This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer File: 25c105b2-b3c3-4913-b15d-64cbbad1f227.cer (raw, json) Hash identifier: bN4GmZps5nfk9bo+S0BV2BzfplhQO23GSxLIu7g04vk= Subject key identifier: 8E:60:53:3C:4D:49:4E:C6:BB:A7:D4:5D:A2:53:4F:46:4D:F6:AD:1C Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BDA024E58C9750B2B0CB94CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Nov 2025 00:38:34 +0000 Certificate not after: Thu 17 Feb 2028 00:38:34 +0000 Subordinate resources: IP: 23.149.148.0/24 IP: 2602:f4cd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:02:4e:58:c9:75:0b:2b:0c:b9:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 14 00:38:34 2025 GMT Not After : Feb 17 00:38:34 2028 GMT Subject: CN=25c105b2-b3c3-4913-b15d-64cbbad1f227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:49:2c:bf:d3:12:e7:31:e0:cf:1b:ce:9d: 68:f4:8d:a3:69:46:28:81:cd:d4:80:7c:e3:91:f3: 31:7b:dd:db:0b:37:f5:20:19:cf:3b:ae:a6:89:eb: 48:e9:6b:76:c6:9e:8e:33:be:32:9a:8a:ef:05:67: 3c:9a:f9:27:b9:e5:9e:c2:0f:30:77:25:e0:99:0a: 2d:7e:5f:9c:f2:f1:50:9e:bb:21:7d:a6:68:a6:b2: ff:16:9d:ac:df:d8:d6:69:a0:bd:a6:e4:a6:0b:24: 3a:3c:a7:30:83:dd:fc:b4:f6:d7:a2:95:6c:1a:38: 36:6c:00:c9:5e:17:41:1a:56:1d:5a:15:d3:49:63: 68:69:b2:77:84:06:b4:bf:93:e2:69:3e:a3:ae:7f: f7:5e:af:b1:33:53:66:1d:ab:cd:fa:e2:29:6d:5c: 52:66:1b:c6:22:fd:20:94:21:cd:df:90:41:15:44: 99:5b:83:25:65:11:11:dc:09:fc:84:31:44:96:40: ab:b7:1c:60:7b:96:5f:bd:24:2a:62:b9:c0:c7:69: 08:84:0c:2d:50:a1:01:79:7f:f6:00:ff:72:2a:f1: 5a:62:22:5c:29:75:65:2b:49:3f:3a:0c:ff:98:cf: f5:56:19:ce:f1:13:5b:64:c3:34:e9:c8:71:e7:3a: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:60:53:3C:4D:49:4E:C6:BB:A7:D4:5D:A2:53:4F:46:4D:F6:AD:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.149.148.0/24 IPv6: 2602:f4cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:25:16:18:77:33:30:6d:90:80:8c:81:ee:f0:18:55:8c:fe: f9:54:3e:11:ad:8a:b8:17:45:25:cb:46:2b:96:c2:3a:7a:e4: d5:39:e6:24:2d:b1:46:fa:2b:87:52:3e:23:3a:42:c4:5f:f1: fc:14:f0:b1:96:83:5b:30:84:36:a6:b7:91:c4:43:cc:04:26: 19:2c:93:6f:1a:7a:28:e1:0b:a0:ae:86:7c:f3:d9:c1:6c:1e: d7:ab:a1:3b:ea:49:34:3b:bd:e5:0d:ee:28:58:24:a8:7c:b3: d8:f2:9a:b5:b7:da:15:99:bc:95:29:9e:63:09:39:ed:6d:e9: d1:79:01:ec:cd:5e:6c:68:b8:81:d1:8a:c5:da:3c:e6:90:aa: 37:81:bc:f3:69:61:5c:14:ff:d9:31:1e:9c:d1:30:f4:7a:33: cf:23:87:a7:ae:5d:81:eb:47:bb:02:5a:5a:6c:d2:20:58:21: 7e:ea:5d:16:ef:03:79:5d:e8:6f:a5:77:e8:b4:f9:86:c1:1e: 0a:f5:cc:9f:c4:75:91:de:d7:e3:c7:c9:0d:38:5c:fe:55:49: e0:b8:74:b6:61:16:21:24:22:bb:03:0a:b8:e3:0f:31:67:b6: c2:4e:09:a3:1d:13:f7:25:75:96:b2:69:e1:50:8a:68:49:0a: 72:ce:aa:a7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEvaAk5YyXULKwy5TMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTExNDAwMzgzNFoXDTI4MDIxNzAwMzgzNFowLzEtMCsGA1UEAxMk MjVjMTA1YjItYjNjMy00OTEzLWIxNWQtNjRjYmJhZDFmMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV9JLL/TEucx4M8bzp1o9I2jaUYogc3UgHzj kfMxe93bCzf1IBnPO66mietI6Wt2xp6OM74ymorvBWc8mvknueWewg8wdyXgmQot fl+c8vFQnrshfaZoprL/Fp2s39jWaaC9puSmCyQ6PKcwg938tPbXopVsGjg2bADJ XhdBGlYdWhXTSWNoabJ3hAa0v5PiaT6jrn/3Xq+xM1NmHavN+uIpbVxSZhvGIv0g lCHN35BBFUSZW4MlZRER3An8hDFElkCrtxxge5ZfvSQqYrnAx2kIhAwtUKEBeX/2 AP9yKvFaYiJcKXVlK0k/Ogz/mM/1VhnO8RNbZMM06chx5zotlwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI5gUzxNSU7Gu6fUXaJTT0ZN9q0cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y NWMxMDViMi1iM2MzLTQ5MTMtYjE1ZC02NGNiYmFkMWYyMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzI1YzEwNWIyLWIzYzMtNDkxMy1i MTVkLTY0Y2JiYWQxZjIyNy8yNWMxMDViMi1iM2MzLTQ5MTMtYjE1ZC02NGNiYmFk MWYyMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlZQwDgQCAAIwCAMGACYC9M0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AA0lFhh3MzBtkICMge7wGFWM/vlUPhGtirgXRSXLRiuWwjp65NU55iQtsUb6K4dS PiM6QsRf8fwU8LGWg1swhDamt5HEQ8wEJhksk28aeijhC6Cuhnzz2cFsHteroTvq STQ7veUN7ihYJKh8s9jymrW32hWZvJUpnmMJOe1t6dF5AezNXmxouIHRisXaPOaQ qjeBvPNpYVwU/9kxHpzRMPR6M88jh6euXYHrR7sCWlps0iBYIX7qXRbvA3ld6G+l d+i0+YbBHgr1zJ/EdZHe1+PHyQ04XP5VSeC4dLZhFiEkIrsDCrjjDzFntsJOCaMd E/cldZayaeFQimhJCnLOqqc= -----END CERTIFICATE-----Generated at Sat Nov 22 20:52:10 2025 by rpki-client