This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer File: f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer (raw, json) Hash identifier: V59cAusjMXP9c8y0E9PaviANqybCfFCOOb2bu85xrao= Subject key identifier: 0E:A8:54:9E:2A:E8:58:8A:5C:54:9E:0B:BE:FF:1B:A6:D6:C3:8C:F0 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C3D3D3FAEF8F175C8C685C9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Dec 2025 13:42:21 +0000 Certificate not after: Wed 22 Mar 2028 23:14:19 +0000 Subordinate resources: IP: 23.151.132.0/24 IP: 2602:f48b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:3d:3f:ae:f8:f1:75:c8:c6:85:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 19 13:42:21 2025 GMT Not After : Mar 22 23:14:19 2028 GMT Subject: CN=f0e3e332-2e13-47b7-be3c-bd2f40db6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:ad:7c:85:20:80:ca:65:a2:62:40:7e:b0: 7b:a1:bf:d9:e9:03:96:4d:d1:20:ff:5f:75:e0:b4: 9b:38:65:4e:48:aa:64:52:1e:19:cf:6b:43:aa:37: 21:ed:cb:55:a9:23:b8:11:e7:f4:e5:e8:2b:97:42: 7d:89:01:2a:10:79:ab:26:f5:fe:ad:f6:d4:59:73: a9:3e:9c:ed:88:8a:e1:66:0e:c5:21:ef:df:90:ff: 64:5d:72:92:b0:7b:03:76:89:13:3b:02:34:be:81: 1f:d0:44:28:44:96:9c:92:be:b6:90:86:18:47:da: 69:b7:43:06:8d:4d:7f:71:a0:fe:6c:1a:e2:3a:cb: d9:28:84:0a:5d:90:84:46:2a:d8:60:eb:63:82:40: 4d:89:77:18:cf:4d:43:6b:b3:ae:6c:7e:64:08:52: 61:76:5b:2e:eb:c1:61:30:42:bb:82:34:74:91:40: 02:20:09:91:5c:0b:e3:ea:94:9a:55:78:5d:e0:2d: 3f:6e:6f:4d:af:54:19:53:f4:fb:bb:2c:a4:f4:b1: be:48:df:33:31:13:93:f3:c2:d2:85:f3:22:a3:59: e4:fa:f5:18:d4:ec:06:8a:04:34:42:61:34:7e:21: 71:6f:6e:a9:c4:3c:6d:c3:30:65:f0:d2:8f:db:e5: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:54:9E:2A:E8:58:8A:5C:54:9E:0B:BE:FF:1B:A6:D6:C3:8C:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.132.0/24 IPv6: 2602:f48b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c1:d4:b4:6a:ae:79:4f:ef:f8:d4:f7:a8:b7:5d:57:70:a8: 7e:2e:73:c5:c9:65:d6:a3:c6:e7:2c:b3:db:bf:b9:3e:de:de: 8a:78:1b:cd:34:be:ae:07:88:8a:24:88:ed:17:ec:b1:76:09: ee:39:21:79:f6:08:ac:3e:29:ad:51:80:ee:bb:7b:e5:88:9b: 45:2c:71:8a:e7:a5:3b:bf:c0:7e:06:f7:9b:56:08:91:ba:9e: bd:bd:7a:59:92:49:e6:56:d2:47:ec:b8:69:0c:62:96:96:5f: 3e:14:b9:9d:f0:d6:cb:30:fb:7d:e8:24:08:7a:14:7b:f9:1a: bf:17:9a:9f:81:02:6e:dd:86:e6:26:ef:0b:8a:20:22:68:39: 93:a4:d7:e2:bf:8c:a9:53:d8:cb:a6:53:90:7d:ee:3f:fc:0e: 88:dc:ee:b7:f3:f4:55:b0:7c:1c:47:ee:0c:f1:f6:71:65:3f: 95:8f:76:6a:98:24:6b:11:85:6d:1f:f1:71:26:51:ed:b3:e1: 3a:77:0b:e5:2a:f4:38:35:9f:dc:4e:72:92:c1:a0:fd:d7:6b: ca:91:7e:21:c6:39:9f:02:c3:1d:98:b6:ca:48:7c:74:2e:3c: 8c:4b:7d:e2:7b:f2:35:92:6f:de:92:6d:ca:a0:cd:eb:55:08: e1:60:cd:36 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEw9PT+u+PF1yMaFycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxOTEzNDIyMVoXDTI4MDMyMjIzMTQxOVowLzEtMCsGA1UEAxMk ZjBlM2UzMzItMmUxMy00N2I3LWJlM2MtYmQyZjQwZGI2ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPmtfIUggMplomJAfrB7ob/Z6QOWTdEg/191 4LSbOGVOSKpkUh4Zz2tDqjch7ctVqSO4Eef05egrl0J9iQEqEHmrJvX+rfbUWXOp PpztiIrhZg7FIe/fkP9kXXKSsHsDdokTOwI0voEf0EQoRJackr62kIYYR9ppt0MG jU1/caD+bBriOsvZKIQKXZCERirYYOtjgkBNiXcYz01Da7OubH5kCFJhdlsu68Fh MEK7gjR0kUACIAmRXAvj6pSaVXhd4C0/bm9Nr1QZU/T7uyyk9LG+SN8zMROT88LS hfMio1nk+vUY1OwGigQ0QmE0fiFxb26pxDxtwzBl8NKP2+UbfQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFA6oVJ4q6FiKXFSeC77/G6bWw4zwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MGUzZTMzMi0yZTEzLTQ3YjctYmUzYy1iZDJmNDBkYjY4NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwZTNlMzMyLTJlMTMtNDdiNy1i ZTNjLWJkMmY0MGRiNjg2NC9mMGUzZTMzMi0yZTEzLTQ3YjctYmUzYy1iZDJmNDBk YjY4NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXl4QwDgQCAAIwCAMGBCYC9IsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AATB1LRqrnlP7/jU96i3XVdwqH4uc8XJZdajxucss9u/uT7e3op4G800vq4HiIok iO0X7LF2Ce45IXn2CKw+Ka1RgO67e+WIm0UscYrnpTu/wH4G95tWCJG6nr29elmS SeZW0kfsuGkMYpaWXz4UuZ3w1ssw+33oJAh6FHv5Gr8Xmp+BAm7dhuYm7wuKICJo OZOk1+K/jKlT2MumU5B97j/8Dojc7rfz9FWwfBxH7gzx9nFlP5WPdmqYJGsRhW0f 8XEmUe2z4Tp3C+Uq9Dg1n9xOcpLBoP3Xa8qRfiHGOZ8Cwx2YtspIfHQuPIxLfeJ7 8jWSb96SbcqgzetVCOFgzTY= -----END CERTIFICATE-----Generated at Fri Dec 19 19:06:16 2025 by rpki-client