0000 Subordinate resources: IP: 23.151.12.0/24 IP: 2602:f4ac::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:ae:b8:ce:7c:12:11:b8:56:8d:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 9 16:48:21 2025 GMT Not After : Mar 13 08:45:36 2028 GMT Subject: CN=524b9b18-6fd6-4cdb-a433-a7ac533d4824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:b7:18:34:5b:66:d8:ef:aa:f0:5e:68:28: bc:95:a3:70:68:ec:6c:b2:9e:5d:f2:4b:1a:ff:7c: d3:a3:3a:46:20:ac:5c:87:04:c4:94:28:31:36:08: af:5f:56:71:a7:b7:08:a4:9f:e5:04:b7:e5:55:7a: c5:86:2d:e4:50:18:6d:b2:70:11:77:62:8d:a4:16: 44:0f:74:78:2c:11:79:bc:70:7a:91:8a:82:f9:b2: 3d:c7:41:eb:98:9b:a8:8e:2c:f4:eb:e7:71:21:da: 4c:42:1c:34:c7:62:56:6a:f4:b0:bf:3d:27:be:24: fa:56:c9:a2:0d:ae:97:6c:2c:3a:0c:3e:49:24:b1: 49:3e:c8:e0:dc:f9:38:a8:94:3f:c6:04:70:02:d9: 81:96:ec:6f:f3:60:05:08:a5:bd:4d:cc:72:9a:db: 4d:75:dc:b9:67:fb:55:91:74:2d:df:34:c8:b1:93: 1a:34:06:c1:9d:40:5c:75:bf:f1:5f:d8:bf:e4:9b: 02:20:12:be:0e:99:77:7c:ba:aa:32:c4:91:22:cd: 43:60:4a:05:8a:60:c9:cd:4c:61:0c:1f:55:f5:79: 12:90:97:75:64:a2:fe:c7:28:4c:27:d2:03:ee:d4: 23:5a:c3:94:47:ff:f5:d5:ba:e0:27:f5:69:65:ac: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:F3:07:00:A8:63:BB:B2:D0:84:13:90:A6:F9:06:7E:27:38:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/524b9b18-6fd6-4cdb-a433-a7ac533d4824/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/524b9b18-6fd6-4cdb-a433-a7ac533d4824/524b9b18-6fd6-4cdb-a433-a7ac533d4824.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.12.0/24 IPv6: 2602:f4ac::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:97:8f:71:f9:aa:3c:30:47:3a:c6:17:fc:b2:99:01:22:df: 81:f6:ab:f2:b7:a9:0a:ba:f5:96:43:57:57:fa:c8:5f:51:f8: 45:cb:34:30:b8:d5:64:01:4b:21:70:da:99:00:fe:92:db:c6: 0d:c9:50:3a:99:c0:e6:5a:21:a0:a7:77:7c:5c:ac:61:88:44: 53:d5:1e:c1:f0:ab:ab:35:ea:14:01:28:c0:5b:26:b0:07:5b: 3a:44:1c:13:6b:47:18:54:74:c3:c2:f2:22:76:a2:cd:81:57: 43:6f:06:7b:6d:a7:89:6b:4d:1e:80:dd:25:48:83:61:05:67: 5f:a6:cc:38:ea:24:dd:f5:f6:e0:49:9d:e7:07:83:f5:ad:d3: 6a:b8:b7:35:6a:a6:66:6e:53:31:98:72:f2:9c:66:6d:13:19: c5:ea:a8:a7:55:17:dc:70:1a:dd:29:e9:3e:18:ff:31:3b:d0: f1:b8:8c:1e:f7:e9:cc:d5:f7:18:4f:13:0f:0d:f6:58:5d:3c: 65:65:e6:68:12:67:3e:54:36:fd:db:06:39:48:ef:56:6c:92: 9b:11:59:73:7f:b1:30:20:44:c8:85:54:68:e8:97:69:de:a0: 17:be:f9:6e:20:24:b4:4d:99:d1:44:42:7e:24:2f:d4:e5:95: 05:c0:fd:85 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEwhrrjOfBIRuFaNkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwOTE2NDgyMVoXDTI4MDMxMzA4NDUzNlowLzEtMCsGA1UEAxMk NTI0YjliMTgtNmZkNi00Y2RiLWE0MzMtYTdhYzUzM2Q0ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJC3GDRbZtjvqvBeaCi8laNwaOxssp5d8ksa /3zTozpGIKxchwTElCgxNgivX1Zxp7cIpJ/lBLflVXrFhi3kUBhtsnARd2KNpBZE D3R4LBF5vHB6kYqC+bI9x0HrmJuojiz06+dxIdpMQhw0x2JWavSwvz0nviT6Vsmi Da6XbCw6DD5JJLFJPsjg3Pk4qJQ/xgRwAtmBluxv82AFCKW9TcxymttNddy5Z/tV kXQt3zTIsZMaNAbBnUBcdb/xX9i/5JsCIBK+Dpl3fLqqMsSRIs1DYEoFimDJzUxh DB9V9XkSkJd1ZKL+xyhMJ9ID7tQjWsOUR//11brgJ/VpZaw/lQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNnQ8wcAqGO7stCEE5Cm+QZ+JzjOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 MjRiOWIxOC02ZmQ2LTRjZGItYTQzMy1hN2FjNTMzZDQ4MjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzUyNGI5YjE4LTZmZDYtNGNkYi1h NDMzLWE3YWM1MzNkNDgyNC81MjRiOWIxOC02ZmQ2LTRjZGItYTQzMy1hN2FjNTMz ZDQ4MjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlwwwDgQCAAIwCAMGACYC9KwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHGXj3H5qjwwRzrGF/yymQEi34H2q/K3qQq69ZZDV1f6yF9R+EXLNDC41WQBSyFw 2pkA/pLbxg3JUDqZwOZaIaCnd3xcrGGIRFPVHsHwq6s16hQBKMBbJrAHWzpEHBNr RxhUdMPC8iJ2os2BV0NvBnttp4lrTR6A3SVIg2EFZ1+mzDjqJN319uBJnecHg/Wt 02q4tzVqpmZuUzGYcvKcZm0TGcXqqKdVF9xwGt0p6T4Y/zE70PG4jB736czV9xhP Ew8N9lhdPGVl5mgSZz5UNv3bBjlI71ZskpsRWXN/sTAgRMiFVGjol2neoBe++W4g JLRNmdFEQn4kL9TllQXA/YU= -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:18 2025 by rpki-client