This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer File: da900f81-3070-4c79-8343-f14ceb8ddb3a.cer (raw, json) Hash identifier: 1dqmY17Wd7MMQOQxYS4bBVNhMPfZ+bET7F5RUoVeF5I= Subject key identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C10A726987694ED03F5634600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Dec 2025 14:24:22 +0000 Certificate not after: Mon 06 Mar 2028 09:34:48 +0000 Subordinate resources: AS: 3852 IP: 23.150.172.0/24 IP: 2602:f4ab::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:a7:26:98:76:94:ed:03:f5:63:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 3 14:24:22 2025 GMT Not After : Mar 6 09:34:48 2028 GMT Subject: CN=da900f81-3070-4c79-8343-f14ceb8ddb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:10:0d:62:63:1c:8f:a0:04:fb:66:d2:bd:18: ba:a0:8a:ff:18:3f:2a:15:d0:cd:0f:9a:01:61:64: a9:86:55:bf:b7:e5:4b:b8:51:d8:3e:ac:33:4f:59: ec:1f:bc:5f:98:ed:d9:ff:8c:f0:98:ca:76:c8:b4: 8c:31:f5:ec:82:45:24:85:4c:47:c3:64:1e:6e:e5: b2:32:4b:4a:dd:d5:0c:43:83:f5:33:40:dc:26:a4: 5b:be:90:a2:a0:e8:a8:55:dc:d5:f5:0b:1b:9d:0c: 80:f2:b2:f0:7f:9c:53:c5:f2:91:45:ba:85:af:3d: 29:c4:9e:c0:ba:1d:d4:9e:c6:f2:88:c8:66:b5:c8: 13:82:1d:74:8a:1c:4d:a3:68:8f:37:4d:51:c6:28: d1:72:89:ec:cf:5c:58:9a:af:de:88:7e:25:57:a3: 71:d2:e0:53:b1:92:bc:ab:c1:5c:90:9d:79:8b:0d: e2:4b:1d:4d:89:80:33:9d:db:87:14:c0:dd:6b:a5: b5:01:54:46:bf:01:f3:50:af:63:9f:83:d6:2d:a7: 6b:d0:bd:0a:41:d9:ec:f7:7b:40:42:f8:94:9f:fa: e3:0d:57:3b:15:6a:c7:50:af:b9:d5:6a:fd:9f:24: 7e:a9:f8:c5:a5:50:a9:4c:38:37:bb:20:27:fd:d4: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.172.0/24 IPv6: 2602:f4ab::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3852 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:49:53:1f:ca:7e:07:5e:34:53:fc:4c:82:99:e4:b2:4c:42: 65:c1:30:b0:6d:51:39:2b:cc:19:f9:81:df:74:c6:51:90:6f: ff:58:44:33:67:77:02:16:11:dc:3b:c3:0f:2e:cd:03:a3:c3: ae:b6:0a:ba:d9:be:c0:c7:70:b4:20:c4:da:32:f3:13:bf:bb: 6d:e2:c3:7e:ae:93:bc:9f:e9:1d:56:6c:10:c5:1f:c8:e7:87: 47:a5:24:27:c6:06:e5:e1:33:7b:1d:31:48:cb:7b:25:4c:55: 67:d5:09:e7:93:b9:92:9c:af:ab:f7:54:b5:8d:37:ad:68:8d: 27:03:de:2b:48:6e:25:2d:93:2c:03:ad:e3:48:c5:9a:e3:40: 61:6a:5d:0c:e5:f1:06:66:74:d5:c3:a6:ae:fe:a6:ac:6c:ec: f4:0d:19:e0:6e:ab:4b:1a:21:6a:69:35:18:41:34:07:51:b5: 96:15:0d:d8:07:b6:76:88:db:08:0f:6f:45:5d:0d:31:f5:92: 79:83:03:b7:2c:7c:30:0b:06:23:b5:9a:27:82:3f:bb:4a:0b: 34:08:60:0c:dc:96:8a:10:f3:0b:63:99:29:66:83:03:9b:82: 02:7b:9f:a0:1a:15:7d:b4:64:7a:8c:c1:96:b7:c0:c4:64:dc: d1:18:b9:f0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEwQpyaYdpTtA/VjRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwMzE0MjQyMloXDTI4MDMwNjA5MzQ0OFowLzEtMCsGA1UEAxMk ZGE5MDBmODEtMzA3MC00Yzc5LTgzNDMtZjE0Y2ViOGRkYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRANYmMcj6AE+2bSvRi6oIr/GD8qFdDND5oB YWSphlW/t+VLuFHYPqwzT1nsH7xfmO3Z/4zwmMp2yLSMMfXsgkUkhUxHw2QebuWy MktK3dUMQ4P1M0DcJqRbvpCioOioVdzV9QsbnQyA8rLwf5xTxfKRRbqFrz0pxJ7A uh3UnsbyiMhmtcgTgh10ihxNo2iPN01RxijRconsz1xYmq/eiH4lV6Nx0uBTsZK8 q8FckJ15iw3iSx1NiYAznduHFMDda6W1AVRGvwHzUK9jn4PWLadr0L0KQdns93tA QviUn/rjDVc7FWrHUK+51Wr9nyR+qfjFpVCpTDg3uyAn/dTGWQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK7FRCvVElB8f2CEuF0pvgS4yZCsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k YTkwMGY4MS0zMDcwLTRjNzktODM0My1mMTRjZWI4ZGRiM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RhOTAwZjgxLTMwNzAtNGM3OS04 MzQzLWYxNGNlYjhkZGIzYS9kYTkwMGY4MS0zMDcwLTRjNzktODM0My1mMTRjZWI4 ZGRiM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlqwwDgQCAAIwCAMGACYC9KsAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAg8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHFJUx/KfgdeNFP8TIKZ5LJMQmXB MLBtUTkrzBn5gd90xlGQb/9YRDNndwIWEdw7ww8uzQOjw662CrrZvsDHcLQgxNoy 8xO/u23iw36uk7yf6R1WbBDFH8jnh0elJCfGBuXhM3sdMUjLeyVMVWfVCeeTuZKc r6v3VLWNN61ojScD3itIbiUtkywDreNIxZrjQGFqXQzl8QZmdNXDpq7+pqxs7PQN GeBuq0saIWppNRhBNAdRtZYVDdgHtnaI2wgPb0VdDTH1knmDA7csfDALBiO1mieC P7tKCzQIYAzclooQ8wtjmSlmgwObggJ7n6AaFX20ZHqMwZa3wMRk3NEYufA= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:44 2025 by rpki-client