This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer File: be7047c2-33bd-411c-802c-e79eb6aea35f.cer (raw, json) Hash identifier: mvgXoUf5Pj1UsVm9tTheSeUqLFe8z7vMkKANZLGqb9I= Subject key identifier: 55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3B361A95EF3473282DA5E8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Dec 2025 20:16:21 +0000 Certificate not after: Wed 22 Mar 2028 19:16:21 +0000 Subordinate resources: AS: 399855 AS: 401602 IP: 164.153.140.0/24 IP: 164.153.142.0/24 IP: 2602:f9a4::/40 IP: 2604:960::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:36:1a:95:ef:34:73:28:2d:a5:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 18 20:16:21 2025 GMT Not After : Mar 22 19:16:21 2028 GMT Subject: CN=be7047c2-33bd-411c-802c-e79eb6aea35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:3e:03:2e:e6:05:26:29:78:0d:23:59:b5: 99:d6:c4:18:aa:bf:6a:c3:9a:67:43:5b:5d:aa:ca: db:64:7b:21:4d:80:c2:76:e1:8a:3d:2e:06:68:ed: ee:a0:64:5a:1c:79:e7:a8:0f:33:5d:fa:2d:f1:d7: 80:1f:6c:b9:d0:50:55:4b:44:80:1d:a5:76:f4:01: a1:52:2a:b8:cb:5e:f3:4a:35:9a:c7:de:cf:4b:0f: ff:a8:96:cf:7f:25:96:38:da:5e:01:99:08:04:3e: 95:99:2a:57:d3:f5:66:69:64:54:a9:02:aa:30:55: 73:27:30:9f:56:37:6d:dd:5b:63:98:43:7a:49:04: bc:7e:5f:90:42:70:af:5f:7b:cd:53:d7:da:50:96: 66:96:87:34:a8:d9:a8:c7:8a:9c:20:b0:79:22:11: cd:47:f2:dd:41:bd:a3:8c:bd:6b:c6:42:d2:e8:65: 9f:a3:89:a7:7d:f9:12:10:fd:38:cd:e5:99:10:0f: 92:23:57:17:76:da:a6:8d:48:2c:00:89:b7:d5:4c: 1c:99:37:21:e0:0e:84:ef:32:e5:6e:f3:b3:4e:53: e7:63:9c:a3:e3:e8:e9:38:eb:ee:7a:0a:9a:db:4c: 60:03:af:aa:80:6b:50:28:33:fd:ef:db:2f:71:c4: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 164.153.140.0/24 164.153.142.0/24 IPv6: 2602:f9a4::/40 2604:960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399855 401602 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:78:f6:07:aa:dc:26:1d:c8:47:1c:f2:f1:e2:68:1a:33:e6: 56:85:be:8d:34:cd:8d:77:dd:89:9c:7a:c7:99:fd:4f:87:17: bb:8c:32:e3:44:82:75:c4:50:9f:40:68:29:49:d3:c4:12:0e: 64:30:d0:85:12:fc:e1:29:78:a5:18:43:24:8a:21:1c:bd:a3: bd:b6:13:6d:9c:f1:bd:f8:5d:3e:0a:30:c0:2b:d9:f5:04:2a: 2e:98:f2:9f:a1:8a:ad:67:92:6a:7d:6e:45:ea:9e:7a:45:d3: df:ec:78:ee:0a:08:96:2a:e8:2f:5b:2b:0f:ae:28:ed:f7:47: 5f:a0:e5:a8:1d:b7:15:72:4a:7d:10:57:7f:ff:0d:7e:3d:89: 60:bd:f4:ed:bf:5f:b1:0b:03:a9:72:19:dc:42:d1:d6:3f:ca: fe:2d:78:9f:22:e8:ba:b3:3c:cd:b8:92:97:2f:f1:7c:29:0f: fa:5b:f7:90:ff:ad:9f:32:36:75:51:74:75:c0:44:62:62:ea: 3b:86:39:4e:52:9b:e3:61:c6:fd:4b:f2:49:1b:aa:6c:f6:17: 03:50:e8:b6:b6:ef:cf:10:d2:41:41:7f:51:65:be:f9:0c:bb: ec:42:2f:ce:25:a4:b1:f7:72:2b:c2:ef:7e:ea:81:f2:45:e2: 89:3a:9b:df -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEw7NhqV7zRzKC2l6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxODIwMTYyMVoXDTI4MDMyMjE5MTYyMVowLzEtMCsGA1UEAxMk YmU3MDQ3YzItMzNiZC00MTFjLTgwMmMtZTc5ZWI2YWVhMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxk+Ay7mBSYpeA0jWbWZ1sQYqr9qw5pnQ1td qsrbZHshTYDCduGKPS4GaO3uoGRaHHnnqA8zXfot8deAH2y50FBVS0SAHaV29AGh Uiq4y17zSjWax97PSw//qJbPfyWWONpeAZkIBD6VmSpX0/VmaWRUqQKqMFVzJzCf Vjdt3VtjmEN6SQS8fl+QQnCvX3vNU9faUJZmloc0qNmox4qcILB5IhHNR/LdQb2j jL1rxkLS6GWfo4mnffkSEP04zeWZEA+SI1cXdtqmjUgsAIm31UwcmTch4A6E7zLl bvOzTlPnY5yj4+jpOOvuegqa20xgA6+qgGtQKDP979svccSvPwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFFV8qubkUqLzUU79hF6Pfe5OiUByMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ZTcwNDdjMi0zM2JkLTQxMWMtODAyYy1lNzllYjZhZWEzNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JlNzA0N2MyLTMzYmQtNDExYy04 MDJjLWU3OWViNmFlYTM1Zi9iZTcwNDdjMi0zM2JkLTQxMWMtODAyYy1lNzllYjZh ZWEzNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBIEAgABMAwDBACkmYwDBACkmY4wFQQCAAIwDwMGACYC+aQAAwUA JgQJYDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMGGe8CAwYgwjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1 ePYHqtwmHchHHPLx4mgaM+ZWhb6NNM2Nd92JnHrHmf1Phxe7jDLjRIJ1xFCfQGgp SdPEEg5kMNCFEvzhKXilGEMkiiEcvaO9thNtnPG9+F0+CjDAK9n1BCoumPKfoYqt Z5JqfW5F6p56RdPf7HjuCgiWKugvWysPrijt90dfoOWoHbcVckp9EFd//w1+PYlg vfTtv1+xCwOpchncQtHWP8r+LXifIui6szzNuJKXL/F8KQ/6W/eQ/62fMjZ1UXR1 wERiYuo7hjlOUpvjYcb9S/JJG6ps9hcDUOi2tu/PENJBQX9RZb75DLvsQi/OJaSx 93Irwu9+6oHyReKJOpvf -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:52 2025 by rpki-client