This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
File: eea0cb92-050e-479f-bff4-dddd68eb4e04.cer (raw, json)
Hash identifier: 7o8ZGLkF5nKi6C9mytLm4nMNlNMJ/4vOB0QZD/cPYl0=
Subject key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584C2718E724F5DB5A8909182C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 11 Dec 2025 15:21:20 +0000
Certificate not after: Wed 09 Feb 2028 15:36:09 +0000
Subordinate resources: AS: 40806
IP: 23.149.124.0/23
IP: 2602:f4d9::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:27:18:e7:24:f5:db:5a:89:09:18:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Dec 11 15:21:20 2025 GMT
Not After : Feb 9 15:36:09 2028 GMT
Subject: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:fc:27:fb:d3:39:07:33:d9:fe:05:8f:6e:
69:ad:a1:09:8c:29:e2:8e:ae:b4:25:c2:c4:43:3b:
88:ed:68:e5:ca:b7:ca:2a:de:f6:83:7d:ae:14:c6:
c3:c7:48:37:72:ae:07:70:90:99:89:94:5a:09:6b:
46:ca:c7:fd:cc:19:a9:93:7d:f7:25:87:43:a2:08:
d5:3c:68:7a:9e:41:b3:f2:1e:75:c6:db:fd:b3:79:
49:7b:54:63:68:50:cf:31:fe:0c:6f:73:cf:54:9f:
d5:ea:e6:88:56:52:5b:bb:cc:5d:a5:8f:70:15:1c:
ea:2a:ee:d2:34:d2:4e:6e:8b:da:03:97:10:1b:70:
5d:24:8a:19:90:ca:02:9d:39:48:90:f1:5a:38:0a:
13:01:37:d9:e4:19:72:be:09:d7:86:c3:5d:f6:59:
d6:4e:d2:bc:35:fe:49:1c:fb:86:74:aa:3c:b1:b8:
54:f7:48:c4:e6:e4:bf:e6:02:9f:97:9f:dd:58:13:
c2:6b:fc:60:38:5d:69:01:ed:7f:2e:61:ad:98:4b:
ee:76:12:75:94:c0:22:53:1c:36:96:9f:f6:d1:ad:
a9:62:1d:3d:c8:0c:eb:02:bd:bb:ab:fe:d0:72:dd:
36:9f:e3:c7:cf:70:90:d7:8e:a4:9c:eb:0d:ae:81:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.124.0/23
IPv6:
2602:f4d9::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40806
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:89:ce:cd:e0:17:a6:17:7e:c0:49:9a:35:0e:79:c4:b6:55:
94:b4:57:1a:31:b2:39:bd:51:5c:b5:94:ce:ac:85:74:77:d5:
06:6f:f7:eb:62:29:89:33:a3:fa:61:14:85:3e:dc:05:62:30:
20:71:e1:b1:82:8b:6d:1b:bb:78:ec:66:5f:e2:3b:0e:77:52:
87:38:c6:c1:86:11:7e:79:62:a7:95:5b:ab:02:dd:09:15:4b:
06:ba:21:9f:d4:ea:4f:56:29:99:e1:82:4a:36:6c:60:22:da:
9a:43:6c:81:c2:fe:3e:8f:68:1c:4b:30:15:dc:5a:57:45:6a:
8e:c1:6b:c3:8d:ac:a2:1e:5b:42:ed:1e:53:58:0e:a4:fc:93:
8e:2b:df:c7:c7:28:3b:c8:ee:59:ed:cc:73:54:aa:f8:b4:6e:
c9:3e:40:e3:ba:9b:2b:96:ea:b6:b4:e8:b5:43:73:1c:f1:54:
b9:51:7c:0f:e4:aa:30:82:31:86:34:d9:e6:5c:77:fe:7e:2f:
bf:e2:83:d7:55:d5:eb:6d:2a:49:ae:63:08:11:9b:e9:4d:b9:
eb:a7:99:22:e1:a7:02:e7:7b:87:e7:f1:89:16:06:83:af:91:
c1:aa:30:8c:ab:d2:81:bb:1c:bb:1a:bb:3d:47:39:77:56:24:
10:9d:42:1a
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEwnGOck9dtaiQkYLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI1MTIxMTE1MjEyMFoXDTI4MDIwOTE1MzYwOVowLzEtMCsGA1UEAxMk
ZWVhMGNiOTItMDUwZS00NzlmLWJmZjQtZGRkZDY4ZWI0ZTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB/8J/vTOQcz2f4Fj25praEJjCnijq60JcLE
QzuI7WjlyrfKKt72g32uFMbDx0g3cq4HcJCZiZRaCWtGysf9zBmpk333JYdDogjV
PGh6nkGz8h51xtv9s3lJe1RjaFDPMf4Mb3PPVJ/V6uaIVlJbu8xdpY9wFRzqKu7S
NNJObovaA5cQG3BdJIoZkMoCnTlIkPFaOAoTATfZ5BlyvgnXhsNd9lnWTtK8Nf5J
HPuGdKo8sbhU90jE5uS/5gKfl5/dWBPCa/xgOF1pAe1/LmGtmEvudhJ1lMAiUxw2
lp/20a2pYh09yAzrAr27q/7Qct02n+PHz3CQ146knOsNroE3/QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFPi2yrjGLRRtCxaCPDVXhCacAQ5BMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l
ZWEwY2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRkNjhlYjRlMDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VlYTBjYjkyLTA1MGUtNDc5Zi1i
ZmY0LWRkZGQ2OGViNGUwNC9lZWEwY2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRkNjhl
YjRlMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAEXlXwwDgQCAAIwCAMGBCYC9NkAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCfZjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlic7N4BemF37ASZo1DnnEtlWU
tFcaMbI5vVFctZTOrIV0d9UGb/frYimJM6P6YRSFPtwFYjAgceGxgottG7t47GZf
4jsOd1KHOMbBhhF+eWKnlVurAt0JFUsGuiGf1OpPVimZ4YJKNmxgItqaQ2yBwv4+
j2gcSzAV3FpXRWqOwWvDjayiHltC7R5TWA6k/JOOK9/Hxyg7yO5Z7cxzVKr4tG7J
PkDjupsrluq2tOi1Q3Mc8VS5UXwP5KowgjGGNNnmXHf+fi+/4oPXVdXrbSpJrmMI
EZvpTbnrp5ki4acC53uH5/GJFgaDr5HBqjCMq9KBuxy7Grs9Rzl3ViQQnUIa
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:07:33 2025 by rpki-client