This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer File: 7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer (raw, json) Hash identifier: nMJLhwR68c1XH0fzpW0KJFhU08q7/HL/HucaHJQkyjs= Subject key identifier: 39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C15EF15F4B181B0FBD31906C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Dec 2025 11:48:20 +0000 Certificate not after: Sun 05 Mar 2028 19:34:52 +0000 Subordinate resources: AS: 17299 IP: 199.16.236.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:15:ef:15:f4:b1:81:b0:fb:d3:19:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 5 11:48:20 2025 GMT Not After : Mar 5 19:34:52 2028 GMT Subject: CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:21:e9:53:f0:e4:86:0b:62:68:29:a2:75: 3b:36:28:11:5e:87:84:69:5e:08:0b:04:89:63:49: 5c:2b:f5:c1:d2:dc:ca:e0:3e:5a:d4:fc:29:20:9e: ce:d8:03:9f:ad:d6:88:f0:9b:51:6b:2a:8c:9a:1f: 2d:49:99:1f:9f:73:09:ec:ce:ae:eb:07:f4:a6:33: e4:cc:a1:4f:6b:41:51:41:79:cb:78:37:71:4b:25: a9:97:31:1b:12:42:49:8d:60:25:e9:4b:c3:ea:dc: 06:4e:55:66:4e:62:38:ed:c0:2c:5d:7c:12:ce:40: 46:d7:79:4d:a3:c8:05:2c:51:2e:2a:5b:75:e1:2d: 92:f1:e9:66:bf:be:33:f1:89:43:11:69:54:9a:fe: 0c:be:2e:7e:19:7b:0b:7b:58:c2:e4:fe:16:fa:ce: eb:a2:f5:12:0d:26:cb:67:17:b7:61:c3:fc:14:12: 81:68:70:3c:1f:9c:c5:ba:96:95:42:2d:fb:10:8c: 78:08:ac:ff:df:25:e5:f4:78:ee:90:99:bc:55:4e: 93:8e:7c:26:fe:be:72:07:1a:31:90:65:d3:14:e3: 28:88:f6:c3:9f:07:ad:8a:07:71:de:22:20:6a:dd: b7:a2:d4:a7:a8:6d:ad:94:48:df:ab:d1:fc:cc:41: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.16.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17299 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1e:ba:ea:6f:63:3f:d4:f3:8e:40:b3:89:2f:8b:01:08:8c: ce:3a:8c:dc:ab:03:bb:c2:45:23:08:76:d9:99:f8:63:ce:df: 20:cd:33:41:76:93:30:63:48:51:f1:82:af:c6:c1:d8:78:26: 18:ae:2b:2b:35:83:a1:3b:ba:82:48:99:dd:50:f1:0e:85:46: 86:60:d1:fb:33:05:7b:dc:5b:03:d0:65:78:62:b3:17:4a:5c: e5:f0:6d:bc:09:9b:84:a9:68:48:9f:af:e4:b6:ad:62:15:bb: 79:11:21:37:c9:52:29:fd:d3:dd:42:6e:d6:fa:1b:9e:ab:19: f0:d0:31:27:26:ac:4c:e4:9b:84:ba:82:28:b5:19:04:ca:49: fd:b2:6e:7d:9e:74:83:1d:20:ca:d4:cf:3b:0c:63:42:e0:2a: b5:06:8d:df:19:13:c4:ab:58:09:26:40:e7:8a:7f:20:fd:11: cf:5b:1d:38:3e:d0:7c:b4:47:81:03:cc:9a:b5:f5:a8:1a:ee: d9:2a:27:49:90:11:ff:01:22:a9:a8:df:6e:65:1c:1b:f0:5b: 89:c4:f7:e0:b1:6b:d5:74:d4:49:e7:50:48:bf:43:bb:4b:63: 3e:63:81:a2:c3:69:6c:7e:dd:25:70:55:b7:0b:dd:6c:85:66: da:63:fa:2b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEwV7xX0sYGw+9MZBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwNTExNDgyMFoXDTI4MDMwNTE5MzQ1MlowLzEtMCsGA1UEAxMk N2JlMWJiYWUtNGM0NS00MDhmLWI1ZTEtNjYxOGYxZWMxODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIIh6VPw5IYLYmgponU7NigRXoeEaV4ICwSJ Y0lcK/XB0tzK4D5a1PwpIJ7O2AOfrdaI8JtRayqMmh8tSZkfn3MJ7M6u6wf0pjPk zKFPa0FRQXnLeDdxSyWplzEbEkJJjWAl6UvD6twGTlVmTmI47cAsXXwSzkBG13lN o8gFLFEuKlt14S2S8elmv74z8YlDEWlUmv4Mvi5+GXsLe1jC5P4W+s7rovUSDSbL Zxe3YcP8FBKBaHA8H5zFupaVQi37EIx4CKz/3yXl9HjukJm8VU6Tjnwm/r5yBxox kGXTFOMoiPbDnwetigdx3iIgat23otSnqG2tlEjfq9H8zEErmQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDl7Ho9QiRjwrq8bb9sHE5qozwy9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 YmUxYmJhZS00YzQ1LTQwOGYtYjVlMS02NjE4ZjFlYzE4NjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzdiZTFiYmFlLTRjNDUtNDA4Zi1i NWUxLTY2MThmMWVjMTg2My83YmUxYmJhZS00YzQ1LTQwOGYtYjVlMS02NjE4ZjFl YzE4NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHEOwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Q5MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZx666m9jP9TzjkCziS+LAQiMzjqM3KsDu8JFIwh22Zn4Y87f IM0zQXaTMGNIUfGCr8bB2HgmGK4rKzWDoTu6gkiZ3VDxDoVGhmDR+zMFe9xbA9Bl eGKzF0pc5fBtvAmbhKloSJ+v5LatYhW7eREhN8lSKf3T3UJu1vobnqsZ8NAxJyas TOSbhLqCKLUZBMpJ/bJufZ50gx0gytTPOwxjQuAqtQaN3xkTxKtYCSZA54p/IP0R z1sdOD7QfLRHgQPMmrX1qBru2SonSZAR/wEiqajfbmUcG/BbicT34LFr1XTUSedQ SL9Du0tjPmOBosNpbH7dJXBVtwvdbIVm2mP6Kw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:45 2025 by rpki-client