This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer File: 58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer (raw, json) Hash identifier: gMlWUFJKaLYhZack27gNyMijTLBhJc2BcfGdQZoJHFI= Subject key identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C1EB24BE2C18682A8C4C27D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Dec 2025 15:08:08 +0000 Certificate not after: Sun 12 Mar 2028 14:08:08 +0000 Subordinate resources: AS: 401723 IP: 198.154.28.0/23 IP: 209.92.152.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:b2:4b:e2:c1:86:82:a8:c4:c2:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 8 15:08:08 2025 GMT Not After : Mar 12 14:08:08 2028 GMT Subject: CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:e4:fb:5d:67:3d:59:f6:c1:e9:2c:56:93: 1e:03:15:39:ba:57:59:c3:c5:92:41:04:58:22:1c: 03:ee:0c:11:c2:22:1f:ec:45:b1:10:d1:39:5e:d0: de:97:c0:b9:75:3f:64:d0:77:eb:0f:6b:db:ad:1f: b6:2f:31:dd:9d:e6:9b:a6:93:b9:70:6e:25:8b:6b: c2:0e:be:37:13:97:c4:97:c2:f0:45:e3:16:99:69: 8b:24:90:7c:45:b3:eb:4d:5e:1d:de:7f:b7:89:2a: c1:b4:7f:af:24:4a:1e:e2:3a:a3:d4:af:a7:2f:30: 1e:00:cc:fd:45:b6:ab:b1:46:8e:c6:23:0b:9d:92: db:25:53:92:20:d0:94:ef:fa:7b:29:ab:65:61:ce: 5a:16:6d:06:7d:0c:9f:39:79:37:83:88:d4:a1:07: 93:5c:75:01:e1:da:35:b3:19:98:87:38:5c:a4:4f: 16:1b:95:5d:8f:92:52:69:55:82:32:6e:5f:cb:91: fb:f5:cc:c9:90:39:4c:77:dd:cc:40:3c:b2:91:d6: a4:21:fc:1c:09:c7:e9:83:1a:e6:d8:63:d0:bf:b0: c6:09:73:2e:2f:26:53:31:3a:f2:89:66:dd:28:4c: d0:a2:d4:91:b1:a2:22:e8:c7:44:1c:2d:3a:0c:a2: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.154.28.0/23 209.92.152.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401723 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9e:0c:7c:08:2a:3e:9f:a7:ef:c6:12:17:51:6d:06:d3:0f: aa:f6:d6:5f:76:b8:6c:c3:ba:6a:e1:fb:99:1c:86:b8:74:b7: 6f:e8:e4:99:be:62:ef:74:ec:f8:e6:89:b4:63:38:93:23:09: b1:02:4d:70:3e:00:37:e8:c4:33:6e:07:97:1f:69:b2:82:94: 61:d1:f9:37:55:36:9d:23:7b:a8:f1:e3:83:d0:de:b3:f4:9d: 00:1e:51:a6:e0:e0:d6:bd:f1:7b:17:fa:68:b8:6c:08:fb:34: 16:b0:e3:8f:b2:83:bc:0a:25:b2:4f:ee:4f:62:da:a4:9f:e3: fd:0e:1c:bc:b7:aa:57:d8:4d:f9:53:f4:da:0f:b8:4a:a6:db: e3:73:13:5f:0b:ed:b3:b1:43:4b:f1:b7:4a:7f:f5:84:86:f1: 31:df:e3:80:3e:64:32:f2:06:7f:6e:4a:ce:e4:47:91:5b:df: c4:8b:5a:d1:02:52:64:33:ec:57:8f:09:49:ac:23:91:bc:c4: 24:a8:32:cd:35:99:0b:4d:aa:4d:a1:51:7e:7d:f4:f6:56:8c: 63:03:fd:c7:77:58:7b:c6:41:c7:7f:04:cb:3b:1d:b0:98:48: f1:77:17:90:22:e8:97:fe:92:f3:5c:89:0a:8b:c2:8a:af:b0: 4a:21:ca:ce -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEweskviwYaCqMTCfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwODE1MDgwOFoXDTI4MDMxMjE0MDgwOFowLzEtMCsGA1UEAxMk NTg1ODZlMjEtNGRkMS00M2U4LTk2NTQtYjhkZDVlNGE3MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHk+11nPVn2weksVpMeAxU5uldZw8WSQQRY IhwD7gwRwiIf7EWxENE5XtDel8C5dT9k0HfrD2vbrR+2LzHdneabppO5cG4li2vC Dr43E5fEl8LwReMWmWmLJJB8RbPrTV4d3n+3iSrBtH+vJEoe4jqj1K+nLzAeAMz9 RbarsUaOxiMLnZLbJVOSINCU7/p7KatlYc5aFm0GfQyfOXk3g4jUoQeTXHUB4do1 sxmYhzhcpE8WG5Vdj5JSaVWCMm5fy5H79czJkDlMd93MQDyykdakIfwcCcfpgxrm 2GPQv7DGCXMuLyZTMTryiWbdKEzQotSRsaIi6MdEHC06DKIm/QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBAQ56yeQZNVA6f6OWZ7wsDAdlVGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0YTcxNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzU4NTg2ZTIxLTRkZDEtNDNlOC05 NjU0LWI4ZGQ1ZTRhNzE1Ny81ODU4NmUyMS00ZGQxLTQzZTgtOTY1NC1iOGRkNWU0 YTcxNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHGmhwDBAPRXJgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiE7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA+eDHwIKj6fp+/GEhdRbQbTD6r21l92uGzDumrh +5kchrh0t2/o5Jm+Yu907PjmibRjOJMjCbECTXA+ADfoxDNuB5cfabKClGHR+TdV Np0je6jx44PQ3rP0nQAeUabg4Na98XsX+mi4bAj7NBaw44+yg7wKJbJP7k9i2qSf 4/0OHLy3qlfYTflT9NoPuEqm2+NzE18L7bOxQ0vxt0p/9YSG8THf44A+ZDLyBn9u Ss7kR5Fb38SLWtECUmQz7FePCUmsI5G8xCSoMs01mQtNqk2hUX599PZWjGMD/cd3 WHvGQcd/BMs7HbCYSPF3F5Ai6Jf+kvNciQqLwoqvsEohys4= -----END CERTIFICATE-----Generated at Fri Dec 19 19:08:44 2025 by rpki-client