This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer File: f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer (raw, json) Hash identifier: GFmlA4lc6QBVyLeh5WDN3aG3QZ4qzzcyrtsawtZLlPY= Subject key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C377FAB61FB32FB9268816F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Dec 2025 12:21:20 +0000 Certificate not after: Mon 07 Feb 2028 17:59:37 +0000 Subordinate resources: IP: 76.76.19.0/24 IP: 198.202.26.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:7f:ab:61:fb:32:fb:92:68:81:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 17 12:21:20 2025 GMT Not After : Feb 7 17:59:37 2028 GMT Subject: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:55:65:f1:d2:16:45:14:db:dd:ba:9f:48: d1:96:3b:40:45:37:16:9c:f1:99:8b:e0:47:e7:b9: 54:cd:8e:65:a4:55:74:00:2e:37:8f:ef:54:d2:96: b6:ba:92:2c:4c:36:34:a0:65:03:71:09:d4:2f:b4: 97:23:49:72:25:45:8a:70:20:ca:0c:74:87:33:9c: dd:e3:4c:ad:ea:ba:20:af:2d:82:69:a4:cc:d5:90: 45:72:d9:ac:51:67:2c:a9:aa:02:b0:92:d6:6e:3b: 24:0f:ab:0a:52:49:a0:fe:26:73:60:c1:76:7f:4e: 21:ce:90:5d:30:f0:01:26:09:54:f6:61:0b:5f:5d: 9d:ba:69:39:4a:dd:08:71:59:de:08:f1:39:96:85: 29:1a:c5:b7:52:83:8b:b8:b4:80:2c:6e:e2:3d:8d: 60:2e:ef:ae:fe:69:7e:46:62:b1:e8:8a:26:49:56: f7:29:83:4e:cc:1c:a0:87:1d:e0:48:26:74:96:fe: ce:ab:df:74:ee:b2:6e:08:fe:82:fa:7d:d2:a2:4f: 31:ee:54:ba:f1:3a:aa:ce:e9:25:e6:d8:dc:ed:87: 09:f1:76:a8:8e:1f:0d:5d:67:93:0c:38:15:05:4a: 0a:55:e1:2e:ec:2c:58:90:8f:9e:1d:ec:9a:24:c6: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 76.76.19.0/24 198.202.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c1:40:2d:15:7f:1c:2c:38:b9:34:8d:ac:b1:36:ee:14:ba: 5c:67:06:b9:e4:44:c6:da:d2:41:06:52:00:5b:6b:07:cf:8a: d2:d8:46:57:b6:98:49:90:04:3c:9d:cd:a1:11:96:98:ad:60: fa:42:61:a1:b8:aa:76:ef:18:6c:92:8c:45:f4:0a:75:31:b0: c1:e5:f4:86:7e:b4:fd:0c:bd:8c:f0:b6:52:ab:91:ab:45:af: c5:ca:da:1a:81:dc:63:88:32:28:e6:76:08:88:cb:09:4c:48: 08:a5:9c:aa:0d:cf:d8:f0:93:8f:0d:ae:cb:af:15:43:0b:b6: 78:b5:15:f0:7b:3b:6e:2b:d2:15:d3:9c:02:fa:a1:c1:5a:5c: e0:95:c0:31:b6:15:b8:c0:be:72:71:ab:ac:a2:09:57:1b:bc: 47:57:a9:d9:77:b2:50:89:f1:d4:cc:82:5b:e4:ee:80:b3:05: 32:3e:a2:01:ae:94:c5:f7:5d:19:81:5c:85:b5:a3:f2:8d:75: c6:57:a9:cd:90:92:f6:9e:d0:5a:97:f9:d7:c7:e2:0a:49:a7: bc:7d:f6:3e:29:11:89:4b:15:bc:af:60:a1:80:15:1b:5d:30: 9d:bf:d8:ea:19:b3:5f:f1:9c:b4:3c:1f:9c:c3:f7:ef:ca:b6: d1:6f:99:08 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEw3f6th+zL7kmiBb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxNzEyMjEyMFoXDTI4MDIwNzE3NTkzN1owLzEtMCsGA1UEAxMk ZjAyM2NlNWQtN2FmOC00MzQ1LWEyZDktZDIyZTc3ZWZhNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG9VZfHSFkUU2926n0jRljtARTcWnPGZi+BH 57lUzY5lpFV0AC43j+9U0pa2upIsTDY0oGUDcQnUL7SXI0lyJUWKcCDKDHSHM5zd 40yt6rogry2CaaTM1ZBFctmsUWcsqaoCsJLWbjskD6sKUkmg/iZzYMF2f04hzpBd MPABJglU9mELX12dumk5St0IcVneCPE5loUpGsW3UoOLuLSALG7iPY1gLu+u/ml+ RmKx6IomSVb3KYNOzByghx3gSCZ0lv7Oq9907rJuCP6C+n3Sok8x7lS68Tqqzukl 5tjc7YcJ8Xaojh8NXWeTDDgVBUoKVeEu7CxYkI+eHeyaJMaskwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFE+C7uJB9Ji2GVMPvrIAe9Gd5uWEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdlZmE2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwMjNjZTVkLTdhZjgtNDM0NS1h MmQ5LWQyMmU3N2VmYTY4ZC9mMDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdl ZmE2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABMTBMDBADGyhowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYsFALRV/HCw4 uTSNrLE27hS6XGcGueRExtrSQQZSAFtrB8+K0thGV7aYSZAEPJ3NoRGWmK1g+kJh obiqdu8YbJKMRfQKdTGwweX0hn60/Qy9jPC2UquRq0WvxcraGoHcY4gyKOZ2CIjL CUxICKWcqg3P2PCTjw2uy68VQwu2eLUV8Hs7bivSFdOcAvqhwVpc4JXAMbYVuMC+ cnGrrKIJVxu8R1ep2XeyUInx1MyCW+TugLMFMj6iAa6UxfddGYFchbWj8o11xlep zZCS9p7QWpf518fiCkmnvH32PikRiUsVvK9goYAVG10wnb/Y6hmzX/GctDwfnMP3 78q20W+ZCA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:55:31 2025 by rpki-client