This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170.cer File: 8962fffc-1831-44b7-9aec-c89910749170.cer (raw, json) Hash identifier: feUtbSZjyYYEnfBJAsFQldtG+b0jpdiGiGDrwe2+TnM= Subject key identifier: A2:1F:C5:6A:98:96:6E:A6:66:71:B3:15:D1:8D:9E:5A:9E:6B:92:C0 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3E1CC205677ED832D9878120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Dec 2025 21:12:42 +0000 Certificate not after: Thu 23 Mar 2028 20:12:42 +0000 Subordinate resources: IP: 2602:81c:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:1c:c2:05:67:7e:d8:32:d9:87:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 19 21:12:42 2025 GMT Not After : Mar 23 20:12:42 2028 GMT Subject: CN=8962fffc-1831-44b7-9aec-c89910749170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:ec:7c:9f:96:9d:14:d2:11:61:13:19:26: 43:e4:3d:d0:58:6f:ea:48:19:c4:1f:79:fa:d0:4e: 86:87:04:b0:ee:94:90:44:c8:26:7f:9b:76:45:f5: 1c:f0:9f:50:09:76:01:f0:fb:a5:33:6d:78:47:87: f9:50:2e:55:1a:73:bf:f3:2e:02:1d:ab:f5:20:ea: a5:d6:3e:ba:33:56:05:0e:ba:5f:ef:d9:41:2a:96: d9:19:5e:e9:2b:6f:2c:2b:a3:4b:27:2a:18:08:75: 46:0b:c4:64:8f:a8:ee:c7:5c:11:81:32:d0:a8:7e: ea:59:39:a2:8f:f2:32:de:cf:4a:dc:db:78:0b:eb: 8e:ed:ef:df:15:63:9f:34:a0:e4:c5:56:0c:eb:8e: aa:62:c4:8e:9e:36:ad:81:09:16:bc:99:d6:4d:08: 02:ff:f8:57:38:96:06:13:98:48:86:5b:9e:dd:f1: f8:b0:dd:fb:2a:5f:0b:90:e7:97:fb:31:b7:bb:47: 33:9e:fe:ca:25:d6:13:e8:44:15:a1:03:76:5c:fb: 3e:5e:0c:10:56:42:c7:ff:9d:fe:e9:99:05:9e:65: 34:1c:46:4e:02:13:6b:2d:1e:9d:a1:d0:fa:4f:10: 0c:04:42:2a:46:7d:04:6d:83:2c:e8:23:cb:df:9f: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:C5:6A:98:96:6E:A6:66:71:B3:15:D1:8D:9E:5A:9E:6B:92:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8962fffc-1831-44b7-9aec-c89910749170/8962fffc-1831-44b7-9aec-c89910749170.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:81c:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c2:a8:32:f4:33:24:6e:21:cf:87:c1:a9:ba:cf:73:15:4a: d8:b6:ec:a9:01:e8:17:38:9f:ec:e7:13:a5:b0:20:ea:35:37: 0b:a6:74:95:aa:19:29:6d:43:a5:18:3a:19:69:a1:69:90:ca: 21:ac:56:3b:08:8f:93:29:60:b4:0a:ed:7d:73:7e:c2:ed:23: c2:1d:a4:55:51:d6:ee:d3:4a:42:8f:01:51:88:14:92:43:a4: cd:34:4b:3c:c9:f8:cf:aa:2f:f5:41:c6:2a:3e:5f:cc:fc:75: c6:5e:a5:e7:00:fa:63:94:69:64:8d:d4:d7:d4:9b:37:4c:ed: ab:ee:62:18:b6:be:71:c2:37:77:70:1f:e7:c2:29:e7:b1:2a: f0:2e:9e:3b:07:fc:3f:76:53:b8:a3:79:13:62:09:72:38:ce: 30:0f:71:4b:c7:fd:67:f1:ad:77:bf:b1:cb:3f:90:68:f1:ce: b5:41:42:51:4f:bf:68:d2:0a:57:a7:cc:21:a2:40:37:a2:06: ed:e9:cf:cd:17:ef:76:20:5a:da:08:42:19:d7:64:13:1f:39: 8e:d6:47:02:3e:8e:cb:97:f1:b2:5d:25:48:ca:48:c1:84:d5: 8a:91:fe:74:25:56:39:52:fe:a8:e4:54:6c:1a:c2:cb:28:5b: 35:0f:5f:74 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEw+HMIFZ37YMtmHgSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxOTIxMTI0MloXDTI4MDMyMzIwMTI0MlowLzEtMCsGA1UEAxMk ODk2MmZmZmMtMTgzMS00NGI3LTlhZWMtYzg5OTEwNzQ5MTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAievsfJ+WnRTSEWETGSZD5D3QWG/qSBnEH3n6 0E6GhwSw7pSQRMgmf5t2RfUc8J9QCXYB8PulM214R4f5UC5VGnO/8y4CHav1IOql 1j66M1YFDrpf79lBKpbZGV7pK28sK6NLJyoYCHVGC8Rkj6jux1wRgTLQqH7qWTmi j/Iy3s9K3Nt4C+uO7e/fFWOfNKDkxVYM646qYsSOnjatgQkWvJnWTQgC//hXOJYG E5hIhlue3fH4sN37Kl8LkOeX+zG3u0cznv7KJdYT6EQVoQN2XPs+XgwQVkLH/53+ 6ZkFnmU0HEZOAhNrLR6dodD6TxAMBEIqRn0EbYMs6CPL359AAwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFKIfxWqYlm6mZnGzFdGNnlqea5LAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 OTYyZmZmYy0xODMxLTQ0YjctOWFlYy1jODk5MTA3NDkxNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzg5NjJmZmZjLTE4MzEtNDRiNy05 YWVjLWM4OTkxMDc0OTE3MC84OTYyZmZmYy0xODMxLTQ0YjctOWFlYy1jODk5MTA3 NDkxNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggc4AAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIMKoMvQzJG4hz4fB qbrPcxVK2LbsqQHoFzif7OcTpbAg6jU3C6Z0laoZKW1DpRg6GWmhaZDKIaxWOwiP kylgtArtfXN+wu0jwh2kVVHW7tNKQo8BUYgUkkOkzTRLPMn4z6ov9UHGKj5fzPx1 xl6l5wD6Y5RpZI3U19SbN0ztq+5iGLa+ccI3d3Af58Ip57Eq8C6eOwf8P3ZTuKN5 E2IJcjjOMA9xS8f9Z/Gtd7+xyz+QaPHOtUFCUU+/aNIKV6fMIaJAN6IG7enPzRfv diBa2ghCGddkEx85jtZHAj6Oy5fxsl0lSMpIwYTVipH+dCVWOVL+qORUbBrCyyhb NQ9fdA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:58:20 2025 by rpki-client