This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785.cer File: e8ff2a58-be95-49e2-9b8f-31ade9c76785.cer (raw, json) Hash identifier: /R68wU7GiIRyI52CfEBd4fgMT95qYom6LDtDB9ZtHcI= Subject key identifier: 75:F3:58:13:26:A0:3E:CF:00:B2:AC:B6:38:34:25:7D:F8:1B:A5:0D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C20DC89C34B38F284B325CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/e8ff2a58-be95-49e2-9b8f-31ade9c76785.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Dec 2025 09:44:52 +0000 Certificate not after: Mon 13 Mar 2028 08:44:52 +0000 Subordinate resources: IP: 23.150.196.0/24 IP: 2602:f4aa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:20:dc:89:c3:4b:38:f2:84:b3:25:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 9 09:44:52 2025 GMT Not After : Mar 13 08:44:52 2028 GMT Subject: CN=e8ff2a58-be95-49e2-9b8f-31ade9c76785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:c4:13:40:2b:b9:42:b1:b8:ce:a1:09:a5: 66:07:8e:1e:79:45:1f:1e:de:6a:be:d7:0c:c3:74: ed:76:c0:2c:7e:8e:5c:0b:05:0f:38:1f:47:0a:92: b4:a2:2e:7a:13:86:08:92:43:7b:09:2f:03:58:49: 68:e4:e5:80:75:3f:e4:58:bc:66:20:0f:59:0d:1d: 22:02:6c:65:70:a1:a8:e4:fb:1d:b5:ba:a2:a2:d2: c8:cd:5c:e5:74:c0:12:76:0d:63:85:db:ac:56:6f: fe:48:14:c1:a0:d7:54:c4:cb:c4:5f:a1:12:ef:c1: 8c:76:9f:b0:bb:34:2c:8f:8a:00:4d:5f:2b:29:15: 38:51:7d:05:5a:d7:1e:8a:9d:31:de:de:a5:11:e5: a7:22:f1:3d:bc:22:aa:79:79:00:2e:97:4a:86:68: ac:01:ed:ea:99:96:1f:0a:8d:19:b3:cf:16:0a:de: 13:70:e7:32:c0:08:c8:9f:57:58:d3:39:79:70:a9: dd:82:79:8d:13:a1:3c:e1:3d:78:60:28:3d:71:87: 60:22:91:85:32:57:34:4b:fa:a9:bf:f6:b4:68:e1: 1c:50:b5:65:fe:5b:0e:98:76:7f:b8:4d:54:dc:50: 60:17:ab:21:63:17:70:d1:d4:0e:61:b9:13:2b:33: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:58:13:26:A0:3E:CF:00:B2:AC:B6:38:34:25:7D:F8:1B:A5:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/e8ff2a58-be95-49e2-9b8f-31ade9c76785.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.196.0/24 IPv6: 2602:f4aa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e3:01:36:0d:b7:f0:67:9b:b8:39:b0:34:86:75:d3:57:0d: 54:8c:76:86:10:ac:64:1a:15:b4:dd:53:11:9e:6f:71:bf:54: 75:31:55:86:c1:31:54:c8:3c:5f:ca:76:a0:bf:6a:c5:3f:cb: 4f:f2:f6:cc:9a:1e:60:31:6c:e5:57:bc:b4:7d:93:5d:13:f0: d6:ee:36:e7:6b:40:c9:d0:a1:da:8d:0c:5c:02:0d:3e:6b:16: 64:6c:96:20:e6:ce:89:61:e9:94:b9:36:3b:7b:1d:d8:cc:44: 3d:64:0b:aa:fe:f4:7b:84:03:74:54:1f:9e:5f:e9:ca:e8:de: 70:09:62:3e:e7:c0:86:ba:e7:f4:da:43:1c:19:e0:70:23:02: 40:93:0d:14:a3:23:83:5f:2f:6c:a8:21:eb:53:5a:ea:7a:72: eb:17:d0:e7:51:a9:05:48:7d:a7:56:69:89:62:15:45:ca:7c: 9f:1d:16:e7:56:05:0b:50:77:97:13:f5:b0:b0:86:a2:84:d1: d8:45:86:f0:07:20:51:2b:37:3e:e9:4e:dc:1a:81:20:4c:3a: fc:aa:cc:63:3d:51:7a:df:7f:dd:86:6f:58:9b:18:02:a6:3f: f6:9d:94:ff:d4:b7:29:d1:f4:81:3e:6e:f2:b8:aa:3d:f0:da: 5d:e4:cc:c0 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEwg3InDSzjyhLMly4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIwOTA5NDQ1MloXDTI4MDMxMzA4NDQ1MlowLzEtMCsGA1UEAxMk ZThmZjJhNTgtYmU5NS00OWUyLTliOGYtMzFhZGU5Yzc2Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHbEE0AruUKxuM6hCaVmB44eeUUfHt5qvtcM w3TtdsAsfo5cCwUPOB9HCpK0oi56E4YIkkN7CS8DWElo5OWAdT/kWLxmIA9ZDR0i AmxlcKGo5PsdtbqiotLIzVzldMASdg1jhdusVm/+SBTBoNdUxMvEX6ES78GMdp+w uzQsj4oATV8rKRU4UX0FWtceip0x3t6lEeWnIvE9vCKqeXkALpdKhmisAe3qmZYf Co0Zs88WCt4TcOcywAjIn1dY0zl5cKndgnmNE6E84T14YCg9cYdgIpGFMlc0S/qp v/a0aOEcULVl/lsOmHZ/uE1U3FBgF6shYxdw0dQOYbkTKzNwrQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHXzWBMmoD7PALKstjg0JX34G6UNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l OGZmMmE1OC1iZTk1LTQ5ZTItOWI4Zi0zMWFkZTljNzY3ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2U4ZmYyYTU4LWJlOTUtNDllMi05 YjhmLTMxYWRlOWM3Njc4NS9lOGZmMmE1OC1iZTk1LTQ5ZTItOWI4Zi0zMWFkZTlj NzY3ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlsQwDgQCAAIwCAMGACYC9KoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEzjATYNt/Bnm7g5sDSGddNXDVSMdoYQrGQaFbTdUxGeb3G/VHUxVYbBMVTIPF/K dqC/asU/y0/y9syaHmAxbOVXvLR9k10T8NbuNudrQMnQodqNDFwCDT5rFmRsliDm zolh6ZS5Njt7HdjMRD1kC6r+9HuEA3RUH55f6cro3nAJYj7nwIa65/TaQxwZ4HAj AkCTDRSjI4NfL2yoIetTWup6cusX0OdRqQVIfadWaYliFUXKfJ8dFudWBQtQd5cT 9bCwhqKE0dhFhvAHIFErNz7pTtwagSBMOvyqzGM9UXrff92Gb1ibGAKmP/adlP/U tynR9IE+bvK4qj3w2l3kzMA= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:38 2025 by rpki-client