This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer File: 0699cec8-3851-41f8-aee8-2e225865699c.cer (raw, json) Hash identifier: EpSxwsTwamBifBlb9Y2VIJlCX0/OW2rtBLS3XBhpKiU= Subject key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBD62189A15FA546AF5A15580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 18:33:08 +0000 Certificate not after: Sun 06 Feb 2028 18:33:08 +0000 Subordinate resources: AS: 8012 AS: 10517 AS: 11911 AS: 22260 AS: 23500 AS: 33349 AS: 36138 AS: 40375 -- 40376 AS: 401515 -- 401516 IP: 160.254.0.0/16 IP: 167.113.0.0/16 IP: 167.222.0.0/16 IP: 170.61.0.0/16 IP: 192.81.144.0/20 IP: 192.189.106.0 -- 192.189.108.255 IP: 198.62.170.0/24 IP: 198.205.0.0 -- 198.205.4.255 IP: 199.19.128.0/22 IP: 199.26.16.0/20 IP: 205.166.186.0/24 IP: 206.195.0.0/19 IP: 2604:1100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:62:18:9a:15:fa:54:6a:f5:a1:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 18:33:08 2025 GMT Not After : Feb 6 18:33:08 2028 GMT Subject: CN=0699cec8-3851-41f8-aee8-2e225865699c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:f9:7f:af:0f:8e:41:9d:e3:5d:3d:40:bd: bb:f4:b6:45:ba:7c:94:fa:fe:cc:e1:50:9d:a5:3f: 37:4e:73:32:1c:6f:3d:e7:8f:65:17:62:c8:cc:3e: c9:8a:9e:b6:7e:07:b2:69:00:4e:38:a0:e3:56:83: e1:5a:ca:66:f9:7f:c3:40:31:8e:b5:3a:2c:2c:a9: 6a:cd:91:48:ab:f6:9d:4e:f4:64:35:76:13:01:c5: 75:d1:a3:b0:a4:db:90:a7:11:fe:ac:b2:57:07:fc: 06:4b:0c:e7:6d:e5:94:8a:a0:95:85:3b:74:12:55: b9:87:fb:80:ae:35:c8:1f:a5:91:6e:28:96:15:9a: 33:1f:67:73:fc:de:13:75:56:1d:74:16:7f:9c:f2: c4:a8:3e:64:c8:8c:31:f6:f1:32:19:be:07:76:be: ec:60:5e:4e:a9:33:b6:03:6c:74:e4:4f:85:b1:c5: b8:94:cf:ea:e6:ba:8f:51:d1:b7:81:77:6e:56:e6: 14:13:f3:a6:18:6b:c4:c5:c4:e1:5b:f2:7a:33:f7: 30:77:a5:16:b8:7d:cf:e9:32:db:b1:b4:57:7a:50: 53:05:f3:3d:42:20:10:17:9a:98:ec:ff:ce:bd:1b: 89:f0:70:cd:2d:33:bd:2d:a8:d7:ad:73:69:54:bc: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 160.254.0.0/16 167.113.0.0/16 167.222.0.0/16 170.61.0.0/16 192.81.144.0/20 192.189.106.0-192.189.108.255 198.62.170.0/24 198.205.0.0-198.205.4.255 199.19.128.0/22 199.26.16.0/20 205.166.186.0/24 206.195.0.0/19 IPv6: 2604:1100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8012 10517 11911 22260 23500 33349 36138 40375-40376 401515-401516 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f1:3b:f9:10:df:cb:b7:e1:0c:b5:8c:bf:8e:2e:96:68:2c: a7:31:ce:72:8d:ae:e4:4b:e3:93:2f:68:2e:9c:56:b9:77:4c: 05:80:c4:8b:ff:eb:5b:53:a2:75:c5:70:8d:f4:06:da:0a:c8: 71:ef:d1:f2:6d:cc:93:cb:cb:18:59:7c:af:d5:40:f4:09:33: 1d:3f:e6:b0:b4:a5:75:79:4c:ea:2b:65:22:e3:ab:0c:86:6e: 48:48:ff:35:0e:f0:49:d6:08:4d:35:3a:78:ba:8b:48:40:c5: 4a:19:63:eb:55:ad:9c:e2:e4:a0:54:bf:24:13:89:02:f5:a3: c3:f5:fa:7e:c9:9b:29:b9:25:2d:09:b3:7f:c2:db:b7:42:f2: 16:93:20:d4:40:2b:29:eb:4d:90:73:b6:6d:e3:b7:4a:f8:64: f5:26:0e:c6:72:a2:3f:a0:f7:89:48:d3:ac:d4:78:85:85:4f: 33:d1:6d:ed:f7:a2:46:19:b4:2e:b2:02:49:59:69:9e:5b:82: 22:27:a6:64:08:70:9e:13:34:a8:69:24:ba:59:02:c3:3d:6a: 25:1f:aa:32:79:21:9e:aa:23:47:bc:c5:41:aa:9a:86:45:ea: d4:c1:d7:ed:b9:8f:99:3c:4a:87:54:71:a4:8a:c4:b5:86:48: b4:e8:4a:53 -----BEGIN CERTIFICATE----- MIIHljCCBn6gAwIBAgIUAQ0Mn0MoWEu9YhiaFfpUavWhVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzE4MzMwOFoXDTI4MDIwNjE4MzMwOFowLzEtMCsGA1UEAxMk MDY5OWNlYzgtMzg1MS00MWY4LWFlZTgtMmUyMjU4NjU2OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouD5f68PjkGd4109QL279LZFunyU+v7M4VCd pT83TnMyHG89549lF2LIzD7Jip62fgeyaQBOOKDjVoPhWspm+X/DQDGOtTosLKlq zZFIq/adTvRkNXYTAcV10aOwpNuQpxH+rLJXB/wGSwznbeWUiqCVhTt0ElW5h/uA rjXIH6WRbiiWFZozH2dz/N4TdVYddBZ/nPLEqD5kyIwx9vEyGb4Hdr7sYF5OqTO2 A2x05E+FscW4lM/q5rqPUdG3gXduVuYUE/OmGGvExcThW/J6M/cwd6UWuH3P6TLb sbRXelBTBfM9QiAQF5qY7P/OvRuJ8HDNLTO9LajXrXNpVLxusQIDAQABo4IEqDCC BKQwHQYDVR0OBBYEFAQ6E6Sa8RlsYLd0eT6qgvYSS+adMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w Njk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2NTY5OWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzA2OTljZWM4LTM4NTEtNDFmOC1h ZWU4LTJlMjI1ODY1Njk5Yy8wNjk5Y2VjOC0zODUxLTQxZjgtYWVlOC0yZTIyNTg2 NTY5OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwewYIKwYBBQUH AQcBAf8EbDBqMFkEAgABMFMDAwCg/gMDAKdxAwMAp94DAwCqPQMEBMBRkDAMAwQB wL1qAwQAwL1sAwQAxj6qMAsDAwDGzQMEAMbNBAMEAscTgAMEBMcaEAMEAM2mugME Bc7DADANBAIAAjAHAwUAJgQRADBLBggrBgEFBQcBCAEB/wQ8MDqgODA2AgIfTAIC KRUCAi6HAgJW9AICW8wCAwCCRQIDAI0qMAoCAwCdtwIDAJ24MAoCAwYgawIDBiBs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDxO/kQ38u34Qy1jL+OLpZoLKcxznKNruRL45MvaC6cVrl3TAWA xIv/61tTonXFcI30BtoKyHHv0fJtzJPLyxhZfK/VQPQJMx0/5rC0pXV5TOorZSLj qwyGbkhI/zUO8EnWCE01Oni6i0hAxUoZY+tVrZzi5KBUvyQTiQL1o8P1+n7Jmym5 JS0Js3/C27dC8haTINRAKynrTZBztm3jt0r4ZPUmDsZyoj+g94lI06zUeIWFTzPR be33okYZtC6yAklZaZ5bgiInpmQIcJ4TNKhpJLpZAsM9aiUfqjJ5IZ6qI0e8xUGq moZF6tTB1+25j5k8SodUcaSKxLWGSLToSlM= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:51 2025 by rpki-client