This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e.cer File: cc2eea8d-110c-4205-9610-0faeedf6481e.cer (raw, json) Hash identifier: PQhC22HNq0Lg3jfkaSNg4rj0/KhaHsMCea2ctee48Lg= Subject key identifier: 5C:50:12:13:F4:B8:FC:DB:3B:51:1E:AA:31:9B:E6:8E:45:4B:08:33 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C20DE453DDFD4501308197E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/cc2eea8d-110c-4205-9610-0faeedf6481e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Dec 2025 09:48:21 +0000 Certificate not after: Mon 13 Mar 2028 08:48:21 +0000 Subordinate resources: IP: 23.150.156.0/24 IP: 2602:f4ae::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:20:de:45:3d:df:d4:50:13:08:19:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 9 09:48:21 2025 GMT Not After : Mar 13 08:48:21 2028 GMT Subject: CN=cc2eea8d-110c-4205-9610-0faeedf6481e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ae:8a:b3:ad:31:7b:6a:a0:a7:91:17:1d:7f: 5a:da:6f:d9:95:7d:71:dc:07:67:37:2a:86:e9:a6: 7b:1a:81:1b:c8:1d:a7:42:13:20:2e:a3:d6:bd:96: 4c:8d:79:61:2c:78:29:58:30:0f:b4:21:aa:b5:9e: 8d:33:9f:b1:c3:b1:26:60:64:d2:b6:47:df:77:27: 05:f1:13:46:1a:46:be:92:45:ea:37:73:05:20:9d: 03:47:bf:7d:55:e9:81:d0:36:6b:b1:03:f4:28:c8: 46:5b:8d:ea:d4:6c:2a:60:10:fe:90:ae:d6:96:68: b0:a2:47:a6:46:24:26:da:27:19:76:5a:e6:a5:18: c5:95:5d:9a:ed:a6:b9:ab:70:77:0f:2c:6f:73:09: dd:a8:24:7c:81:bd:fa:78:cd:6c:96:a5:3b:12:10: 51:48:56:f0:2c:a6:d8:84:50:4f:71:67:fe:b1:bb: e8:e2:2d:be:ae:31:4e:df:a3:dd:e2:4d:1b:8c:16: cd:00:cb:9b:2e:92:f8:1f:cb:23:d9:38:96:15:b8: 01:c9:f5:11:dc:67:60:df:cc:f7:36:09:3d:1b:b8: 68:b8:9e:ee:d0:95:30:c9:b3:43:c0:70:63:23:5f: 6c:50:7a:a5:cc:1f:0c:49:ef:16:c0:d1:ff:38:3e: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:50:12:13:F4:B8:FC:DB:3B:51:1E:AA:31:9B:E6:8E:45:4B:08:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/cc2eea8d-110c-4205-9610-0faeedf6481e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.156.0/24 IPv6: 2602:f4ae::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:56:e5:d3:48:54:ab:3a:a3:87:b6:1e:5a:3f:84:95:a7:15: 37:90:01:46:2c:88:ad:3a:07:35:9f:8a:21:c0:08:86:ac:b3: da:1f:71:f1:75:c0:cc:3c:cc:cd:e2:66:a0:b8:f1:82:b4:54: f7:8c:18:cc:37:8a:e1:f0:d2:27:a7:b7:16:f5:5f:f7:a6:44: 20:6c:36:ea:c3:de:85:2e:ef:ed:64:e1:85:39:61:e1:02:c4: c5:ab:1d:c5:ec:38:0d:97:18:d5:6a:c0:2b:c1:f1:03:ed:4a: 55:0d:5f:99:8f:47:d4:c6:48:44:95:e4:c3:22:ef:2c:68:5f: a5:86:69:e8:fc:c4:50:51:97:96:64:d3:4d:1e:64:51:f9:be: f3:c2:b7:4f:7f:6e:89:e0:54:7b:22:c7:cc:41:5f:63:2a:7b: 51:26:50:61:6b:9b:58:ab:ff:72:b4:0c:f0:f4:57:0e:5f:3c: 35:27:25:17:e4:9c:c2:51:df:6f:44:72:05:7d:f3:be:1f:e7: 73:f2:ac:25:d7:2e:2d:15:d5:27:7e:99:1f:2c:75:49:88:7e: 29:21:31:ca:39:3a:4c:8a:c5:14:c9:b3:16:b0:e4:5a:48:b1: a4:93:f3:ca:4f:0c:65:38:82:a5:2b:eb:22:00:d0:f5:bf:b5: 4c:e1:fd:cd -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEwg3kU939RQEwgZfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwOTA5NDgyMVoXDTI4MDMxMzA4NDgyMVowLzEtMCsGA1UEAxMk Y2MyZWVhOGQtMTEwYy00MjA1LTk2MTAtMGZhZWVkZjY0ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq6Ks60xe2qgp5EXHX9a2m/ZlX1x3AdnNyqG 6aZ7GoEbyB2nQhMgLqPWvZZMjXlhLHgpWDAPtCGqtZ6NM5+xw7EmYGTStkffdycF 8RNGGka+kkXqN3MFIJ0DR799VemB0DZrsQP0KMhGW43q1GwqYBD+kK7Wlmiwokem RiQm2icZdlrmpRjFlV2a7aa5q3B3DyxvcwndqCR8gb36eM1slqU7EhBRSFbwLKbY hFBPcWf+sbvo4i2+rjFO36Pd4k0bjBbNAMubLpL4H8sj2TiWFbgByfUR3Gdg38z3 Ngk9G7houJ7u0JUwybNDwHBjI19sUHqlzB8MSe8WwNH/OD5JdQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFFxQEhP0uPzbO1EeqjGb5o5FSwgzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j YzJlZWE4ZC0xMTBjLTQyMDUtOTYxMC0wZmFlZWRmNjQ4MWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NjMmVlYThkLTExMGMtNDIwNS05 NjEwLTBmYWVlZGY2NDgxZS9jYzJlZWE4ZC0xMTBjLTQyMDUtOTYxMC0wZmFlZWRm NjQ4MWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlpwwDgQCAAIwCAMGACYC9K4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFJW5dNIVKs6o4e2Hlo/hJWnFTeQAUYsiK06BzWfiiHACIass9ofcfF1wMw8zM3i ZqC48YK0VPeMGMw3iuHw0ientxb1X/emRCBsNurD3oUu7+1k4YU5YeECxMWrHcXs OA2XGNVqwCvB8QPtSlUNX5mPR9TGSESV5MMi7yxoX6WGaej8xFBRl5Zk000eZFH5 vvPCt09/bongVHsix8xBX2Mqe1EmUGFrm1ir/3K0DPD0Vw5fPDUnJRfknMJR329E cgV9874f53PyrCXXLi0V1Sd+mR8sdUmIfikhMco5OkyKxRTJsxaw5FpIsaST88pP DGU4gqUr6yIA0PW/tUzh/c0= -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:35 2025 by rpki-client