This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer File: c1195660-b269-4bf9-a104-54a76ebf3546.cer (raw, json) Hash identifier: HObXLqUrQzniphn5A8pOr0LgMfzyo6AGE5KWtj9InA4= Subject key identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDC504F012E303698D65B84C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 20:27:21 +0000 Certificate not after: Sun 13 Feb 2028 21:15:58 +0000 Subordinate resources: IP: 66.71.220.0/24 IP: 198.212.42.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:50:4f:01:2e:30:36:98:d6:5b:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 20:27:21 2025 GMT Not After : Feb 13 21:15:58 2028 GMT Subject: CN=c1195660-b269-4bf9-a104-54a76ebf3546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:c5:9d:8a:be:81:6f:ee:34:0d:67:1d:2c: 88:2d:ea:01:f9:2a:70:e7:18:b2:b2:6a:fe:26:99: 78:42:14:84:80:88:3f:4f:cc:c2:96:64:ae:35:66: 37:8b:6f:20:29:66:5f:46:78:a1:e7:76:9c:06:01: b3:15:ab:51:73:17:45:ed:a2:ea:5e:27:85:59:11: 33:ef:d5:8d:36:93:d9:9d:4b:be:70:5a:b6:9c:f0: ee:f6:7e:cd:67:fe:a8:d9:70:be:28:1c:82:1f:29: 5a:19:32:f5:18:d5:ce:43:de:e9:be:cd:da:6f:a0: 4f:84:be:e9:e8:e6:60:39:ff:45:9d:07:24:0e:8c: 3f:ea:18:f0:5c:03:76:b0:37:22:7c:07:86:bd:5c: 7a:d7:64:52:50:98:da:63:4b:e2:46:a5:02:b0:05: 97:90:8f:b2:2c:be:5b:c2:67:1c:da:49:d1:8c:30: 4b:39:ee:53:35:19:44:40:3e:ea:3c:1b:fc:45:c3: 74:7c:bc:d4:b2:9b:7d:06:93:47:37:27:d0:f9:d5: 17:cd:3a:75:8d:9a:58:f5:92:8d:fb:c6:f3:94:65: d8:2f:3a:e0:8e:32:d6:e9:a5:d7:6e:8c:20:a3:7e: f2:03:44:96:2f:63:32:4a:e5:f9:93:ea:23:0a:56: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.71.220.0/24 198.212.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:16:42:10:6a:88:93:6e:64:88:05:9f:53:cc:7a:57:1c:bf: fc:e8:ba:3f:23:83:1a:f9:30:4c:fa:c2:e2:17:2c:87:fb:3e: e6:92:e9:5d:84:06:47:60:0f:96:ed:59:d2:c2:96:74:e3:46: 5a:f5:67:a2:ef:9b:1f:71:9f:f6:d2:ec:e1:b6:2a:46:05:7b: 19:3a:7e:a3:20:34:62:dd:2d:f6:a0:50:c4:6d:9e:5d:37:a6: 6c:0b:e3:7b:c9:c9:af:59:63:b6:64:fb:ee:f8:96:c4:5c:d3: bd:d0:ce:8e:4a:8c:c3:cb:d4:12:a5:66:01:2b:ec:7f:9e:da: 84:21:ad:be:38:c7:7d:65:e3:79:39:2d:0d:19:f0:c5:58:14: ae:69:03:c4:01:1d:af:8c:1f:ae:5c:29:ed:9a:0e:07:cc:c4: 20:45:fe:14:37:c2:27:02:21:bf:f3:a0:88:cd:22:59:30:91: 6e:4a:e3:07:96:fc:18:a3:eb:af:33:d3:6f:5e:59:28:42:92: a5:45:9d:70:26:e3:c0:75:92:87:b5:01:b2:7e:14:5a:09:44: b0:30:15:29:5e:8c:d5:27:6a:a4:52:a6:c7:ab:7e:25:45:58: 06:ea:a6:f6:a0:6b:c3:1b:9c:0b:99:f9:df:b4:91:22:a9:ea: 99:2f:28:de -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEvcUE8BLjA2mNZbhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDIwMjcyMVoXDTI4MDIxMzIxMTU1OFowLzEtMCsGA1UEAxMk YzExOTU2NjAtYjI2OS00YmY5LWExMDQtNTRhNzZlYmYzNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1vFnYq+gW/uNA1nHSyILeoB+Spw5xiysmr+ Jpl4QhSEgIg/T8zClmSuNWY3i28gKWZfRnih53acBgGzFatRcxdF7aLqXieFWREz 79WNNpPZnUu+cFq2nPDu9n7NZ/6o2XC+KByCHylaGTL1GNXOQ97pvs3ab6BPhL7p 6OZgOf9FnQckDow/6hjwXAN2sDcifAeGvVx612RSUJjaY0viRqUCsAWXkI+yLL5b wmcc2knRjDBLOe5TNRlEQD7qPBv8RcN0fLzUspt9BpNHNyfQ+dUXzTp1jZpY9ZKN +8bzlGXYLzrgjjLW6aXXbowgo37yA0SWL2MySuX5k+ojClZm8QIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFFAtt1AGyO3cbfYdlMh2zC/0qWS3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j MTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmViZjM1NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2MxMTk1NjYwLWIyNjktNGJmOS1h MTA0LTU0YTc2ZWJmMzU0Ni9jMTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmVi ZjM1NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABCR9wDBADG1CowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYBZCEGqIk25k iAWfU8x6Vxy//Oi6PyODGvkwTPrC4hcsh/s+5pLpXYQGR2APlu1Z0sKWdONGWvVn ou+bH3Gf9tLs4bYqRgV7GTp+oyA0Yt0t9qBQxG2eXTembAvje8nJr1ljtmT77viW xFzTvdDOjkqMw8vUEqVmASvsf57ahCGtvjjHfWXjeTktDRnwxVgUrmkDxAEdr4wf rlwp7ZoOB8zEIEX+FDfCJwIhv/OgiM0iWTCRbkrjB5b8GKPrrzPTb15ZKEKSpUWd cCbjwHWSh7UBsn4UWglEsDAVKV6M1SdqpFKmx6t+JUVYBuqm9qBrwxucC5n537SR IqnqmS8o3g== -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:43 2025 by rpki-client