This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer File: c68f99cd-e059-4345-ac58-8ebecccac84e.cer (raw, json) Hash identifier: pikhsSgfJCETj1HROruppg6u25DQ3wUYP2R+LhG5T4c= Subject key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3241DA52BD0FD02E081D4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Dec 2025 15:17:44 +0000 Certificate not after: Sun 19 Mar 2028 14:17:44 +0000 Subordinate resources: AS: 14292 IP: 74.123.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:41:da:52:bd:0f:d0:2e:08:1d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 15 15:17:44 2025 GMT Not After : Mar 19 14:17:44 2028 GMT Subject: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:1d:18:39:16:94:f0:40:11:3e:8e:e1:c0: 81:4f:47:41:62:21:9c:3f:e1:c2:25:e7:e8:61:26: 0a:55:35:e3:93:f9:10:07:18:2d:b7:c9:d9:77:8e: 87:24:f7:97:83:05:39:0f:d8:77:79:17:dd:5a:65: bf:f3:c5:60:a7:2b:42:be:d8:69:b8:9c:ac:1c:e8: 46:d9:27:89:76:9d:73:26:a9:5b:35:ee:66:20:e8: 3a:81:b0:d0:7a:f7:fd:4e:fb:95:9d:b4:2c:35:4d: b4:12:aa:5d:3d:1a:c1:37:86:75:aa:a6:c3:c7:08: 7c:7a:5d:f8:ca:88:99:1c:2a:78:e9:6b:55:7d:71: 80:6a:d7:d5:3b:98:94:2d:22:c9:ba:8f:77:76:de: 64:f9:71:71:67:cb:0a:41:97:98:41:fb:27:7c:83: d6:bd:6f:9d:4f:4d:b9:ae:37:51:4a:b6:71:8f:77: 3b:83:06:03:a8:7c:78:09:57:f0:13:07:16:70:3b: 75:a8:e3:74:7b:8d:9e:4b:c1:44:45:9b:35:7a:a1: 48:97:04:5f:4b:6e:18:ab:ac:7e:49:71:e6:2c:4d: 9f:b0:21:8b:cf:1e:0c:80:79:1b:1d:c0:a1:a2:05: 1f:23:01:16:ca:a0:4c:d9:1e:04:c4:6b:2f:31:76: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 74.123.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14292 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:18:50:d1:0f:58:94:8f:99:41:96:35:d8:90:ba:96:26:ea: 18:d6:a7:78:44:4e:62:de:c8:1b:d1:54:b8:67:ff:e2:5a:53: e1:07:da:59:71:14:76:e2:29:47:b5:2a:12:a8:23:ca:aa:a1: 2f:71:13:2a:00:24:19:f5:74:f8:90:1d:19:9e:35:d0:41:45: 99:1e:db:9f:fe:44:25:40:65:fb:a2:dd:d0:86:1d:62:15:27: 94:72:64:8b:7f:be:cd:24:de:b7:31:03:98:75:9c:25:3e:8e: 26:73:99:9e:44:b9:f4:20:b2:0a:dc:46:e7:19:80:a7:8e:31: 86:2a:32:4b:6b:9e:a2:be:e1:46:ba:ca:43:a8:af:7e:1a:3f: 07:58:7e:ca:49:51:42:39:93:fe:40:2b:06:67:1e:eb:e3:c8: 9f:0c:8e:ea:fc:ce:57:cc:9e:57:f5:f3:b8:c4:09:64:b6:7f: 09:ae:f0:ae:a1:0e:97:86:67:37:a6:df:04:d6:d1:0f:30:6d: d7:3f:bb:ee:c5:a7:5b:de:4a:cc:30:11:b8:65:52:e9:12:58: af:3e:91:02:c0:a3:6d:b2:54:cd:8d:2d:c9:2c:5c:05:9e:34: 9b:32:f3:40:af:62:13:c1:2a:e7:69:5a:af:59:b5:97:44:78: c5:14:73:e2 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEwyQdpSvQ/QLggdSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxNTE1MTc0NFoXDTI4MDMxOTE0MTc0NFowLzEtMCsGA1UEAxMk YzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2FjODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtREdGDkWlPBAET6O4cCBT0dBYiGcP+HCJefo YSYKVTXjk/kQBxgtt8nZd46HJPeXgwU5D9h3eRfdWmW/88VgpytCvthpuJysHOhG 2SeJdp1zJqlbNe5mIOg6gbDQevf9TvuVnbQsNU20EqpdPRrBN4Z1qqbDxwh8el34 yoiZHCp46WtVfXGAatfVO5iULSLJuo93dt5k+XFxZ8sKQZeYQfsnfIPWvW+dT025 rjdRSrZxj3c7gwYDqHx4CVfwEwcWcDt1qON0e42eS8FERZs1eqFIlwRfS24Yq6x+ SXHmLE2fsCGLzx4MgHkbHcChogUfIwEWyqBM2R4ExGsvMXa3jQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFApmxrXgX8O2fEbqRoj1uh6GDAw4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j NjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M2OGY5OWNkLWUwNTktNDM0NS1h YzU4LThlYmVjY2NhYzg0ZS9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2Nj YWM4NGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKezQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC N9QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdRhQ0Q9YlI+ZQZY12JC6libqGNaneEROYt7IG9FUuGf/4lpT 4QfaWXEUduIpR7UqEqgjyqqhL3ETKgAkGfV0+JAdGZ410EFFmR7bn/5EJUBl+6Ld 0IYdYhUnlHJki3++zSTetzEDmHWcJT6OJnOZnkS59CCyCtxG5xmAp44xhioyS2ue or7hRrrKQ6ivfho/B1h+yklRQjmT/kArBmce6+PInwyO6vzOV8yeV/XzuMQJZLZ/ Ca7wrqEOl4ZnN6bfBNbRDzBt1z+77sWnW95KzDARuGVS6RJYrz6RAsCjbbJUzY0t ySxcBZ40mzLzQK9iE8Eq52lar1m1l0R4xRRz4g== -----END CERTIFICATE-----Generated at Fri Dec 19 23:35:47 2025 by rpki-client