This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3.cer File: 8da8a7a4-5357-42a9-b624-843fb64e55b3.cer (raw, json) Hash identifier: wuQOMt+Hji4fx7tfx8ZxOI1pe4USaG18V6dt5Sav3cI= Subject key identifier: FE:19:CF:83:4A:0F:4A:6C:5B:8B:A7:FE:B3:0C:77:F5:5B:83:2A:FA Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3B379CCC7A45922E5C391FD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/8da8a7a4-5357-42a9-b624-843fb64e55b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Dec 2025 20:19:23 +0000 Certificate not after: Wed 22 Mar 2028 19:19:23 +0000 Subordinate resources: AS: 393368 IP: 2620:a4:b040::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:37:9c:cc:7a:45:92:2e:5c:39:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 18 20:19:23 2025 GMT Not After : Mar 22 19:19:23 2028 GMT Subject: CN=8da8a7a4-5357-42a9-b624-843fb64e55b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:86:47:36:08:d9:5e:29:81:31:65:9e:b0: 77:b8:03:a2:4f:76:16:20:a1:9c:28:cf:4f:bc:83: 46:44:17:0b:ae:3f:75:81:d3:bf:78:95:7a:fa:0e: ea:32:af:f9:88:a3:25:da:fb:3f:d7:39:f2:73:6b: 3d:29:33:16:a0:cc:aa:25:93:d0:e8:f1:9c:6d:04: b5:36:a8:b5:c4:79:df:5e:12:d4:96:1a:07:fa:24: c1:59:88:b1:3d:31:4a:46:7b:52:cd:cc:4a:49:4c: ce:e8:7e:1e:63:ac:a0:77:1b:a7:de:ad:40:63:83: a8:af:09:71:b2:9b:7d:03:c1:7a:17:e0:3f:6c:ef: c5:ed:74:e2:7c:57:4d:0f:6b:3a:ee:c9:82:46:0b: f8:82:c2:bc:70:cb:c2:de:91:62:a4:c0:58:e2:20: f1:51:9b:c0:db:13:ab:64:e4:62:a3:b5:bd:2d:bd: dd:0a:37:5c:56:fb:5d:94:a9:3c:26:d5:8b:af:c3: 42:4f:14:a0:64:1d:76:32:65:2f:fa:cd:e8:75:fe: 20:f3:32:ee:da:2f:09:aa:14:f0:42:1c:7f:9a:e2: 80:88:61:f6:c2:71:5a:c8:a0:b9:02:8a:bf:63:62: ed:a0:48:6c:1e:18:81:26:3a:df:d4:35:0a:33:3d: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:CF:83:4A:0F:4A:6C:5B:8B:A7:FE:B3:0C:77:F5:5B:83:2A:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8da8a7a4-5357-42a9-b624-843fb64e55b3/8da8a7a4-5357-42a9-b624-843fb64e55b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2620:a4:b040::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:03:15:55:2a:60:70:f5:cd:d1:2c:e3:34:1e:59:47:18:fd: 15:cd:51:99:07:1e:e1:d0:5e:05:61:a9:87:87:e3:34:6a:60: 11:7c:2c:49:2d:2f:12:18:94:78:1a:f6:df:28:9e:f2:54:23: a2:ce:aa:fa:50:7e:da:a6:77:ef:92:1a:7e:ca:f0:af:39:79: d6:c1:41:82:a9:00:a2:69:fd:1f:ab:55:20:27:65:b0:44:bb: 0f:64:63:62:b5:a0:4c:3d:c9:28:bf:a0:94:29:3c:92:e6:e8: c9:db:da:ff:72:fa:43:44:26:e4:2c:de:5f:97:f5:59:8d:d8: aa:f4:fc:cd:f2:47:cb:27:3b:20:e1:0a:e4:a8:d8:56:97:7f: 2b:a0:ea:05:8a:2a:49:46:7e:b0:b1:88:05:8e:6d:83:8f:96: ee:d8:07:63:51:08:72:f9:d0:5e:7d:92:3a:64:1d:ca:2a:f7: 18:c3:d6:90:ed:80:24:74:aa:0e:32:03:11:0e:44:00:af:e1: 00:f2:0d:9b:a7:9c:2c:0b:51:11:9f:b9:cc:80:a2:b4:16:8c: 9b:8d:91:2b:3b:56:29:28:87:05:4b:52:35:25:24:e8:21:6d: 15:5b:a6:6a:e5:72:aa:d3:2e:17:45:ea:10:8a:fb:73:8e:88: d4:ee:e4:7d -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEw7N5zMekWSLlw5H9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxODIwMTkyM1oXDTI4MDMyMjE5MTkyM1owLzEtMCsGA1UEAxMk OGRhOGE3YTQtNTM1Ny00MmE5LWI2MjQtODQzZmI2NGU1NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iiGRzYI2V4pgTFlnrB3uAOiT3YWIKGcKM9P vINGRBcLrj91gdO/eJV6+g7qMq/5iKMl2vs/1znyc2s9KTMWoMyqJZPQ6PGcbQS1 Nqi1xHnfXhLUlhoH+iTBWYixPTFKRntSzcxKSUzO6H4eY6ygdxun3q1AY4Oorwlx spt9A8F6F+A/bO/F7XTifFdND2s67smCRgv4gsK8cMvC3pFipMBY4iDxUZvA2xOr ZORio7W9Lb3dCjdcVvtdlKk8JtWLr8NCTxSgZB12MmUv+s3odf4g8zLu2i8JqhTw Qhx/muKAiGH2wnFayKC5Aoq/Y2LtoEhsHhiBJjrf1DUKMz2SewIDAQABo4IEHjCC BBowHQYDVR0OBBYEFP4Zz4NKD0psW4un/rMMd/Vbgyr6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 ZGE4YTdhNC01MzU3LTQyYTktYjYyNC04NDNmYjY0ZTU1YjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzhkYThhN2E0LTUzNTctNDJhOS1i NjI0LTg0M2ZiNjRlNTViMy84ZGE4YTdhNC01MzU3LTQyYTktYjYyNC04NDNmYjY0 ZTU1YjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACksEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBgCYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEUDFVUqYHD1zdEs4zQeWUcY/RXNUZkHHuHQXgVhqYeH 4zRqYBF8LEktLxIYlHga9t8onvJUI6LOqvpQftqmd++SGn7K8K85edbBQYKpAKJp /R+rVSAnZbBEuw9kY2K1oEw9ySi/oJQpPJLm6Mnb2v9y+kNEJuQs3l+X9VmN2Kr0 /M3yR8snOyDhCuSo2FaXfyug6gWKKklGfrCxiAWObYOPlu7YB2NRCHL50F59kjpk Hcoq9xjD1pDtgCR0qg4yAxEORACv4QDyDZunnCwLURGfucyAorQWjJuNkSs7Viko hwVLUjUlJOghbRVbpmrlcqrTLhdF6hCK+3OOiNTu5H0= -----END CERTIFICATE-----Generated at Fri Dec 19 22:03:05 2025 by rpki-client