This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer File: 74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer (raw, json) Hash identifier: zaJgFS/omVUZAtvUMKfTShGj7NF9FEbKCwB923mV5RA= Subject key identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C2770BF0D41231F4F731CF880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Dec 2025 18:18:20 +0000 Certificate not after: Sun 30 Jan 2028 07:40:29 +0000 Subordinate resources: AS: 23506 -- 23507 IP: 23.133.205.0/24 IP: 2602:f704::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:27:70:bf:0d:41:23:1f:4f:73:1c:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 11 18:18:20 2025 GMT Not After : Jan 30 07:40:29 2028 GMT Subject: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:1d:85:47:fb:19:cb:84:89:9f:1f:bc:26: 82:ca:e5:2b:d8:d3:a4:52:19:7c:4a:70:a5:1a:86: 0b:37:4f:31:8a:ea:68:2e:1b:50:b6:df:88:43:54: dc:ae:ac:db:82:a6:09:ae:f9:bd:88:ba:e5:79:db: 65:a1:60:06:fe:9b:84:88:da:d5:40:a4:c3:b9:19: bd:b5:4c:65:32:3b:75:db:a5:ce:e9:23:a6:f8:f1: fc:9d:5f:9f:f9:d6:b1:06:13:87:e9:03:06:d3:bd: 68:2f:81:ce:3f:e3:dd:88:23:58:26:4a:d1:31:4d: e4:5a:61:d0:bc:03:7b:6e:dd:47:c8:3d:d1:05:f5: 87:38:89:bb:29:29:cd:a8:c6:5b:ba:0f:29:8b:d7: dc:2e:16:82:77:9a:ee:4f:56:de:dd:8f:88:f6:8c: 7e:e2:2f:bf:a6:58:87:e6:67:d4:ab:64:56:75:eb: da:9f:36:7c:a0:c6:e8:80:1f:d8:be:97:a2:07:8b: 78:d3:f6:cf:38:6d:cb:5e:cc:04:93:50:a3:c5:7c: be:38:9a:fc:bf:5b:34:fb:70:bf:8c:f2:f3:4a:f7: ea:33:cc:27:e8:6c:0a:3b:92:39:91:e2:17:bb:12: 8c:67:95:31:7b:eb:38:a9:55:25:36:a9:a9:1c:6c: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.205.0/24 IPv6: 2602:f704::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23506-23507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4c:7b:c0:16:8c:12:b8:22:71:99:5c:5e:4e:59:7b:3f:d3: d4:bf:ba:0f:40:c8:db:72:78:30:c1:70:e3:27:d6:cd:e4:be: 63:72:bb:ec:29:6c:93:22:02:55:7d:e8:25:7c:95:5b:e6:98: 2b:a2:9e:32:96:b9:86:b9:7a:9f:86:60:0a:00:40:f1:ee:15: 0b:c2:84:93:2b:20:6f:e4:77:19:d1:f2:78:42:e1:8e:be:04: fd:d9:1e:83:a3:bf:01:d3:d0:7b:a6:21:c9:be:12:8b:8b:fd: 02:c5:77:77:b1:ae:74:0d:88:7a:e0:61:c7:43:e9:5b:e7:26: 15:a9:54:5e:b8:41:e8:f8:f4:d0:a2:80:ab:bb:e0:98:8c:0d: 7d:40:76:b4:55:9d:14:f2:8a:b2:07:c5:d2:12:00:47:b7:6d: db:42:7c:7d:62:5a:72:7f:f4:33:36:ed:e8:43:63:a6:4e:2f: 26:ff:d7:f7:1f:10:09:8e:ec:ae:72:c0:47:9e:8c:a1:6d:a2: 39:be:91:e1:c0:6e:20:3a:01:90:10:a0:ca:89:2d:6e:83:91: 82:13:f4:98:d3:8f:bd:af:ac:90:a8:d8:34:d4:8d:fc:b4:c5: a7:45:7c:e0:78:00:5c:e0:e5:21:00:4f:e1:d3:2c:4d:72:87: e4:3c:e3:2a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEwncL8NQSMfT3Mc+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxMTE4MTgyMFoXDTI4MDEzMDA3NDAyOVowLzEtMCsGA1UEAxMk NzRjNWVhYTctNzhiYi00Y2NhLTgzNWEtMGRmODEyZmY3ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsdhUf7GcuEiZ8fvCaCyuUr2NOkUhl8SnCl GoYLN08xiupoLhtQtt+IQ1TcrqzbgqYJrvm9iLrledtloWAG/puEiNrVQKTDuRm9 tUxlMjt126XO6SOm+PH8nV+f+daxBhOH6QMG071oL4HOP+PdiCNYJkrRMU3kWmHQ vAN7bt1HyD3RBfWHOIm7KSnNqMZbug8pi9fcLhaCd5ruT1be3Y+I9ox+4i+/pliH 5mfUq2RWdevanzZ8oMbogB/YvpeiB4t40/bPOG3LXswEk1CjxXy+OJr8v1s0+3C/ jPLzSvfqM8wn6GwKO5I5keIXuxKMZ5Uxe+s4qVUlNqmpHGz8GwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNJFylSD96rDNYkQssEUnlwuYdPTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJmZjdkODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc0YzVlYWE3LTc4YmItNGNjYS04 MzVhLTBkZjgxMmZmN2Q4Ny83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJm ZjdkODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhc0wDgQCAAIwCAMGBCYC9wQAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAowCAICW9ICAlvTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGtMe8AWjBK4InGZXF5O WXs/09S/ug9AyNtyeDDBcOMn1s3kvmNyu+wpbJMiAlV96CV8lVvmmCuinjKWuYa5 ep+GYAoAQPHuFQvChJMrIG/kdxnR8nhC4Y6+BP3ZHoOjvwHT0HumIcm+EouL/QLF d3exrnQNiHrgYcdD6VvnJhWpVF64Qej49NCigKu74JiMDX1AdrRVnRTyirIHxdIS AEe3bdtCfH1iWnJ/9DM27ehDY6ZOLyb/1/cfEAmO7K5ywEeejKFtojm+keHAbiA6 AZAQoMqJLW6DkYIT9JjTj72vrJCo2DTUjfy0xadFfOB4AFzg5SEAT+HTLE1yh+Q8 4yo= -----END CERTIFICATE-----Generated at Sun Dec 21 11:27:32 2025 by rpki-client