This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer File: 249f7a2c-0438-4d20-8f0b-095a38d1046f.cer (raw, json) Hash identifier: A3/4Vtdch1Elzvxx+WAHBh5JPeCDpXJr/bYbHnTWRNY= Subject key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BEB0EAEB7F82016A8D26C3F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Nov 2025 03:12:15 +0000 Certificate not after: Wed 23 Feb 2028 03:12:15 +0000 Subordinate resources: AS: 7441 IP: 207.189.128.0/20 IP: 207.189.162.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:eb:0e:ae:b7:f8:20:16:a8:d2:6c:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 20 03:12:15 2025 GMT Not After : Feb 23 03:12:15 2028 GMT Subject: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:86:fb:ce:75:41:8e:fa:2a:af:be:fc:84: cb:20:64:8f:66:ca:6a:fa:6d:ca:57:7b:4c:f8:89: 24:b7:77:61:04:98:ff:2d:ff:0f:c7:21:a6:90:85: 21:27:b2:c6:4a:6a:0d:52:08:7c:f4:6b:9b:81:55: 34:79:fd:c8:64:c8:3a:cf:e1:3f:b8:41:b1:a7:08: d6:eb:c8:ed:d3:be:36:64:68:0e:4c:0a:ed:76:d2: 9e:61:ad:56:f8:bc:57:08:43:c8:06:35:14:0a:a0: 09:ed:5a:e7:54:48:83:f8:a9:af:79:5f:be:4b:a6: 0f:e5:9b:d7:02:9c:37:e2:3d:98:66:d3:d6:36:4b: 0e:93:9d:51:12:e3:f7:94:72:79:d9:71:b8:11:52: a0:de:c2:9b:be:26:04:05:e0:9d:b1:c5:44:59:8e: 1a:36:68:f6:a0:9a:46:48:06:88:ac:30:3e:bb:c2: 98:1c:c3:c1:1f:f2:c1:e3:33:ec:4d:7a:91:df:17: 89:3a:08:ef:ed:ba:57:08:db:c9:59:3c:18:56:7f: a8:81:e7:21:54:18:3f:c6:17:e4:0e:7d:7b:2a:71: 9a:33:33:07:bc:6f:4f:d7:02:0d:1f:b7:d8:cd:39: 66:c7:e5:b7:db:7f:f7:10:22:c2:57:9b:15:9c:7a: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 207.189.128.0/20 207.189.162.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0c:ce:17:9a:df:79:4d:2a:e7:19:c9:25:0b:77:7a:89:47: a7:cc:20:76:96:00:19:87:e8:90:69:40:5d:a8:1e:b6:b1:8c: 5a:74:1f:09:70:ca:3e:9f:bf:2c:16:3a:40:10:41:c7:c2:5f: a4:4f:df:94:b5:95:42:f6:1b:b5:61:db:2e:63:45:82:e8:2f: 87:7d:fa:b6:98:e7:7d:8c:eb:c7:ff:0a:15:21:5c:ec:56:0b: 6b:ba:a7:9d:24:e8:5f:07:3c:f3:df:2c:08:96:08:7f:60:b6: ca:04:14:4c:72:6c:c9:aa:2c:f1:42:0b:6d:98:f2:39:42:a7: 9a:e3:7a:90:93:cc:59:7f:16:d4:94:a8:4a:1b:56:3e:68:3f: 2f:e9:bc:4b:e4:4f:ea:00:31:3f:44:f6:df:df:e1:ca:ba:df: 0c:18:8a:d3:8f:2b:2d:e6:6a:51:a8:52:e9:dc:5c:f3:46:99: 24:20:3e:03:59:76:36:dd:fe:e7:6a:9e:40:ba:4c:95:af:26: d0:b7:95:ed:60:f3:e7:c4:ca:4d:e2:90:4b:38:43:10:ee:9c: b1:73:80:10:5b:00:ee:b3:07:98:ca:31:19:a9:4e:d0:b0:13: 64:76:5f:ac:e9:7b:1c:68:9c:19:c5:a8:a7:73:a3:f4:dc:e7: 8a:4f:6c:ee -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEvrDq63+CAWqNJsPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEyMDAzMTIxNVoXDTI4MDIyMzAzMTIxNVowLzEtMCsGA1UEAxMk MjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEwNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5OG+851QY76Kq++/ITLIGSPZspq+m3KV3tM +Ikkt3dhBJj/Lf8PxyGmkIUhJ7LGSmoNUgh89GubgVU0ef3IZMg6z+E/uEGxpwjW 68jt0742ZGgOTArtdtKeYa1W+LxXCEPIBjUUCqAJ7VrnVEiD+KmveV++S6YP5ZvX Apw34j2YZtPWNksOk51REuP3lHJ52XG4EVKg3sKbviYEBeCdscVEWY4aNmj2oJpG SAaIrDA+u8KYHMPBH/LB4zPsTXqR3xeJOgjv7bpXCNvJWTwYVn+ogechVBg/xhfk Dn17KnGaMzMHvG9P1wINH7fYzTlmx+W323/3ECLCV5sVnHoTmwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFDWNheisxwI/wCJaA10pLZ2Oe00pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y NDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzI0OWY3YTJjLTA0MzgtNGQyMC04 ZjBiLTA5NWEzOGQxMDQ2Zi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhk MTA0NmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBATPvYADBADPvaIwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICHREwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAYwzOF5rfeU0q5xnJJQt3eolHp8wgdpYAGYfokGlA XagetrGMWnQfCXDKPp+/LBY6QBBBx8JfpE/flLWVQvYbtWHbLmNFgugvh336tpjn fYzrx/8KFSFc7FYLa7qnnSToXwc8898sCJYIf2C2ygQUTHJsyaos8UILbZjyOUKn muN6kJPMWX8W1JSoShtWPmg/L+m8S+RP6gAxP0T239/hyrrfDBiK048rLeZqUahS 6dxc80aZJCA+A1l2Nt3+52qeQLpMla8m0LeV7WDz58TKTeKQSzhDEO6csXOAEFsA 7rMHmMoxGalO0LATZHZfrOl7HGicGcWop3Oj9Nznik9s7g== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client