This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer File: 00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer (raw, json) Hash identifier: L6ufiQe4ZsvApLGe72cAyLXaRPQtUVq/mHwlJLRSwWo= Subject key identifier: FF:C4:90:5F:CA:F4:B3:3A:69:E9:56:DA:D4:CD:1A:C5:FC:7A:66:F5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BFF5DBA2CF4ACEEF901034F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Nov 2025 09:47:41 +0000 Certificate not after: Wed 01 Mar 2028 09:47:41 +0000 Subordinate resources: IP: 23.150.76.0/24 IP: 2602:f4b4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:5d:ba:2c:f4:ac:ee:f9:01:03:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 27 09:47:41 2025 GMT Not After : Mar 1 09:47:41 2028 GMT Subject: CN=00cffc7d-f9dd-4e0e-8d5c-9570a317b596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:cf:98:8d:a7:a3:cb:21:a2:30:3d:05:bb: 6d:cf:02:a8:c5:9c:bf:8a:e1:d7:7b:c0:d9:db:db: 9d:b2:b5:5c:30:4d:b8:94:c2:4b:1a:f4:9e:34:bf: 83:46:fa:8f:65:9a:5f:fd:fd:b6:71:a9:49:a8:d9: 2d:d8:ca:18:9b:c9:91:5e:02:73:a0:c2:7c:e3:86: 09:a4:17:2b:79:d5:8a:69:a1:c0:2b:95:43:e4:29: 71:c0:a2:6e:13:9f:8d:76:01:93:d9:b9:24:50:6b: ad:80:ee:34:20:5b:df:70:63:f3:53:6d:12:72:05: 1f:73:01:d8:44:cf:9f:77:ec:8e:65:a3:6f:20:51: 0e:0d:5e:a7:10:4d:dd:49:be:56:bb:32:c7:cb:f9: 0a:d7:40:c4:01:f7:7b:a9:cd:f5:3d:5a:8b:b7:29: 5a:33:91:84:d9:ae:43:a8:e0:dd:1c:9b:a6:65:ab: 31:28:28:92:72:cc:2e:93:b9:ab:57:cb:cd:46:84: 4b:ce:23:de:1f:e6:59:1a:45:04:6f:8f:ca:b5:c8: 02:e2:b5:6c:28:4d:54:9d:8e:97:4a:67:f7:c6:9c: fd:d8:49:66:a6:89:c2:be:45:75:22:71:b7:42:f3: 40:00:5f:1b:12:d8:03:7e:19:81:88:dd:6d:28:41: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C4:90:5F:CA:F4:B3:3A:69:E9:56:DA:D4:CD:1A:C5:FC:7A:66:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.76.0/24 IPv6: 2602:f4b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5d:74:b3:9b:fd:55:c3:77:ff:ca:77:30:3a:b5:8e:98:04: 76:68:78:85:29:d1:1c:70:0d:2e:ba:6a:4e:43:07:f0:1b:4f: 40:e3:1f:b2:a9:bf:30:23:a0:6b:f5:70:89:5b:03:a1:c8:4b: 37:e6:ee:26:a0:c4:2b:df:ef:1c:32:b3:15:c6:fe:c9:ea:aa: e4:a8:9c:6f:70:44:c8:b4:17:c3:5d:da:7d:aa:cd:4e:e4:16: 67:d5:05:e3:89:5b:57:ea:e8:66:f7:5d:7b:d8:78:6f:5a:95: c0:86:ac:a1:dc:40:5f:fd:ce:67:0f:41:cd:cb:3b:10:27:ef: 06:ad:8a:03:48:76:db:66:76:01:fb:d1:d3:6e:af:ae:46:51: 3b:fa:a2:6b:03:3b:fd:f5:b5:43:7a:f1:18:22:0b:e5:99:0b: b6:ca:ba:bb:69:5e:ff:b3:3b:34:30:37:2b:ee:63:b1:7d:9d: 8c:82:c8:d1:c0:a9:85:b8:7e:c7:8f:2e:17:cc:19:57:2d:7f: d0:23:99:6b:bf:21:76:80:f4:09:2a:da:ba:f4:48:cf:d0:75: 18:78:a7:2f:b3:74:fc:0d:76:de:b9:8f:67:a6:d6:58:c4:34: 29:7e:4e:aa:4c:b4:62:1d:2f:ca:d0:ce:d0:6b:98:a9:95:34: 99:2b:bc:0d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEv/Xbos9Kzu+QEDT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyNzA5NDc0MVoXDTI4MDMwMTA5NDc0MVowLzEtMCsGA1UEAxMk MDBjZmZjN2QtZjlkZC00ZTBlLThkNWMtOTU3MGEzMTdiNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZHPmI2no8shojA9BbttzwKoxZy/iuHXe8DZ 29udsrVcME24lMJLGvSeNL+DRvqPZZpf/f22calJqNkt2MoYm8mRXgJzoMJ844YJ pBcredWKaaHAK5VD5ClxwKJuE5+NdgGT2bkkUGutgO40IFvfcGPzU20ScgUfcwHY RM+fd+yOZaNvIFEODV6nEE3dSb5WuzLHy/kK10DEAfd7qc31PVqLtylaM5GE2a5D qODdHJumZasxKCiScswuk7mrV8vNRoRLziPeH+ZZGkUEb4/KtcgC4rVsKE1UnY6X Smf3xpz92ElmponCvkV1InG3QvNAAF8bEtgDfhmBiN1tKEG+BwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFP/EkF/K9LM6aelW2tTNGsX8emb1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w MGNmZmM3ZC1mOWRkLTRlMGUtOGQ1Yy05NTcwYTMxN2I1OTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzAwY2ZmYzdkLWY5ZGQtNGUwZS04 ZDVjLTk1NzBhMzE3YjU5Ni8wMGNmZmM3ZC1mOWRkLTRlMGUtOGQ1Yy05NTcwYTMx N2I1OTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlkwwDgQCAAIwCAMGACYC9LQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABhddLOb/VXDd//KdzA6tY6YBHZoeIUp0RxwDS66ak5DB/AbT0DjH7KpvzAjoGv1 cIlbA6HISzfm7iagxCvf7xwysxXG/snqquSonG9wRMi0F8Nd2n2qzU7kFmfVBeOJ W1fq6Gb3XXvYeG9alcCGrKHcQF/9zmcPQc3LOxAn7watigNIdttmdgH70dNur65G UTv6omsDO/31tUN68RgiC+WZC7bKurtpXv+zOzQwNyvuY7F9nYyCyNHAqYW4fseP LhfMGVctf9AjmWu/IXaA9Akq2rr0SM/QdRh4py+zdPwNdt65j2em1ljENCl+TqpM tGIdL8rQztBrmKmVNJkrvA0= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:47 2025 by rpki-client