This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer File: e085fa70-312c-4786-b587-bdb5fc87c36e.cer (raw, json) Hash identifier: sIN8X4fS1xCkAnBZELoxP84TXBYtey1TdYuXmuUXLDs= Subject key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584BEC48EA2C2B7E040C570A8E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 13:45:23 +0000 Certificate not after: Wed 23 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 32098 AS: 55259 IP: 66.208.112.0/20 IP: 68.64.224.0/20 IP: 162.251.216.0/22 IP: 192.34.148.0/22 IP: 199.19.100.0/22 IP: 199.101.140.0/23 IP: 2604:d600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:48:ea:2c:2b:7e:04:0c:57:0a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 20 13:45:23 2025 GMT Not After : Feb 23 13:45:23 2028 GMT Subject: CN=e085fa70-312c-4786-b587-bdb5fc87c36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:47:8d:0b:d7:8e:fd:dc:4b:4d:29:68:08:8d: 24:af:22:be:19:7b:71:be:43:0e:aa:c5:01:15:7a: 78:3e:72:18:ba:78:7d:61:db:e5:23:fd:52:7f:50: a1:78:8b:d1:1e:36:07:e6:28:c9:76:27:7c:22:eb: 37:2d:ff:34:ab:55:86:83:2f:8b:60:46:45:25:ef: a1:36:ef:da:ab:1e:ac:62:a0:68:e7:53:00:d7:2d: 7d:8b:a7:e9:09:cf:de:ad:82:50:c5:01:73:f8:37: d8:c8:77:82:47:aa:c0:f7:09:5d:09:69:4a:72:04: bf:fc:d0:8e:c4:a7:fd:ed:20:84:48:80:e9:66:0d: b1:f9:f0:8c:1b:e5:b3:38:4d:ba:fc:00:4e:bc:a3: 5c:33:c0:e5:38:bf:b8:05:19:86:59:29:3b:06:ae: f5:8c:6c:12:46:5f:f7:04:4a:22:2e:2c:ff:7b:6b: 96:6c:08:91:1c:f4:2b:f3:74:2c:c7:a6:47:4a:d6: 23:94:67:8d:83:fb:e3:6a:f7:3b:33:c1:67:c5:60: 4f:15:40:da:4f:72:60:53:b1:7e:1f:d5:65:19:43: b0:62:9e:e4:e1:3e:4d:f4:c0:f6:42:b8:b4:f0:54: aa:83:6f:bd:14:55:18:b9:fe:3e:42:af:0b:a8:6a: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.208.112.0/20 68.64.224.0/20 162.251.216.0/22 192.34.148.0/22 199.19.100.0/22 199.101.140.0/23 IPv6: 2604:d600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32098 55259 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ae:83:c8:fc:47:ba:7e:fa:7b:18:db:0e:5f:3b:ed:1d:0e: d8:69:b9:8d:40:3c:6f:4c:10:b7:cb:cc:2a:6f:28:d2:ed:54: c9:69:60:d5:d4:99:58:34:bb:d9:69:b5:53:9e:ed:d1:0d:12: b3:4f:20:58:d9:a2:6b:b3:95:be:1c:a7:38:6d:1c:a7:ec:cb: 66:e0:9d:f6:e1:f2:6f:22:a2:b3:7c:14:27:87:08:88:d1:57: f4:7f:ae:d7:f7:7b:8d:b4:7d:1b:0e:1b:c8:d9:d6:59:b9:6c: 7e:37:ff:ac:69:c4:47:8f:3d:14:52:30:66:8b:df:75:43:b2: 3a:e1:85:30:b3:d8:3e:68:0c:90:da:fc:a2:31:74:c6:85:87: 17:9b:0f:f4:85:3d:fd:ff:b8:58:37:28:df:b2:8f:b0:93:c8: a5:57:2b:7a:3f:2b:ba:18:d9:67:8e:64:3d:63:2a:19:b8:a8: 49:90:de:fe:94:ef:1c:08:f3:f4:b5:27:e7:8b:e8:e3:e0:3e: e5:2d:0a:af:72:c3:2b:61:d4:33:f8:6e:44:0e:22:9e:9d:8c: cc:87:1e:2e:59:cb:70:a2:dd:8d:a8:be:6b:82:4e:39:97:c5: d8:22:15:85:8a:c2:af:4e:6f:6e:2e:d1:db:43:15:08:42:42: 8d:bd:a0:ce -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIUAQ0Mn0MoWEvsSOosK34EDFcKjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MTEyMDEzNDUyM1oXDTI4MDIyMzEzNDUyM1owLzEtMCsGA1UEAxMk ZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdjMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5keNC9eO/dxLTSloCI0kryK+GXtxvkMOqsUB FXp4PnIYunh9YdvlI/1Sf1CheIvRHjYH5ijJdid8Ius3Lf80q1WGgy+LYEZFJe+h Nu/aqx6sYqBo51MA1y19i6fpCc/erYJQxQFz+DfYyHeCR6rA9wldCWlKcgS//NCO xKf97SCESIDpZg2x+fCMG+WzOE26/ABOvKNcM8DlOL+4BRmGWSk7Bq71jGwSRl/3 BEoiLiz/e2uWbAiRHPQr83Qsx6ZHStYjlGeNg/vjavc7M8FnxWBPFUDaT3JgU7F+ H9VlGUOwYp7k4T5N9MD2Qri08FSqg2+9FFUYuf4+Qq8LqGqimwIDAQABo4IETDCC BEgwHQYDVR0OBBYEFPsBWSYlauMn+H780ZxX4ns0G1huMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l MDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UwODVmYTcwLTMxMmMtNDc4Ni1i NTg3LWJkYjVmYzg3YzM2ZS9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4 N2MzNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARC0HADBAREQOADBAKi+9gDBALAIpQDBALHE2QD BAHHZYwwDQQCAAIwBwMFACYE1gAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICfWIC AwDX2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAZroPI/Ee6fvp7GNsOXzvtHQ7YabmNQDxvTBC3y8wqbyjS 7VTJaWDV1JlYNLvZabVTnu3RDRKzTyBY2aJrs5W+HKc4bRyn7Mtm4J324fJvIqKz fBQnhwiI0Vf0f67X93uNtH0bDhvI2dZZuWx+N/+sacRHjz0UUjBmi991Q7I64YUw s9g+aAyQ2vyiMXTGhYcXmw/0hT39/7hYNyjfso+wk8ilVyt6Pyu6GNlnjmQ9YyoZ uKhJkN7+lO8cCPP0tSfni+jj4D7lLQqvcsMrYdQz+G5EDiKenYzMhx4uWctwot2N qL5rgk45l8XYIhWFisKvTm9uLtHbQxUIQkKNvaDO -----END CERTIFICATE-----Generated at Sun Nov 23 23:09:20 2025 by rpki-client