This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer File: f962bda9-74d1-450f-9fe9-e8b75952543b.cer (raw, json) Hash identifier: 5FMEWAJr2AT5+op454xHzN+mAl2nF3B9hl2h67GPA+o= Subject key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584C339CB2BFF35993A3E97A0340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Dec 2025 02:56:35 +0000 Certificate not after: Mon 20 Mar 2028 01:56:35 +0000 Subordinate resources: IP: 199.89.0.0/21 IP: 199.249.179.0 -- 199.249.182.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:9c:b2:bf:f3:59:93:a3:e9:7a:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Dec 16 02:56:35 2025 GMT Not After : Mar 20 01:56:35 2028 GMT Subject: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:f0:3b:13:ea:f9:c5:64:56:b0:4f:d9:b0: cb:b7:13:ab:90:47:95:0f:e8:c1:cf:fc:11:58:ed: 71:fc:7e:ca:60:9b:bc:66:2f:23:bf:1c:ec:e5:69: 96:4a:1f:f2:ed:71:d2:c4:06:56:f5:22:03:c6:22: bf:3d:5c:d0:5e:d2:ba:79:0c:83:fd:00:07:c6:eb: 8e:be:3f:fd:43:3f:46:1e:a5:08:66:81:68:fa:49: 68:3c:9d:a9:a9:1f:82:10:aa:56:da:ab:5b:4a:0b: c1:f8:0f:fa:a7:bd:18:c7:89:45:06:56:22:db:27: 3b:05:6a:fa:42:b9:30:fa:15:ac:17:2e:c6:00:4a: 13:c2:d0:86:11:84:36:b4:08:bd:0d:62:d9:00:ec: 42:11:1a:11:ec:ae:5c:f5:3f:75:90:7a:93:79:a5: 87:56:65:ce:c3:45:c7:73:e7:99:ed:bb:4a:d4:d8: 1c:fa:49:0e:c3:da:0c:0e:7c:c3:78:79:bd:77:b2: c6:8d:c4:a0:cc:e6:d1:cf:6f:72:cd:7c:74:39:e0: 1f:fe:08:03:4a:dd:67:bc:f9:3a:64:fd:83:ff:5b: 4a:5d:a4:62:64:dc:ed:27:ca:0d:8f:fa:4f:c5:1d: 22:62:0b:6a:c8:14:c6:f1:30:56:db:da:42:2c:cb: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.89.0.0/21 199.249.179.0-199.249.182.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2f:f5:d1:88:6f:66:de:c2:b2:05:4e:a8:35:86:f7:e5:f2: 48:c7:91:8e:c0:39:8a:70:7f:bc:03:4f:ab:86:8e:3e:18:3c: 19:66:8d:9b:8b:a6:3e:50:84:da:25:32:bc:f5:c3:20:2a:6e: 91:76:1f:a3:d8:7a:c4:a0:2e:41:d7:a9:cd:13:e8:f2:8e:e4: cf:e9:db:40:56:14:4d:05:37:88:ae:f5:ef:28:90:57:46:a2: 1b:66:02:a3:8d:98:66:c1:85:e0:17:4d:24:bf:40:5b:f9:98: 4e:0a:02:76:92:47:3f:4b:5a:37:2b:ee:9a:1c:3e:bf:a2:17: f8:c0:77:c6:b9:5f:20:f2:36:3f:26:2e:d3:fc:c1:78:4b:52: 6a:c6:99:8b:4a:ff:df:81:7e:c0:ac:79:f5:35:e5:69:dc:06: c9:93:ec:db:f8:47:2b:8f:8c:91:94:22:72:56:6a:f8:2f:13: 20:2c:9f:79:eb:35:e2:70:40:76:0e:53:25:bc:d7:d5:1c:81: 72:dc:0a:75:48:8a:54:d9:28:48:f9:9e:5d:ed:09:d3:75:01: 17:c3:29:af:b6:ee:26:fc:d0:72:d8:16:e8:04:6e:f7:62:c1: 4e:c1:43:23:48:48:74:5f:9e:1c:f1:f3:9a:a0:c4:bb:fd:03: 97:87:2f:96 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEwznLK/81mTo+l6A0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTIxNjAyNTYzNVoXDTI4MDMyMDAxNTYzNVowLzEtMCsGA1UEAxMk Zjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSDwOxPq+cVkVrBP2bDLtxOrkEeVD+jBz/wR WO1x/H7KYJu8Zi8jvxzs5WmWSh/y7XHSxAZW9SIDxiK/PVzQXtK6eQyD/QAHxuuO vj/9Qz9GHqUIZoFo+kloPJ2pqR+CEKpW2qtbSgvB+A/6p70Yx4lFBlYi2yc7BWr6 Qrkw+hWsFy7GAEoTwtCGEYQ2tAi9DWLZAOxCERoR7K5c9T91kHqTeaWHVmXOw0XH c+eZ7btK1Ngc+kkOw9oMDnzDeHm9d7LGjcSgzObRz29yzXx0OeAf/ggDSt1nvPk6 ZP2D/1tKXaRiZNztJ8oNj/pPxR0iYgtqyBTG8TBW29pCLMthUwIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFDYUFbY8+Uj8ki0vieUEEgrv9ovaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m OTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y5NjJiZGE5LTc0ZDEtNDUwZi05 ZmU5LWU4Yjc1OTUyNTQzYi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1 MjU0M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBAPHWQAwDAMEAMf5swMEAMf5tjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBl L/XRiG9m3sKyBU6oNYb35fJIx5GOwDmKcH+8A0+rho4+GDwZZo2bi6Y+UITaJTK8 9cMgKm6Rdh+j2HrEoC5B16nNE+jyjuTP6dtAVhRNBTeIrvXvKJBXRqIbZgKjjZhm wYXgF00kv0Bb+ZhOCgJ2kkc/S1o3K+6aHD6/ohf4wHfGuV8g8jY/Ji7T/MF4S1Jq xpmLSv/fgX7ArHn1NeVp3AbJk+zb+Ecrj4yRlCJyVmr4LxMgLJ956zXicEB2DlMl vNfVHIFy3Ap1SIpU2ShI+Z5d7QnTdQEXwymvtu4m/NBy2BboBG73YsFOwUMjSEh0 X54c8fOaoMS7/QOXhy+W -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:33 2025 by rpki-client